PayloadKit

macOS LAPS

edu.psu.macoslaps

macOS LAPS settings

macOS

Configuration Keys (12)

KeyTypeTitle
LocalAdminAccount

Default: "admin"

stringLocal Admin Account Username
DaysTillExpiration

Default: 60

integerDays Till Password Expiration
PasswordLength

Default: 12

integerPassword Length
PasswordGrouping

Default: 0

integerPassword Grouping
PasswordSeparator

Default: "-"

stringPassword Separator
RemoveKeyChain

Default: true

booleanRemove Keychain
RemovePassChars
stringPassword Characters to Exclude
ExclusionSets

Exclude any character set you'd like from the randomly generated password.

arrayExclusion Sets

Range: Letters (letters), Numbers (numbers), Symbols (symbols)

stringCharacter Set
Method

Default: "AD"

Range: AD, Local

string—
PreferredDC
stringPreferred Domain Controller
FirstPass

Use this key if your LAPS Admin is a FileVault user. The script will read this key in if there isn't a keyhcain entry in System keychain for macOSLAPS. Once this has been completed, the keychain entry will then be used.

stringFirst Password
PasswordRequirements

Specifies the password requirements.

dictPassword Requirements
Lowercase

The minimum number of lowercase letters in a generated password.

Default: 0

Range: 0 – —

integerMinimum Lowercase Letters
Uppercase

The minimum number of uppercase letters in a generated password.

Default: 0

Range: 0 – —

integerMinimum Uppercase Letters
Number

The minimum number of numeric characters in a generated password.

Default: 0

Range: 0 – —

integerMinimum Numeric Characters
Symbol

The minimum number of non-alphanumeric characters in a generated password.

Default: 0

Range: 0 – —

integerMinimum Symbols