search

joshua-d-miller / macOSLAPS

Swift binary that will change a local administrator password to a random generated password. Similar behavior to LAPS for Windows
MIT License
382 stars 57 forks source link

Setup #100

Open sfle298201 opened 11 months ago

sfle298201 commented 11 months ago

I have Active Directory, do we have to actually create a local account to use MacOS laps on each machine?

crsleeth commented 8 months ago

Yes. Or the local admin account needs to be created through automation/MDM. Be sure whatever setup you go with gives the account a Secure Token.

joshua-d-miller commented 5 months ago

@crsleeth is correct @sfle298201. You would either use MDM to create the administrator account to be used with LAPS or use a too lot create the administrator account on the device. When macOS devices are bound to AD they will write the password to the same field in AD as Windows devices do.