Auto-rotation of local admin password on Windows laptops

[njenkinson]

I am currently looking to implement a profile to a group similar to Apple's DEP where, once the laptop is configured the local admin password rotates every "x" hours. I can't seem to find documentation about this within the KB, if anyone has suggestions and/or have done this yourself any help would be greatly appreciated.

Thank you for reading!

Nolan

[Phil_Helmling]

Hi Nolan, my recommendation would be to write a powershell script to achieve this and use the schedule option when assigning it to a SmartGroup(s) like shown in the attached screenshot. We don't have the feature built into the platform, but there are three different feature requests that you could add weight to by voting:

https://euc-vmware.aha.io/ideas/ideas/WIND-I-120

https://euc-vmware.aha.io/ideas/ideas/MSFTI-I-78

https://euc-vmware.aha.io/ideas/ideas/MSFTI-I-343

[Phil_Helmling]

Hi again Nolan,

I wrote this script to achieve your base requirements. It is designed to be deployed with WS1 Scripts and requires the two variables set as part of the WS1 Scripts function. You set the frequency of run in the assignment.

https://github.com/helmlingp/WS1UEM_Scripts/blob/main/GenerateLocalAdministratorPassword.ps1

[njenkinson]

Thank you very much Phil! I really appreciate it. I will be utilizing this.

[ITCOO]

It would be worth looking at Windows LAPS.