Windows LAPS and security baselines through Group Policy
Deploying Windows LAPS to domain computers with Group Policy: preparing Active Directory, choosing each policy setting knowing its default, granting and checking who can read and decrypt passwords, verifying backup and rotating on demand; then comparing your GPOs with Microsoft's security baselines using the Security Compliance Toolkit, and deploying firewall rules through Group Policy.
- Level
- Advanced
- Length
- About 75 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 3 Oct 2026
Skills you'll practise
- Prepare Active Directory for Windows LAPS in the right order: templates, schema, device self-permission and reader permissions
- Configure the Windows LAPS GPO settings and predict what happens when a setting is left at its default or set to an unsupported value
- Separate who can read a stored password from who can decrypt it, and check for unexpected extended-rights holders
- Verify backup with events and Get-LapsADPassword, and rotate a password early after it is used
- Compare GPOs with a Microsoft security baseline using Policy Analyzer and record each deliberate deviation
Course outline
- 1.Windows LAPS and security baselines through Group PolicyVideo · 2 min
- 2.Preparing Active Directory for Windows LAPSLesson · 22 min
- 3.The LAPS policy settings and their defaultsLesson · 28 min
- 4.Verifying, rotating, and checking against baselinesLesson · 25 min
- 5.Windows LAPS and security baselines through Group Policy: knowledge checkKnowledge check · 20 questions
- 6.Final exam9 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
- Microsoft Learn: Configure policy settings for Windows LAPS (policy roots, settings, defaults, Central Store note)
- Microsoft Learn: Get started with Windows LAPS and Windows Server Active Directory (schema, permissions, events, retrieval, rotation)
- Microsoft Learn: Microsoft Security Compliance Toolkit guide (baselines, Policy Analyzer, LGPO)
- Microsoft Learn: Configure firewall rules with Group Policy
- Microsoft Learn: Create and manage the Central Store
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.