PayloadKit

macOS LAPS

edu.psu.macoslaps

macOS LAPS settings

macOS

Configuration Keys (12)

KeyTypeTitle
LocalAdminAccount

Default: "admin"

stringLocal Admin Account Username
DaysTillExpiration

Default: 60

integerDays Till Password Expiration
PasswordLength

Default: 12

integerPassword Length
PasswordGrouping

Default: 0

integerPassword Grouping
PasswordSeparator

Default: "-"

stringPassword Separator
RemoveKeyChain

Default: true

booleanRemove Keychain
RemovePassChars
stringPassword Characters to Exclude
ExclusionSets

Exclude any character set you'd like from the randomly generated password.

arrayExclusion Sets
Method

Default: "AD"

Range: AD, Local

string
PreferredDC
stringPreferred Domain Controller
FirstPass

Use this key if your LAPS Admin is a FileVault user. The script will read this key in if there isn't a keyhcain entry in System keychain for macOSLAPS. Once this has been completed, the keychain entry will then be used.

stringFirst Password
PasswordRequirements

Specifies the password requirements.

dictPassword Requirements

Range: Letters (letters), Numbers (numbers), Symbols (symbols)

stringCharacter Set
Lowercase

The minimum number of lowercase letters in a generated password.

Default: 0

Range: 0 – —

integerMinimum Lowercase Letters
Uppercase

The minimum number of uppercase letters in a generated password.

Default: 0

Range: 0 – —

integerMinimum Uppercase Letters
Number

The minimum number of numeric characters in a generated password.

Default: 0

Range: 0 – —

integerMinimum Numeric Characters
Symbol

The minimum number of non-alphanumeric characters in a generated password.

Default: 0

Range: 0 – —

integerMinimum Symbols