Back to browser

macOS LAPS

edu.psu.macoslaps

macOS LAPS settings

macOS

Configuration Keys (12)

Key	Type	Title	Description	Default	Range
`LocalAdminAccount`	string	Local Admin Account Username	—	"admin"	—
`DaysTillExpiration`	integer	Days Till Password Expiration	—	60	—
`PasswordLength`	integer	Password Length	—	12	—
`PasswordGrouping`	integer	Password Grouping	—	0	—
`PasswordSeparator`	string	Password Separator	—	"-"	—
`RemoveKeyChain`	boolean	Remove Keychain	—	true	—
`RemovePassChars`	string	Password Characters to Exclude	—	—	—
`ExclusionSets`	array	Exclusion Sets	Exclude any character set you'd like from the randomly generated password.	—	—
`Method`	string	—	—	"AD"
`PreferredDC`	string	Preferred Domain Controller	—	—	—
`FirstPass`	string	First Password	Use this key if your LAPS Admin is a FileVault user. The script will read this key in if there isn't a keyhcain entry in System keychain for macOSLAPS. Once this has been completed, the keychain entry will then be used.	—	—
`PasswordRequirements`	dict	Password Requirements	Specifies the password requirements.	—	—
	string	Character Set	—	—
`Lowercase`	integer	Minimum Lowercase Letters	The minimum number of lowercase letters in a generated password.	0
`Uppercase`	integer	Minimum Uppercase Letters	The minimum number of uppercase letters in a generated password.	0
`Number`	integer	Minimum Numeric Characters	The minimum number of numeric characters in a generated password.	0
`Symbol`	integer	Minimum Symbols	The minimum number of non-alphanumeric characters in a generated password.	0