Secure local administrator accounts for Free
Most companies that we audit have generic local Administrator passwords in place, although they might vary between desktops & servers and even be highly complex, the problem still remains… what happens when one of these devices is compromised? There is not only the risk of a virus propagating through the systems but also the hassle of having to change the passwords whenever a member of IT leaves the Company.
Fortunately, there is a free solution from Microsoft. It’s called Local Administrator Password Solution or LAPS for short.
This is a great tool and should be mandatory for all Companies, it should take about half a day to install and once done will change the local admin password periodically, meaning that your local administrator passwords will never be the same again. Members of the IT department can simply lookup the random password via the tool whenever required. Complexity and rules can be enforced and it works with Active Directory.
You can download the free tool here https://www.microsoft.com/en-us/download/details.aspx?id=46899