Visão Geral

Este curso apresenta o Local Administrator Password Solution (LAPS) para gerenciamento seguro das senhas de contas administrativas locais. O participante compreenderá arquitetura, políticas, gerenciamento de credenciais, controle de acesso, auditoria e integração do LAPS com ambientes Windows e Active Directory.

Objetivo

Após realizar este curso, você será capaz de:

• Compreender o funcionamento do LAPS
• Gerenciar senhas administrativas locais
• Configurar políticas de segurança
• Controlar acesso às credenciais
• Monitorar e auditar o LAPS

Publico Alvo

• Administradores Windows
• Administradores de Active Directory
• Profissionais de Cybersecurity
• Profissionais de infraestrutura

Pre-Requisitos

• Conhecimentos de Windows
• Familiaridade com Active Directory
• Conhecimentos básicos de Group Policy
• Noções de contas administrativas
• Familiaridade com PowerShell é recomendada

Conteúdo Programatico

Module 1: LAPS Fundamentals

1. Local Administrator Password Solution concepts
2. Local administrator accounts
3. Shared local administrator passwords
4. Credential exposure risks
5. Password rotation
6. Automatic password management
7. LAPS architecture
8. Active Directory integration
9. Windows LAPS overview
10. LAPS security benefits

Module 2: Windows LAPS Architecture

1. Windows LAPS components
2. Local administrator account management
3. Active Directory storage
4. Password attributes
5. Password expiration
6. Password rotation
7. Policy configuration
8. Device management
9. LAPS operational workflow
10. LAPS security architecture

Module 3: LAPS Policy Configuration

1. Password complexity
2. Password length
3. Password age
4. Account name configuration
5. Automatic password management
6. Post-authentication actions
7. Group Policy configuration
8. Policy inheritance
9. Policy scope
10. Configuration validation

Module 4: Access Control

1. LAPS password access
2. Active Directory permissions
3. Password retrieval permissions
4. Delegated access
5. Least privilege
6. Administrative groups
7. Help desk access
8. Credential exposure risks
9. Access auditing
10. Permission review

Module 5: LAPS Security

1. Local administrator credential protection
2. Password rotation
3. Credential theft prevention
4. Lateral Movement reduction
5. Pass-the-Hash mitigation
6. Administrative tiering
7. Privileged workstation security
8. Credential exposure monitoring
9. Security baselines
10. LAPS hardening

Module 6: Monitoring and Auditing

1. LAPS event logging
2. Password retrieval auditing
3. Administrative activity
4. Policy changes
5. Permission changes
6. Windows Event Logs
7. SIEM integration
8. Suspicious password access
9. Security alerts
10. Audit investigation

Module 7: Deployment and Troubleshooting

1. LAPS deployment planning
2. Active Directory preparation
3. Group Policy deployment
4. Client configuration
5. Password synchronization
6. Policy troubleshooting
7. Permission troubleshooting
8. Event Log analysis
9. Deployment validation
10. Operational troubleshooting

Module 8: Practical LAPS Administration

1. LAPS architecture assessment
2. Policy configuration
3. Password management
4. Access permission configuration
5. Auditing implementation
6. Security validation
7. Troubleshooting exercise
8. Credential exposure assessment
9. Hardening validation
10. Practical LAPS deployment cases