Least Privilege (LAPS)

Win - OIB - ES - Windows LAPS - D - LAPS Configuration - v3.1

CMMC Control Mapping Matrix

Name	Value
Basics
Name	Win - OIB - ES - Windows LAPS - D - LAPS Configuration - v3.1
Description
Profile type	Settings catalog
Category	Account protection
Policy type	Local admin password solution (Windows LAPS)
Platform supported	Windows 10 and later
Created	Thursday, February 26, 2026 5:39:12 AM
Last modified	Thursday, February 26, 2026 5:39:12 AM
Scope tags	Default

Table 9. Basics - Win - OIB - ES - Windows LAPS - D - LAPS Configuration - v3.1

Name	Value
Backup Directory	Backup the password to Microsoft Entra ID only
Password Age Days	7
Password Complexity	Large letters + small letters + numbers + special characters (improved readability)
Password Length	21
Post Authentication Actions	Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will terminated.
Post Authentication Reset Delay	1

Table 10. Settings - Win - OIB - ES - Windows LAPS - D - LAPS Configuration - v3.1