Hello Isabella Brown,
Snapshot rollbacks are notorious for breaking local admin passwords but you can easily kick off an emergency rotation right from Active Directory without needing to touch the broken server. Since the server went back in time, all you need to do is force Active Directory to think the password has already expired so it generates a fresh one. If you have administrative access, you can open PowerShell on a management machine & run the command Reset-LapsPassword -ComputerName followed by your server name to instantly reset the clock. Alternatively, you can open Active Directory Users and Computers, turn on Advanced Features, look up the server properties, and manually modify the msLAPS-ExpirationTime attribute to a timestamp in the past. Once either method forces the expiration, LAPS will automatically overwrite the corrupted data & set a brand new password for you.
Hope this answer has brought you some useful information. If it did, please hit “accept answer”. Should you have any questions, feel free to leave a comment.
Tracy Le.