macOSLAPS icon indicating copy to clipboard operation
macOSLAPS copied to clipboard

[Enhancement] Active Directory & MDM password storage

Open dmmueller opened this issue 10 months ago • 1 comments

Would it be possible to have the password record appear in both locations, MDM and Active Directory? Why such and odd request? Our Active Directory will purge objects after a certain amount of inactivity and these passwords are no longer available, so having a secondary accessible location would be useful. While it is stored in a keychain, this can be difficult at best to access if the user's password is locked out.

dmmueller avatar Jan 17 '25 16:01 dmmueller

Hmm this is an interesting request. If your AD is purging the record I would probably say putting it in MDM might be the better option then. What I'd like to figure out is how to put it more securely in MDM vs how it currently works.

joshua-d-miller avatar Feb 26 '25 13:02 joshua-d-miller