iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
No. Microsoft documents no macOS LAPS setting in Intune for a recurring rotation interval longer than 180 days. The ADE enrollment profile’s Admin account password rotation period (days) accepts 1–180 days, and Microsoft says this configured rotation occurs in addition to an automatic rotation every 180 days. To change a password sooner, an administrator can run the Rotate local admin password device action; that does not extend the scheduled interval.
What the 180-day setting actually controls
In a macOS Automated Device Enrollment (ADE) profile, Admin account password rotation period (days) is an optional additional rotation schedule. Microsoft documents a range of 1–180 days for this setting and states that it is “in addition to the automatic rotation that happens once every 180 days.” It is therefore not a maximum-age field that can be increased to 181 days or more. See Microsoft’s macOS LAPS setup guidance.
If your requirement is to avoid a scheduled change more often than every 180 days, do not configure a shorter additional period. The documented guidance does not provide a control to lengthen or disable the automatic 180-day rotation.
Scheduled rotation and manual rotation are different
| Option | Trigger and purpose | Key requirement |
|---|---|---|
| Scheduled rotation | Automatic recurring rotation: the configured 1–180-day period is additional to the automatic 180-day rotation. | Configure the local administrator account in the macOS ADE enrollment profile. |
| Manual rotation | An administrator initiates a change when an operational or security need arises; it does not create a longer recurring interval. | The Mac must be eligible for the action, the account must be configured in its ADE profile, and the administrator needs the rotation permission. |
To initiate a manual change, use the Intune admin center’s Rotate local admin password device action. Microsoft documents the action under Devices > All devices, then Secure. Its supported-platform documentation includes macOS ADE; consult the current Rotate local admin password action page for the action details.
#1 Best Overall
- SUPERCHARGED BY M5 — The 14-inch MacBook Pro with M5 brings next-generation speed and powerful on-device AI to personal, professional, and creative tasks. Featuring all-day battery life and a breathtaking Liquid Retina XDR display with up to 1600 nits peak brightness, it’s pro in every way.*
- HAPPILY EVER FASTER — Along with its faster CPU and unified memory, M5 features a more powerful GPU with a Neural Accelerator built into each core, delivering faster AI performance. So you can blaze through demanding workloads at mind-bending speeds.
- BUILT FOR APPLE INTELLIGENCE — Apple Intelligence is the personal intelligence system that helps you write, express yourself, and get things done effortlessly. With groundbreaking privacy protections, it gives you peace of mind that no one else can access your data — not even Apple.*
- ALL-DAY BATTERY LIFE — MacBook Pro delivers the same exceptional performance whether it’s running on battery or plugged in.
- APPS FLY WITH APPLE SILICON — All your favorites, including Microsoft 365 and Adobe Creative Cloud, run lightning fast in macOS.*
Check eligibility and permissions before setup
Microsoft’s macOS LAPS prerequisites specify macOS 12 or later, a device synced to Intune from Apple Business Manager or Apple School Manager, and ADE enrollment after a factory reset. Re-initiating ADE from an existing macOS installation—for example, with profiles renew—is not supported for this setup. The account configuration belongs to the ADE enrollment profile and applies to new enrollments.
For password access and rotation, Microsoft identifies the Enrollment programs permissions View macOS admin password and Rotate macOS admin password. The setup guidance says these permissions are not included in Intune’s built-in roles, so assign them deliberately through an appropriate role.
Rank #2
- FAST RUNS IN THE FAMILY — The 16-inch MacBook Pro with the M5 Pro or M5 Max chip brings next-generation speed and powerful on-device AI to personal, professional, and creative tasks. With all-day battery life, double the starting storage,* and a breathtaking Liquid Retina XDR display, it’s pro in every way.*
- BUCKLE UP — Along with a next-generation CPU, faster unified memory, and up to 2x faster SSD storage,* M5 Pro and M5 Max feature a more powerful GPU with a Neural Accelerator built into each core, delivering faster AI performance and on-device training capabilities. So you can blaze through demanding workloads at mind-bending speeds.
- BUILT FOR AI — Apple silicon, and every major component that powers it, is designed to run demanding on-device AI workloads like LLM inference and training. And Apple Intelligence helps you write, express yourself, and get things done effortlessly with groundbreaking privacy protections at every step.*
- ALL-DAY BATTERY LIFE — MacBook Pro delivers the same exceptional performance whether it’s running on battery or plugged in.*
- MACOS RUNS APPS FAST — All your go-to apps run lightning fast in macOS, including built-in apps like FaceTime and Messages. Plus, built-in virus protection and free software updates help keep your Mac running smoothly and securely.
Configure the account and avoid conflicting password policies
Intune generates and randomizes the LAPS administrator password, encrypts it, and stores it in Intune. Microsoft documents a 15-character password containing lowercase and uppercase letters, numbers, and special symbols. Configure the local account as part of the macOS ADE profile rather than treating LAPS as an independent profile that can be applied to any existing installation.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Review other password policies targeted to the same Macs. Microsoft warns that compliance password requirements can expire passwords, including those for LAPS-created accounts. Its guidance recommends managing device passwords with a settings catalog policy and setting Change at next auth to False. Password settings in compliance or device restriction profiles can enable that behavior by default, potentially causing sign-in problems with newly created LAPS accounts. See Microsoft’s pages on macOS compliance settings and Apple device restriction settings.
Rank #3
- SUPERCHARGED BY M5 — The 14-inch MacBook Pro with M5 brings next-generation speed and powerful on-device AI to personal, professional, and creative tasks. Featuring all-day battery life and a breathtaking Liquid Retina XDR display with up to 1600 nits peak brightness, it’s pro in every way.*
- HAPPILY EVER FASTER — Along with its faster CPU and unified memory, M5 features a more powerful GPU with a Neural Accelerator built into each core, delivering faster AI performance. So you can blaze through demanding workloads at mind-bending speeds.
- BUILT FOR APPLE INTELLIGENCE — Apple Intelligence is the personal intelligence system that helps you write, express yourself, and get things done effortlessly. With groundbreaking privacy protections, it gives you peace of mind that no one else can access your data — not even Apple.*
- ALL-DAY BATTERY LIFE — MacBook Pro delivers the same exceptional performance whether it’s running on battery or plugged in.
- APPS FLY WITH APPLE SILICON — All your favorites, including Microsoft 365 and Adobe Creative Cloud, run lightning fast in macOS.*
Verify rotation and investigate reset prompts
Microsoft says that viewing or rotating a password generates Intune audit events. Its setup guidance identifies Get AdminAccountDto for a password view and rotateLocalAdminPassword ManagedDevice for a rotation. To check the rotation time, open the device’s Overview and look under Monitor > Passwords and keys.
macOS versions earlier than 26.4
Microsoft documents a version-specific issue for macOS earlier than 26.4: when an ADE-enrolled Mac has a configured local administrator account and a targeted passcode profile, it can prompt for an administrator password reset even when Change at next auth is disabled or Max Age (days) is set. The issue does not affect the standard account. Microsoft’s stated workaround is to manually rotate the administrator password after the reset so Intune and the device’s password state are synchronized; upgrading to macOS 26.4 resolves the documented issue. Check Microsoft’s current setup guidance for any updates to this behavior.
Rank #4
- FAST RUNS IN THE FAMILY — The 16-inch MacBook Pro with the M5 Pro or M5 Max chip brings next-generation speed and powerful on-device AI to personal, professional, and creative tasks. With all-day battery life, double the starting storage,* and a breathtaking Liquid Retina XDR display, it’s pro in every way.*
- BUCKLE UP — Along with a next-generation CPU, faster unified memory, and up to 2x faster SSD storage,* M5 Pro and M5 Max feature a more powerful GPU with a Neural Accelerator built into each core, delivering faster AI performance and on-device training capabilities. So you can blaze through demanding workloads at mind-bending speeds.
- BUILT FOR AI — Apple silicon, and every major component that powers it, is designed to run demanding on-device AI workloads like LLM inference and training. And Apple Intelligence helps you write, express yourself, and get things done effortlessly with groundbreaking privacy protections at every step.*
- ALL-DAY BATTERY LIFE — MacBook Pro delivers the same exceptional performance whether it’s running on battery or plugged in.*
- MACOS RUNS APPS FAST — All your go-to apps run lightning fast in macOS, including built-in apps like FaceTime and Messages. Plus, built-in virus protection and free software updates help keep your Mac running smoothly and securely.
Secure token limitation
The local LAPS administrator account does not receive a secure token because of platform limitations. Microsoft says the first account to sign in after enrollment receives the secure token; at this time, that is the local user account.
Recommended Free Tools
Quick Recap
Best Value
- FAST RUNS IN THE FAMILY — The 16-inch MacBook Pro with the M5 Pro or M5 Max chip brings next-generation speed and powerful on-device AI to personal, professional, and creative tasks. With all-day battery life, double the starting storage,* and a breathtaking Liquid Retina XDR display, it’s pro in every way.*
- BUCKLE UP — Along with a next-generation CPU, faster unified memory, and up to 2x faster SSD storage,* M5 Pro and M5 Max feature a more powerful GPU with a Neural Accelerator built into each core, delivering faster AI performance and on-device training capabilities. So you can blaze through demanding workloads at mind-bending speeds.
- BUILT FOR AI — Apple silicon, and every major component that powers it, is designed to run demanding on-device AI workloads like LLM inference and training. And Apple Intelligence helps you write, express yourself, and get things done effortlessly with groundbreaking privacy protections at every step.*
- ALL-DAY BATTERY LIFE — MacBook Pro delivers the same exceptional performance whether it’s running on battery or plugged in.*
- MACOS RUNS APPS FAST — All your go-to apps run lightning fast in macOS, including built-in apps like FaceTime and Messages. Plus, built-in virus protection and free software updates help keep your Mac running smoothly and securely.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
