This message was deleted.

nonP we have on boot randomize the password via posh script as well as disable local account. Have not found a need to ever know the local password on a nonP system

Thanks @Hal Lange, yeah that's what I also thought. I don't see any need for a local admin account.

If you go the scripting way you can find some scripts in ControlUp GitHub repo https://github.com/controlup/script-library/tree/master/LAPS%20-%20Reset%20Account%20Password And if you're using ControlUp with Automated actions you can use a Scheduled Trigger to reset them every once in a while :)

We use laps on non-persistent, it works great. It's handy to provide the local pwd for some teams that need admin right for troubleshooting. Our script runs at boot time.

I use BISF to trigger the password update at boot time.

Something I wrote eons ago on how to be et LAPS deployed with MCS. https://mybrokencomputer.net/t/citrix-machine-creation-services-mcs-and-laps-local-admin-password-solution/43