RapidLAPS brings passwordless logon to LAPS
What if you could get all the security benefits of LAPS without ever having to enter a LAPS password? With RapidLAPS, you log on to Windows as the local admin by simply scanning a QR code or entering a PIN, without ever having to type or even know the password.
RapidLAPS is part of Lithnet Access Manager, which gives your team safe, audited admin access to every computer in your organization.
RapidLAPS is included in every editionProfessional edition from USD 750 a year, including 100 devicesFree Community edition for up to 100 devices
Nobody wants to type a 30-character password
A unique, random admin password on every computer means that one stolen password can't open the rest. However, it is hard to read one of these passwords to someone over the phone or to type it at a logon screen without a mistake. This is why teams put off deploying LAPS or find ways around it. We built RapidLAPS so that your team can log on without typing the password.
Learn more about Lithnet Access ManagerThe passwordless RapidLAPS experience
-
1
Choose the RapidLAPS tile on the Windows logon screen
1
-
2
Scan the QR code with your phone's camera. You don't need to install an app.
-
3
If you don't have a phone with you, go to the address on the screen and enter the PIN
-
4
After signing in, review the request and click Approve
-
5
Windows logs you on as the local administrator without you having to type the password
Passwordless elevation for apps and installers
When Windows asks for admin credentials, choose "Elevate with RapidLAPS" to run an installer, app or system action as administrator. Before you approve, you see which app and which user are asking. Access Manager records every elevation in its audit log.
How it works
- An authorized person scans the code, or enters the PIN and approves the request in the web app.
- Once the request is approved, the Access Manager server encrypts and delivers the password to the agent running on the device. The agent then passes the LAPS password to Windows, and completes the login.
- The device doesn't need internet access. It only talks to your Access Manager server.
- Access Manager audits every logon and elevation. The audit event includes the answers to any prompts you add, such as a ticket number.
- RapidLAPS works with Windows LAPS or the Access Manager agent.
Frequently asked questions
Does RapidLAPS remove the LAPS password?
No. LAPS gives every computer its own local admin password that changes on a schedule. With RapidLAPS, the password still exists and still changes on that schedule. When you approve a RapidLAPS request, Access Manager securely delivers the password to the device. Windows then uses it to log on or to run an app as administrator. Nobody has to type it.
What if the user is remote?
When a remote user needs admin rights, for example to install an app, they choose "Elevate with RapidLAPS" at the Windows admin prompt. The prompt shows a PIN as well as the QR code. The user reads the PIN to your service desk over the phone. The service desk operator enters the PIN in the Access Manager web app, checks which app is asking and approves the request. The app then runs as administrator without anyone reading out or typing the password.
Do I need to install the Lithnet Access Manager agent?
Yes. RapidLAPS needs the Access Manager agent on each Windows device where you want to use it. The agent adds RapidLAPS to the Windows logon screen and the admin elevation prompt, and it receives the password when a request is approved. Windows LAPS can keep managing the password on that device.
Does it work with Microsoft LAPS?
Yes. RapidLAPS works with Windows LAPS and with the older Microsoft LAPS, as well as with passwords that the Access Manager agent manages. You don't have to change how your LAPS passwords are managed to use RapidLAPS.
Does RapidLAPS need internet access?
The device does not need internet access. It only connects to your own Access Manager server. The phone that approves the request also needs to be able to reach your Access Manager server. The person who approves the request signs in to Access Manager through your identity provider as usual. Your identity provider may be a cloud service such as Microsoft Entra ID or Okta.
How much does RapidLAPS cost?
RapidLAPS is included at no extra cost in every edition of Access Manager. Paid editions start at USD 750 a year, and the Community edition is free for up to 100 devices.
Get started today
Paid editions start at USD 750 a year and include support from Lithnet. The Community edition includes RapidLAPS and is free for up to 100 devices.
The free trial unlocks every feature for 30 days on a free installation.