We are setting up an Active Directory for our server room (Windows Servers + Linux Servers).

Our local Administrator accounts should remain active in case of an emergency.

However to avoid our employees to keep using the local Administrator accounts we want to change all the local Administrator's passwords and keep them in a secured space, maybe even have the ability to create single sign ons in case someone needs one time access.

What would be the best practice to deal with this kind of situation? Does something like this exists within AD or would we have to look for an extra platform?

  • 1
    Microsoft LAPS. Haven't tried it but should be what you're looking for?
    – Seth
    Commented Sep 15, 2017 at 9:28
  • @Seth this looks very promising. Will definitely look into this. Commented Sep 15, 2017 at 10:17


You must log in to answer this question.