# LAPS

The "Local Administrator Password Solution" (LAPS) provides management of local account passwords of domain joined computers. Passwords are stored in Active Directory (AD) and protected by ACL, so only eligible users can read it or request its reset.

## Enumerating LAPS access

Using `AdmPwd.PS.psd1`&#x20;

[https://www.powershellgallery.com/packages/AdmPwd.PS/6.3.1.0](https://www.powershellgallery.com/packages/AdmPwd.PS/6.3.1.0)

```powershell
Import-Module C:\AD\Tools\AdmPwd.PS\AdmPwd.PS.psd1
```

Enumerating for right holders

```powershell
Find-AdmPwdExtendedRights -Identity OUDistinguishedName
Get-DomainOU | %{Find-AdmPwdExtendedRights -Identity $_.distinguishedname}
```

## Accessing LAPS passwords

{% embed url="https://www.hackingarticles.in/credential-dumpinglaps/" %}



