PayloadKit

macOS LAPS

edu.psu.macoslaps

macOS LAPS settings

macOS

Configuration Keys (12)

Showing 12 of 12 keys

KeyTypeDescriptionDefaultRange
LocalAdminAccountstring

Local Admin Account Username

string—Default: "admin"Range: —
DaysTillExpirationinteger

Days Till Password Expiration

integer—Default: 60Range: —
PasswordLengthinteger

Password Length

integer—Default: 12Range: —
PasswordGroupinginteger

Password Grouping

integer—Default: 0Range: —
PasswordSeparatorstring

Password Separator

string—Default: "-"Range: —
RemoveKeyChainboolean

Remove Keychain

boolean—Default: trueRange: —
RemovePassCharsstring

Password Characters to Exclude

string—Default: —Range: —
ExclusionSetsarray

Exclusion Sets

arrayExclude any character set you'd like from the randomly generated password.Default: —Range: —
string

Character Set

string—Default: —Range: Letters (letters), Numbers (numbers), Symbols (symbols)
Methodstring
string—Default: "AD"Range: AD, Local
PreferredDCstring

Preferred Domain Controller

string—Default: —Range: —
FirstPassstring

First Password

stringUse this key if your LAPS Admin is a FileVault user. The script will read this key in if there isn't a keyhcain entry in System keychain for macOSLAPS. Once this has been completed, the keychain entry will then be used.Default: —Range: —
PasswordRequirementsdict

Password Requirements

dictSpecifies the password requirements.Default: —Range: —
Lowercaseinteger

Minimum Lowercase Letters

integerThe minimum number of lowercase letters in a generated password.Default: 0Range: 0 – —
Uppercaseinteger

Minimum Uppercase Letters

integerThe minimum number of uppercase letters in a generated password.Default: 0Range: 0 – —
Numberinteger

Minimum Numeric Characters

integerThe minimum number of numeric characters in a generated password.Default: 0Range: 0 – —
Symbolinteger

Minimum Symbols

integerThe minimum number of non-alphanumeric characters in a generated password.Default: 0Range: 0 – —