This session goes over my LAPS solution for macOS which utilizes Jamf for creating, cycling and storing the management of encoded unique local admin credentials.
There are many LAPS solutions out there, all of which do it slightly different to the last. My approach when creating this solution was to keep it simple but secure.
The core of the solution runs from two scripts, one for the creation and cycling of the LAPS account and one for decoding and viewing the LAPS password.
Included in the solution are simple switches for you to set password complexity - including number of characters and special characters - and a nice integration with Slack that you can add to a channel to give updates on LAPS creation, password cycles, password views and a reason for the request.
The session will briefly go over the setup and configuration with some demos of the solution in action.
14 окт 2024
