Group Policy configuration options

Now we configure the Group Policy to apply password changes to this PC:

Password settings: The following options are available for configuring the local settings for passwords managed by this solution:

Name of administrator account to manage: This is for when you have changed the name of the default administrator or created a new account:

Password expiration policy: This setting ensures the policy does not conflict with the security policy defined at the domain level:

Enable or disable the policy: This setting allows you to create the policy in a disabled state, and then enable the policy when ready to deploy:

Once you have configured the policy and targeted it to an OU, you can run GPUpdate on the target machine, or wait for the default refresh time.

Test that the passwords have been changed and that you can successfully retrieve the password using the LAPS UI.