Is anyone using either of these utilities and if so, what do you think are pros and cons of each.
One is Shared Host Integrated Password System (SHIPS), the other is Local Administrator Password Solution (LAPS).
The Shared Host Integrated Password System (SHIPS) is an open-source solution created by Geoff Walton from TrustedSec to provide unique and rotated local super user or administrator passwords for environments where it is not possible or not appropriate to disable these local accounts. Our goal is to make post exploitation more difficult and provide a simplistic way to manage multiple systems in an environment where Windows and Linux does not necessarily support an alternative.
https://www.trustedsec.com/ships/
The "Local Administrator Password Solution" (LAPS) provides a centralized storage of secrets/passwords in Active Directory (AD) - without additional computers. Each organization’s domain administrators determine which users, such as helpdesk admins, are authorized to read the passwords.
https://technet.microsoft.com/en-us/mt227395.aspx
SHIPS looks to be more flexible in that it supports Linux infrastructure as well but LAPS seems pretty simple to use and setup. Looking forward to some feedback.
