Reference articles:

https://technet.microsoft.com/en-us/library/security/3062591

http://blogs.technet.com/b/askpfeplat/archive/2014/05/19/how-to-automate-changing-the-local-administrator-password.aspx

https://adsecurity.org/?p=1790

https://code.msdn.microsoft.com/Solution-for-management-of-ae44e789

LAPS download: http://www.microsoft.com/en-us/download/details.aspx?id=46899

The following steps need to be performed to configure LAPS

• Installation of GP CSE (Group Policy Client Side Extension) via MSI installation
• On management computers
• On clients to be managed
• AD preparation
• schema extension
• Permission updates
• Group policy configuration