Local Administrator Password Solution Microsoft Corporation
winget install --id=Microsoft.LAPS -e Provides management of local account passwords of domain joined computers. Passwords are stored in Active Directory (AD) and protected by ACL, so only eligible users can read it or request its reset.