Windows LAPS

Guide for ordering and using Windows Local Administrator Password Solution (LAPS).

Requesting LAPS for Your Windows Device

  1. Navigate to Cetegra Workspace (https://cloud.cegal.com). Open the Catalog and select the category ‘Self Service’ in the menu. Self Service selection

  2. Click on the “Get your local admin password” item. Ensure your computer has been identified in the “Select computer” list, then place your request by clicking “Order now”. Order Now

  3. Confirm your request. Confirm Request

  4. Your request has been registered and is pending approval. No further actions are required at this time. Request Registered

Approving LAPS Requests

For managers:

  1. You’ll receive notifications when a user requests a LAPS password for their device. Here’s an example of an email approval notification from the catalog: Approval Notification

  2. Click the link in the approval notification email, or open Cetegra Workspace and navigate to Catalog -> Approvals to review the request(s). Review Request

  3. Finalize the request by clicking either ‘Approve’ or ‘Decline’.

  4. Approving the request will send an email with instructions and an SMS containing the password to the requester.

Using LAPS Password

  1. After your request is approved, you’ll receive an email containing instructions and an SMS with a password. The password is complex to ensure security. Email Instructions

    SMS Password

  2. Right-click on the application or file that you need to run with administrator privileges and select “Run as administrator”. Run as Administrator

  3. Input the LAPS username and password you received to elevate your privileges. Elevate Privileges

Important Information

  • For security reasons, the LAPS password will be automatically reset within a few hours after its first use, or within a predetermined duration set by your organization if the password has not been used.
  • Although supported, sending the password via email is not recommended due to security risks. This option is intended for situations where receiving an SMS is not possible.