How can I audit who retrieved a computer’s LAPS password (Get-LapsADPassword) in Active Directory?

Question

How can I audit who retrieved a computer’s LAPS password (Get-LapsADPassword) in Active Directory?

Ahmed Naveed 0

Hello,

We have LAPS (Local Administrator Password Solution) deployed in our environment. I need to audit and find out which account or user ran the PowerShell command that retrieved a computer’s LAPS password

Get-LapsADPassword -Identity "ABC-123" -AsPlainText

1 answer

Your answer

Answer 1

Marcin Policht 64,685 MVP Volunteer Moderator

Use https://free.blessedness.top/en-us/powershell/module/laps/set-lapsadauditing?view=windowsserver2025-ps

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Share via

How can I audit who retrieved a computer’s LAPS password (Get-LapsADPassword) in Active Directory?

1 answer

Your answer