A municipal Windows estate has no LAPS-class local administrator password solution, so many workstations share the same local admin password. What risk should the tester highlight?
Select an answer to reveal the explanation.
Short Explanation
Picture one master key cut for every apartment in the building. Crack one lock and you walk the whole hallway. Unique per-host local admin passwords — LAPS-style — stop that lateral stroll.
Full Explanation
When local administrator passwords are identical across endpoints, compromise of one host yields credentials reusable on many peers. That pattern accelerates lateral movement and credential theft without requiring domain-level rights first. Cloud-join status and Domain Admin coverage do not erase the host-to-host reuse problem. Assessors should treat missing randomized local admin password management as a high-impact AD path finding.