macOS LAPS
edu.psu.macoslaps
macOS LAPS settings
Configuration Keys (12)
| Key | Type | Title |
|---|---|---|
LocalAdminAccountDefault: "admin" | string | Local Admin Account Username |
DaysTillExpirationDefault: 60 | integer | Days Till Password Expiration |
PasswordLengthDefault: 12 | integer | Password Length |
PasswordGroupingDefault: 0 | integer | Password Grouping |
PasswordSeparatorDefault: "-" | string | Password Separator |
RemoveKeyChainDefault: true | boolean | Remove Keychain |
RemovePassChars | string | Password Characters to Exclude |
ExclusionSetsExclude any character set you'd like from the randomly generated password. | array | Exclusion Sets |
MethodDefault: "AD" Range: AD, Local | string | — |
PreferredDC | string | Preferred Domain Controller |
FirstPassUse this key if your LAPS Admin is a FileVault user. The script will read this key in if there isn't a keyhcain entry in System keychain for macOSLAPS. Once this has been completed, the keychain entry will then be used. | string | First Password |
PasswordRequirementsSpecifies the password requirements. | dict | Password Requirements |
Range: Letters (letters), Numbers (numbers), Symbols (symbols) | string | Character Set |
LowercaseThe minimum number of lowercase letters in a generated password. Default: 0 Range: 0 – — | integer | Minimum Lowercase Letters |
UppercaseThe minimum number of uppercase letters in a generated password. Default: 0 Range: 0 – — | integer | Minimum Uppercase Letters |
NumberThe minimum number of numeric characters in a generated password. Default: 0 Range: 0 – — | integer | Minimum Numeric Characters |
SymbolThe minimum number of non-alphanumeric characters in a generated password. Default: 0 Range: 0 – — | integer | Minimum Symbols |