Where do we configure specific complexity requirements so that LAPS generates compliant passwords during its rotation cycle?

Hi Mayer Zaniel,

I’m following up to check whether the issue has been resolved. Feel free to reply if you need further information. If the information provided was helpful, please click "Accept Answer" to help others in the community. Thank you!

Hi Mayer Zaniel,

LAPS doesn’t rely on the default domain password policy; instead, you configure its password settings directly through Group Policy or Intune.

Specifically, you’ll want to set the Password Settings under the LAPS configuration policy. In Group Policy, this is located at Computer Configuration > Administrative Templates > System > LAPS. There you can define:

• Password length (e.g., 16 characters)
• Complexity options (require upper case, lower case, numbers, and special characters)
• Password age and expiration settings

If you’re using Intune, the same options are available in the LAPS configuration profile under Endpoint Security > Account Protection. Once applied, LAPS will generate and rotate local administrator passwords according to these rules, ensuring compliance with your policy.

I hope the response provided some helpful insight. If you find this answer useful, please hit “accept answer” so I know it addressed your concern.

Jason.