Configure password backup directory
- Policy ID
- LAPS_BackupDirectory
- Scope
- Computer Configuration
- Supported on
- At least Microsoft Windows 10 or later
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- System › LAPS
Description
Use this setting to configure which directory the local admin account password is backed up to.
The allowable settings are:
0=Disabled (password will not be backed up)
1=Backup the password to Azure Active Directory
2=Backup the password to Active Directory
If not specified, this setting will default to 0 (Disabled).
If this setting is configured to 1, and the managed device is not joined to Azure Active Directory, the local administrator password will not be managed.
If this setting is configured to 2, and the managed device is not joined to Active Directory, the local administrator password will not be managed.
If this setting is disabled or not configured, the local administrator password is not managed.
See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.
Options
Registry
- BackupDirectoryREG_DWORD