Skip to Content

How Can Administrators Efficiently Manage LAPS Password Histories?

Is There a Free Tool to View Windows LAPS Passwords and History?

For systems administrators managing corporate environments, streamlining local security protocols remains a top priority. The release of Simple LAPS GUI 2.0 offers a refined solution for handling Windows Local Administrator Password Solution (LAPS) data. This update significantly improves how IT professionals interact with local administrator credentials stored in Active Directory.

Understanding the Core Technology: Windows LAPS

Windows LAPS acts as a critical security feature for domain-joined computers. It automatically rotates and secures the password for local administrator accounts on devices connected to Windows Server Active Directory or Azure Active Directory. By randomizing these passwords, organizations mitigate the risk of lateral movement attacks where compromised credentials are used to access multiple machines.

While Microsoft provides native tools to manage LAPS, third-party utilities often bridge the gap between functionality and usability. One such utility is Simple LAPS GUI, a standalone PowerShell-based tool hosted on GitHub.

The Evolution of Simple LAPS GUI

Originally launched in 2023, Simple LAPS GUI gained traction among administrators for its portability and ability to display both current passwords and password history—a feature often cumbersome to access via default administrative consoles.

The initial version provided a straightforward interface for quick lookups. However, user feedback and evolving infrastructure needs necessitated an update. On December 19, 2025, the developer (htcfreak) released version 2.0, addressing previous limitations and introducing multi-domain capabilities.

Key Enhancements in Version 2.0

The 2.0 release represents a major overhaul of the utility, focusing on usability, scalability, and bug remediation.

Functional Improvements

Multi-Domain Support: Administrators can now query specific domains during search operations. This is vital for complex forest environments where resources span multiple distinct domains.

Account Name Visibility: The interface now explicitly supports and displays account names, reducing ambiguity when managing machines with non-standard local admin usernames.

Zoomed Credential Preview: A new zoom dialog allows for clearer visibility of complex credentials, reducing transcription errors during manual entry.

User Interface and Experience (UI/UX)

Redesigned Interface: The UI has been modernized for better navigation and readability.

DPI Scaling Optimization: The window sizing now adapts correctly across different monitor resolutions and DPI settings, fixing previous display distortions.

System Format Compliance: The “Set Time” dialog now respects the local system’s date and time format settings, ensuring consistency for international users.

Technical Refinements

Batch File Implementation: The wrapper executable, previously built with AutoIT, has been replaced with a Batch file. This change increases transparency and reduces false positives from antivirus software that often flags compiled AutoIT scripts.

Bug Fixes: Critical patches include fixes for erroneous error messages after time setting adjustments and UI scaling glitches in the “About” dialog.

Implementation Recommendation

For administrators seeking a lightweight, portable method to audit and retrieve LAPS credentials without deploying heavy management consoles, Simple LAPS GUI 2.0 is a robust option.

You can download the latest release and view the updated documentation directly from the GitHub repository.