How to create a Windows local admin account via Intune LAPS

Introduction

I wrote an article last February on how to replace the password of your MTR’s local account using LAPS (Local Administrator Password Solution) in Intune. I concluded my article by explaining that it was possible to manage local administrator accounts on computers using the same solution. Microsoft has just released an update that allows you to create the account directly via LAPS without going through a configuration rule with a manual password.

Check the February 2025 article HERE.

Prerequisites

A Windows 11 PC

A Windows 11 24h2 PC enrolled in Intune.

An Entra ID group

An Entra ID security group that contains the relevant PCs.

Administrator role

An account with the Global Administrator or Intune Administrator role to access the Microsoft Intune Admin Center.

Step 2 : Create a LAPS Rule

In the left menu, click Endpoint security, then Account protection.

Create a rule for the Windows 10 and later platform with the Local admin password solution (Windows LAPS) profile.

Enable the options with the values of your choice.
Unlike the MTR rule, which targeted the Admin account, here we will create a new account with a prefix (I chose laps-admin- here) and add a random numeric suffix.