lithnet / access-manager

Access Manager provides web-based access to local admin (LAPS) passwords, BitLocker recovery keys, and just-in-time administrative access to Windows computers in a modern, secure, and user-friendly way.
Other
239 stars 20 forks source link

Do not display LAPS passwords right away to the user #155

Open PrzemyslawKlys opened 2 years ago

PrzemyslawKlys commented 2 years ago

Is your feature request related to a problem? Please describe. Right now when you request LAPS/Bitlocker the password is clearly shown to the user on request. Could it be hidden initially and shown on demand? I do understand the short-lived password but our security department has this requirement "Not display the password upon entry".

Describe the solution you'd like Just a button that shows the password on demand, but initially the password stays hidden

Describe alternatives you've considered I considered telling security that they need to be reasonable and understand that LAPS will change the password within 1 hour.

Additional context We're looking for it as part of Enterprise, but I think it's pretty easy feature that standard could have it as well.