Skip to content

Commit a977b4d

Browse files
Update README.md
1 parent d0e78b3 commit a977b4d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ If the ```ms-DS-Machine-Account-Quota``` attribute value is default, there is no
1515

1616
## Mitigation
1717
Microsoft LAPS installation document don't handle this issue and they didn't update it. So don't configuration according to Microsoft LAPS_OperationsGuide.docx and LAPS_TechnicalSpecification documents only. https://www.microsoft.com/en-us/download/details.aspx?id=46899
18-
If Laps Administrator Password Solution is used, set ms-ds-machine-account-quota as "0" or delegation must be applied a user group for adding computer to domain. Otherwise user can add computer to domain and read local admin user password via LAPS misconfiguration.
18+
If Laps Administrator Password Solution is used, set ms-ds-machine-account-quota as "0" or delegation must be applied a user group for adding computer to domain. Otherwise user can add computer to domain and read local admin user password, define password complexity via LAPS misconfiguration.
1919

2020
## Details
2121
https://docs.unsafe-inline.com/unsafe/abusing-laps

0 commit comments

Comments
 (0)