Skip to main content
Question

Shared Local Admin Credentials

  • September 30, 2019
  • 3 replies
  • 23 views
C
Forum|alt.badge.img+1

How can I implement something similar to Microsoft LAPS on mac?

I want to achieve:

  1. One local admin account per mac - specifically for deskside support
  2. Each local admin has a different password
  3. Deskside support tech can retrieve password by looking up mac
  4. Password resets and rotates x-hours after it is retrieved by Deskside tech.

I have one solution (Password manager Pro) that may potentially work, but i am not sure if there is a central way to manage this?

Any ideas will be appreciated, thank you.

3 replies

mark_mahabir
Forum|alt.badge.img+15
  • mark_mahabir
  • Jamf Heroes
  • October 1, 2019

We use macOSLAPS but LAPSforMac is a good alternative.

E
C
A
Forum|alt.badge.img+10
  • ammonsc
  • Contributor
  • October 1, 2019

Could you base the password on something like the serial number? If so that could be scripted to create and set each local admin user.

F
Forum|alt.badge.img+4
  • FranckS
  • Contributor
  • August 14, 2021

You may also test EasyLAPS. I'm the author of this tool which is designed to regularly rotate the local administrator account password of a Mac and store it in a MDM like Jamf Pro or Jamf School.

Terms & ConditionsCookie settingsAccessibility statement