LAPS

LAPS

View and rotate the local admin passwords that Jamf Pro manages with LAPS. Viewing is read-only. ✏️ Rotate changes the password.

How to use it

1. Connect to Jamf Pro and click Connect & Check Permissions. The tool checks View Local Admin Password, and Rotate Local Admin Password if your account has it. Then click Continue → (or Proceed Anyway →).
2. Under Search for a device, enter a device name and click Search, then pick the Mac.
3. The Mac's LAPS-managed accounts are listed with their username, UID and when the password was last rotated.

Viewing and rotating

• View fetches and shows the password for that account. Passwords are only fetched when you click View.
• Copy password copies it to the clipboard.
• Rotate asks Jamf Pro to set a new password for that account straight away. It's only shown when your account has Rotate Local Admin Password. There's no confirmation step, and the old password stops working once the Mac picks up the change.

If you see No LAPS accounts found, LAPS may not be set up for that Mac, or no local admin accounts are managed on it.

Privacy

Passwords aren't logged, saved to disk or included in debug logs. Jamf Pro records each view and rotation in its own audit log, as usual.

Permissions: Read Computers (to search), View Local Admin Password. Rotate Local Admin Password, only if you rotate passwords.