Share via


2.64 Attribute ms-LAPS-Password

This attribute is used by the Local Administrator Password Solution (LAPS) feature.

 cn: msLAPS-Password
 ldapDisplayName: msLAPS-Password
 attributeId: 1.2.840.113556.1.6.44.1.2
 attributeSyntax: 2.5.5.5
 omSyntax: 19
 isSingleValued: TRUE
 systemOnly: FALSE
 searchFlags: fPRESERVEONDELETE| fCONFIDENTIAL | fNEVERVALUEAUDIT | fRODCFilteredAttribute

Version-specific behavior: This attribute is added to Active Directory Domain Services (AD DS) by an Administrator.

The format of the JSON string stored in this attribute is as follows:

{"n":"Administrator","t":"1d8161b41c41cde","p":"A6a3#7%eb!5"}

where the supported name-value pairs are specified in the table that follows:

Name

Value

“n”

Contains the name of the managed account

“t”

Contains the UTC password update time, represented as a 64-bit hexadecimal number

“p”

Contains the clear-text password