Configure password backup directory

Policy ID
LAPS_BackupDirectory
Scope
Computer Configuration
Supported on
At least Microsoft Windows 10 or later
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
System › LAPS

Description

Use this setting to configure which directory the local admin account password is backed up to.

The allowable settings are:

0=Disabled (password will not be backed up)

1=Backup the password to Azure Active Directory

2=Backup the password to Active Directory

If not specified, this setting will default to 0 (Disabled).

If this setting is configured to 1, and the managed device is not joined to Azure Active Directory, the local administrator password will not be managed.

If this setting is configured to 2, and the managed device is not joined to Active Directory, the local administrator password will not be managed.

If this setting is disabled or not configured, the local administrator password is not managed.

See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Options

  • Backup directory
    • Disabled
    • Azure Active Directory
    • Active Directory

Registry

ComputerHKEY_LOCAL_MACHINE
  • BackupDirectoryREG_DWORD

Other policies in the same category

View all policies in this category (10)