With this extension for SCCM you can easily access the LAPS password for all of your domain computers from within the SCCM console; a button will be added to the ribbon and the right-click menu when a computer-object is selected.  It's easy to install, and easy to package as well, simply run the executable with the /s parameter to perform a silent install.

Installer command-line parameters:

  1. /? Displays the help screen
  2. /s Suppresses all user interaction
  3. /u Removes the extension (uninstall)

Microsoft Local Administrator Password Solution



The System.DirectoryServices .Net namespace is used to protect the password with Kerberos encryption during transport over the network.


Verified with SCCM 2012 R2 CU1 and builds: 1511, 1602, 1606.

Additional Screens:


Sep. 17, 2018 1. The extenstion has been tested through build 1802.
Sep. 21, 2016 1. Uploaded a new installer, I had accidentally left testing-code in place.  This would cause the plugin to not work on any other environment than my own.  If you downloaded between Sep. 12, 2016 and Sep. 21, 2016, you need to update.  Sorry for the inconvenience.
Sep. 12, 2016 1. Updated the time conversion code for attribute ms-mcs-admpwdexpirationtime in order to better support vaious default datetime formats.
Sep. 6, 2016 1. Added an icon resource file to the project, it now displays the icon within the SCCM console.
2. Updated the screen captures in this description.
3. The extension has been tested through build 1606.


Check out Dell Warranty Extension for SCCM 2012 R2 +

Check out Dell Warranty Bulk Import for SCCM 2012 R2 +