LAPS

To set up LAPS on a domain controller, start by installing it with management tools and extend the AD schema using PowerShell commands. Set up a central store for ADMX files and create a GPO to manage local admin passwords. Give appropriate permissions for reading and resetting passwords in AD, and install LAPS on client computers using a GPO for automatic password backup in AD.