Yo Motherboard

Has Anyone Used LAPS for Managing DSRM Passwords?

October 31, 2025 4 answers
Asked by TechWanderer2021
I'm curious if anyone has implemented LAPS to take care of DSRM passwords. I'm currently in the process of setting it up and wanted to gather some opinions before my change management meeting. Have any of you had experience with this, and if so, how has it worked out for you? Any issues you've encountered?
Active Directory DSRM LAPS password management sysadmin System Operations

Answers

ServerGuru88
I haven't used LAPS for DSRM passwords, only for desktops and servers. For DSRM, I prefer to store the passwords in a secure vault. The consensus from some more experienced folks in AD management seems to lean towards skipping LAPS for DSRM.
Reply to this answer
PasswordVaultPro
We actually use LAPS for DSRM because, when I first started, there were no records of those passwords. I also save the passwords in our vault on a schedule, so I can access them even if the domain goes down.
Reply to this answer
SecureSysAdmin
My biggest concern with using LAPS for DSRM is retrieving the password if Active Directory is down, which tends to be when you need it most.
Reply to this answer
LAPSenthusiast12
I don’t recommend LAPS for small environments—it feels risky and too much. For larger setups, I like that it can sync the DSRM password to a user account.
Reply to this answer

Add your answer

Answers are reviewed before publication.

Related Discussions