Best Way to Deploy Custom Admin for LAPS on Windows Servers?

A scheduled task could be a good way to automate this too. You could set it to run weekly on a management server, ensuring that all new servers have the custom admin account set up. Group Policy could work here as well, depending on your environment.

I was thinking about using a solution like Ansible for managing accounts across Windows servers. It can help set up those accounts consistently and even fix configurations if the servers aren’t matching the desired setup. If you're looking for something PowerShell-centric, check out PowerShell Universal—it might be worth the investment.

You could definitely use Group Policy Preferences to create the custom admin account and add it to the admin group. It’s a straightforward method that works well!

When you say custom admin, are you referring to a non-built-in admin account? It's usually better for security to avoid using the built-in admin account. I'd suggest creating a separate account specifically for LAPS and managing that instead!