Welcome to the Chocolatey Community Package Repository! The packages found in this section of the site are provided, maintained, and moderated by the community.
Moderation
Every version of each package undergoes a rigorous moderation process before it goes live that typically includes:
- Security, consistency, and quality checking
- Installation testing
- Virus checking through VirusTotal
- Human moderators who give final review and sign off
More detail at Security and Moderation.
Organizational Use
If you are an organization using Chocolatey, we want your experience to be fully reliable. Due to the nature of this publicly offered repository, reliability cannot be guaranteed. Packages offered here are subject to distribution rights, which means they may need to reach out further to the internet to the official locations to download files at runtime.
Fortunately, distribution rights do not apply for internal use. With any edition of Chocolatey (including the free open source edition), you can host your own packages and cache or internalize existing community packages.
Disclaimer
Your use of the packages on this site means you understand they are not supported or guaranteed in any way. Learn more...
- Passing
- Failing
- Pending
- Unknown / Exempted

Downloads:
228,346
Downloads of v 6.2.0:
228,011
Last Update:
05 Oct 2020
Package Maintainer(s):
Software Author(s):
- Microsoft
Tags:
microsoft laps local admin account password solution security- Software Specific:
- Software Site
- Software License
- Software Docs
- Software Mailing List
- Package Specific:
- Package Source
- Package outdated?
- Package broken?
- Contact Maintainers
- Contact Site Admins
- Software Vendor?
- Report Abuse
- Download

Microsoft Local Administrator Password Solution (LAPS)
- Software Specific:
- Software Site
- Software License
- Software Docs
- Software Mailing List
- Package Specific:
- Package Source
- Package outdated?
- Package broken?
- Contact Maintainers
- Contact Site Admins
- Software Vendor?
- Report Abuse
- Download
Downloads:
228,346
Downloads of v 6.2.0:
228,011
Maintainer(s):
Software Author(s):
- Microsoft
Edit Package
To edit the metadata for a package, please upload an updated version of the package.
Chocolatey's Community Package Repository currently does not allow updating package metadata on the website. This helps ensure that the package itself (and the source used to build the package) remains the one true source of package metadata.
This does require that you increment the package version.
All Checks are Passing
2 Passing Test
To install Microsoft Local Administrator Password Solution (LAPS), run the following command from the command line or from PowerShell:
To upgrade Microsoft Local Administrator Password Solution (LAPS), run the following command from the command line or from PowerShell:
To uninstall Microsoft Local Administrator Password Solution (LAPS), run the following command from the command line or from PowerShell:
NOTE: This applies to both open source and commercial editions of Chocolatey.
1. Ensure you are set for organizational deployment
Please see the organizational deployment guide
2. Get the package into your environment-
Open Source or Commercial:
- Proxy Repository - Create a proxy nuget repository on Nexus, Artifactory Pro, or a proxy Chocolatey repository on ProGet. Point your upstream to https://chocolatey.org/api/v2. Packages cache on first access automatically. Make sure your choco clients are using your proxy repository as a source and NOT the default community repository. See source command for more information.
- You can also just download the package and push it to a repository Download
-
Open Source
- Download the Package Download
- Follow manual internalization instructions
-
Package Internalizer (C4B)
- Run
choco download laps --internalize --source=https://chocolatey.org/api/v2
(additional options) - Run
choco push --source="'http://internal/odata/repo'"
for package and dependencies - Automate package internalization
- Run
3. Enter your internal repository url
(this should look similar to https://chocolatey.org/api/v2)
4. Choose your deployment method:
choco upgrade laps -y --source="'STEP 3 URL'" [other options]
See options you can pass to upgrade.
See best practices for scripting.
Add this to a PowerShell script or use a Batch script with tools and in places where you are calling directly to Chocolatey. If you are integrating, keep in mind enhanced exit codes.
If you do use a PowerShell script, use the following to ensure bad exit codes are shown as failures:
choco upgrade laps -y --source="'STEP 3 URL'"
$exitCode = $LASTEXITCODE
Write-Verbose "Exit code was $exitCode"
$validExitCodes = @(0, 1605, 1614, 1641, 3010)
if ($validExitCodes -contains $exitCode) {
Exit 0
}
Exit $exitCode
- name: Ensure laps installed
win_chocolatey:
name: laps
state: present
version: 6.2.0
source: STEP 3 URL
See docs at https://docs.ansible.com/ansible/latest/modules/win_chocolatey_module.html.
Coming early 2020! Central Managment Reporting available now! More information...
chocolatey_package 'laps' do
action :install
version '6.2.0'
source 'STEP 3 URL'
end
See docs at https://docs.chef.io/resource_chocolatey_package.html.
Chocolatey::Ensure-Package
(
Name: laps,
Version: 6.2.0,
Source: STEP 3 URL
);
Requires Otter Chocolatey Extension. See docs at https://inedo.com/den/otter/chocolatey.
cChocoPackageInstaller laps
{
Name = 'laps'
Ensure = 'Present'
Version = '6.2.0'
Source = 'STEP 3 URL'
}
Requires cChoco DSC Resource. See docs at https://github.com/chocolatey/cChoco.
package { 'laps':
provider => 'chocolatey',
ensure => '6.2.0',
source => 'STEP 3 URL',
}
Requires Puppet Chocolatey Provider module. See docs at https://forge.puppet.com/puppetlabs/chocolatey.
salt '*' chocolatey.install laps version="6.2.0" source="STEP 3 URL"
See docs at https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.chocolatey.html.
5. If applicable - Chocolatey configuration/installation
See infrastructure management matrix for Chocolatey configuration elements and examples.
This package was approved by moderator flcdrg on 09 Oct 2020.
Package Parameters
- if the parameter is not specified, only the AdmPwd GPO Extension is installed (default)
/ALL
- Installs the AdmPwd GPO Extension and all Management Tools (Fat client UI, PowerShell module, and GPO Editor templates)
Example:choco install laps --params "/ALL"
Overview of Local Administrator Password Solution
For environments in which users are required to log on to computers without domain credentials, password management can become a complex issue. Such environments greatly increase the risk of a Pass-the-Hash (PtH) credential replay attack. The Local Administrator Password Solution (LAPS) provides a solution to this issue of using a common local account with an identical password on every computer in a domain. LAPS resolves this issue by setting a different, random password for the common local administrator account on every computer in the domain. Domain administrators using the solution can determine which users, such as helpdesk administrators, are authorized to read passwords.
LAPS simplifies password management while helping customers implement recommended defenses against cyberattacks. In particular, the solution mitigates the risk of lateral escalation that results when customers use the same administrative local account and password combination on their computers. LAPS stores the password for each computer’s local administrator account in Active Directory, secured in a confidential attribute in the computer’s corresponding Active Directory object. The computer is allowed to update its own password data in Active Directory, and domain administrators can grant read access to authorized users or groups, such as workstation helpdesk administrators.
Please see the README for chocolatey-test-environment installation.
$ErrorActionPreference = 'Stop'
$toolsDir = "$(Split-Path -parent $MyInvocation.MyCommand.Definition)"
$packageName = 'laps'
$fileType = 'MSI'
$softwareName = "Local Account Password Solution*"
$url = 'https://download.microsoft.com/download/C/7/A/C7AAD914-A8A6-4904-88A1-29E657445D03/LAPS.x86.msi'
$checksum = '9F0FA541B472C20508973F561B0D7850A7BF779C8459F9E33471083619FD6EDA'
$checksumType = 'sha256'
$url64 = 'https://download.microsoft.com/download/C/7/A/C7AAD914-A8A6-4904-88A1-29E657445D03/LAPS.x64.msi'
$checksum64 = 'F63EBBC45E2D080630BD62A195CD225DE734131A56BB7B453C84336E37ABD766'
$checksumType64 = 'sha256'
$pp = Get-PackageParameters
if ( $pp.ALL ) {
Write-Host "`nInstalling Microsoft Local Account Password Solution with Management Tools..." -ForegroundColor Yellow
Write-Host ""
$packageArgs = @{
packageName = $packageName
fileType = $fileType
url = $url
url64bit = $url64
validExitCodes = @(0, 3010)
silentArgs = 'ADDLOCAL=ALL /qn /norestart'
softwareName = $softwareName
checksum = $checksum
checksumType = $checksumType
checksum64 = $checksum64
checksumType64 = $checksumType64
}
Install-ChocolateyPackage @packageArgs
} else {
Write-Host "`nInstalling Microsoft Local Account Password Solution..." -ForegroundColor Yellow
Write-Host ""
$packageArgs = @{
packageName = $packageName
fileType = $fileType
url = $url
url64bit = $url64
validExitCodes = @(0, 3010)
silentArgs = '/qn /norestart'
softwareName = $softwareName
checksum = $checksum
checksumType = $checksumType
checksum64 = $checksum64
checksumType64 = $checksumType64
}
Install-ChocolateyPackage @packageArgs
}
Log in or click on link to see number of positives.
- LAPS.x64.msi (f63ebbc45e2d) - ## / 60
- LAPS.x86.msi (9f0fa541b472) - ## / 60
- laps.6.2.0.nupkg (332dfda9e848) - ## / 62
In cases where actual malware is found, the packages are subject to removal. Software sometimes has false positives. Moderators do not necessarily validate the safety of the underlying software, only that a package retrieves software from the official distribution point and/or validate embedded software against official distribution point (where distribution rights allow redistribution).
Chocolatey Pro provides runtime protection from possible malware.
Version | Downloads | Last Updated | Status |
---|---|---|---|
Microsoft Local Administrator Password Solution (LAPS) 6.2.0 | 228011 | Monday, October 5, 2020 | Approved |
© Microsoft 2020
Ground Rules:
- This discussion is only about Microsoft Local Administrator Password Solution (LAPS) and the Microsoft Local Administrator Password Solution (LAPS) package. If you have feedback for Chocolatey, please contact the Google Group.
- This discussion will carry over multiple versions. If you have a comment about a particular version, please note that in your comments.
- The maintainers of this Chocolatey Package will be notified about new comments that are posted to this Disqus thread, however, it is NOT a guarantee that you will get a response. If you do not hear back from the maintainers after posting a message below, please follow up by using the link on the left side of this page or follow this link to contact maintainers. If you still hear nothing back, please follow the package triage process.
- Tell us what you love about the package or Microsoft Local Administrator Password Solution (LAPS), or tell us what needs improvement.
- Share your experiences with the package, or extra configuration or gotchas that you've found.
- If you use a url, the comment will be flagged for moderation until you've been whitelisted. Disqus moderated comments are approved on a weekly schedule if not sooner. It could take between 1-5 days for your comment to show up.