This commit is contained in:
Vinay Pamnani 2023-02-17 18:20:04 -05:00
parent 5c0cc3476f
commit b240087b96
3 changed files with 1337 additions and 1011 deletions

File diff suppressed because it is too large Load Diff

View File

@ -1,40 +1,29 @@
--- ---
title: LAPS DDF file title: LAPS DDF file
description: Learn about the OMA DM device description framework (DDF) for the Local Administrator Password Solution configuration service provider. description: View the XML file containing the device description framework (DDF) for the LAPS configuration service provider.
ms.author: jsimmons author: vinaypamnani-msft
ms.topic: article manager: aaroncz
ms.author: vinpa
ms.date: 02/17/2023
ms.localizationpriority: medium
ms.prod: windows-client ms.prod: windows-client
ms.technology: itpro-manage ms.technology: itpro-manage
author: jsimmons ms.topic: reference
ms.localizationpriority: medium
ms.date: 07/04/2022
ms.reviewer: jsimmons
manager: jsimmons
--- ---
# Local Administrator Password Solution DDF file <!-- Auto-Generated CSP Document -->
This article shows the OMA DM device description framework (DDF) for the Local Administrator Password Solution (LAPS) configuration service provider. # LAPS DDF file
Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-ddf.md). The following XML file contains the device description framework (DDF) for the LAPS configuration service provider.
The XML below is the current version for this CSP.
```xml ```xml
<?xml version='1.0' encoding='utf-8' standalone='yes'?> <?xml version="1.0" encoding="UTF-8"?>
<identity <!DOCTYPE MgmtTree PUBLIC " -//OMA//DTD-DM-DDF 1.2//EN" "http://www.openmobilealliance.org/tech/DTD/DM_DDF-V1_2.dtd"[<?oma-dm-ddf-ver supported-versions="1.2"?>]>
xmlns="urn:Microsoft.CompPlat/ManifestSchema.v1.00" <MgmtTree xmlns:MSFT="http://schemas.microsoft.com/MobileDevice/DM">
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
owner="Microsoft"
namespace="Windows-DeviceManagement-CspDefinition"
name="LAPS">
<cspDefinition>
<MgmtTree>
<VerDTD>1.2</VerDTD> <VerDTD>1.2</VerDTD>
<BinaryPath>"%windir%\system32\LapsCSP.dll</BinaryPath> <MSFT:Diagnostics>
<Diagnostics></Diagnostics> </MSFT:Diagnostics>
<ComClsid>{298a6f17-03e7-4bd4-971c-544f359527b7}</ComClsid>
<Node> <Node>
<NodeName>LAPS</NodeName> <NodeName>LAPS</NodeName>
<Path>./Device/Vendor/MSFT</Path> <Path>./Device/Vendor/MSFT</Path>
@ -53,15 +42,13 @@ The XML below is the current version for this CSP.
<Permanent /> <Permanent />
</Scope> </Scope>
<DFType> <DFType>
<DDFName></DDFName> <DDFName />
</DFType> </DFType>
<Applicability> <MSFT:Applicability>
<OsBuildVersion>99.9.99999</OsBuildVersion> <MSFT:OsBuildVersion>99.9.99999</MSFT:OsBuildVersion>
<CspVersion>1.0</CspVersion> <MSFT:CspVersion>1.0</MSFT:CspVersion>
</Applicability> <MSFT:EditionAllowList>0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBF;0xCA;0xCB;0xCD;</MSFT:EditionAllowList>
<ExposedTo> </MSFT:Applicability>
<Mdm />
</ExposedTo>
</DFProperties> </DFProperties>
<Node> <Node>
<NodeName>Policies</NodeName> <NodeName>Policies</NodeName>
@ -81,9 +68,9 @@ The XML below is the current version for this CSP.
</Scope> </Scope>
<DFTitle>Policies</DFTitle> <DFTitle>Policies</DFTitle>
<DFType> <DFType>
<DDFName></DDFName> <DDFName />
</DFType> </DFType>
<AtomicRequired /> <MSFT:AtomicRequired />
</DFProperties> </DFProperties>
<Node> <Node>
<NodeName>BackupDirectory</NodeName> <NodeName>BackupDirectory</NodeName>
@ -114,22 +101,22 @@ If not specified, this setting will default to 0.</Description>
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<AllowedValues ValueType="ENUM"> <MSFT:AllowedValues ValueType="ENUM">
<Enum> <MSFT:Enum>
<Value>0</Value> <MSFT:Value>0</MSFT:Value>
<ValueDescription>Disabled (password will not be backed up)</ValueDescription> <MSFT:ValueDescription>Disabled (password will not be backed up)</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
<Enum> <MSFT:Enum>
<Value>1</Value> <MSFT:Value>1</MSFT:Value>
<ValueDescription>Backup the password to Azure AD only</ValueDescription> <MSFT:ValueDescription>Backup the password to Azure AD only</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
<Enum> <MSFT:Enum>
<Value>2</Value> <MSFT:Value>2</MSFT:Value>
<ValueDescription>Backup the password to Active Directory only</ValueDescription> <MSFT:ValueDescription>Backup the password to Active Directory only</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
</AllowedValues> </MSFT:AllowedValues>
</DFProperties> </DFProperties>
</Node> </Node>
<Node> <Node>
@ -159,27 +146,41 @@ This setting has a maximum allowed value of 365 days.</Description>
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<AllowedValues ValueType="Range"> <MSFT:AllowedValues ValueType="Range">
<Value>[1-365]</Value> <MSFT:Value>[1-365]</MSFT:Value>
</AllowedValues> </MSFT:AllowedValues>
<DependencyBehavior> <MSFT:DependencyBehavior>
<DependencyGroup FriendlyId="BackupDirectory"> <MSFT:DependencyGroup FriendlyId="BackupDirectoryAADMode">
<DependencyChangedAllowedValues ValueType="Range"> <MSFT:DependencyChangedAllowedValues ValueType="Range">
<Value>[7-365]</Value> <MSFT:Value>[7-365]</MSFT:Value>
</DependencyChangedAllowedValues> </MSFT:DependencyChangedAllowedValues>
<Dependency Type="DependsOn"> <MSFT:Dependency Type="DependsOn">
<DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</DependencyUri> <MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
<DependencyAllowedValue ValueType="ENUM"> <MSFT:DependencyAllowedValue ValueType="ENUM">
<Enum> <MSFT:Enum>
<Value>1</Value> <MSFT:Value>1</MSFT:Value>
<ValueDescription>BackupDirectory configured to Azure AD</ValueDescription> <MSFT:ValueDescription>BackupDirectory configured to Azure AD</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
</DependencyAllowedValue> </MSFT:DependencyAllowedValue>
</Dependency> </MSFT:Dependency>
</DependencyGroup> </MSFT:DependencyGroup>
</DependencyBehavior> <MSFT:DependencyGroup FriendlyId="BackupDirectoryADMode">
<MSFT:DependencyChangedAllowedValues ValueType="Range">
<MSFT:Value>[1-365]</MSFT:Value>
</MSFT:DependencyChangedAllowedValues>
<MSFT:Dependency Type="DependsOn">
<MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
<MSFT:DependencyAllowedValue ValueType="ENUM">
<MSFT:Enum>
<MSFT:Value>2</MSFT:Value>
<MSFT:ValueDescription>BackupDirectory configured to Active Directory</MSFT:ValueDescription>
</MSFT:Enum>
</MSFT:DependencyAllowedValue>
</MSFT:Dependency>
</MSFT:DependencyGroup>
</MSFT:DependencyBehavior>
</DFProperties> </DFProperties>
</Node> </Node>
<Node> <Node>
@ -212,26 +213,26 @@ If not specified, this setting will default to 4.</Description>
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<AllowedValues ValueType="ENUM"> <MSFT:AllowedValues ValueType="ENUM">
<Enum> <MSFT:Enum>
<Value>1</Value> <MSFT:Value>1</MSFT:Value>
<ValueDescription>Large letters</ValueDescription> <MSFT:ValueDescription>Large letters</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
<Enum> <MSFT:Enum>
<Value>2</Value> <MSFT:Value>2</MSFT:Value>
<ValueDescription>Large letters + small letters</ValueDescription> <MSFT:ValueDescription>Large letters + small letters</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
<Enum> <MSFT:Enum>
<Value>3</Value> <MSFT:Value>3</MSFT:Value>
<ValueDescription>Large letters + small letters + numbers</ValueDescription> <MSFT:ValueDescription>Large letters + small letters + numbers</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
<Enum> <MSFT:Enum>
<Value>4</Value> <MSFT:Value>4</MSFT:Value>
<ValueDescription>Large letters + small letters + numbers + special characters</ValueDescription> <MSFT:ValueDescription>Large letters + small letters + numbers + special characters</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
</AllowedValues> </MSFT:AllowedValues>
</DFProperties> </DFProperties>
</Node> </Node>
<Node> <Node>
@ -261,11 +262,11 @@ This setting has a maximum allowed value of 64 characters.</Description>
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<AllowedValues ValueType="Range"> <MSFT:AllowedValues ValueType="Range">
<Value>[8-64]</Value> <MSFT:Value>[8-64]</MSFT:Value>
</AllowedValues> </MSFT:AllowedValues>
</DFProperties> </DFProperties>
</Node> </Node>
<Node> <Node>
@ -294,7 +295,7 @@ Note: if a custom managed local administrator account name is specified in this
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
</DFProperties> </DFProperties>
</Node> </Node>
@ -323,31 +324,31 @@ If not specified, this setting defaults to True.</Description>
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<AllowedValues ValueType="ENUM"> <MSFT:AllowedValues ValueType="ENUM">
<Enum> <MSFT:Enum>
<Value>false</Value> <MSFT:Value>false</MSFT:Value>
<ValueDescription>Allow configured password expiriration timestamp to exceed maximum password age</ValueDescription> <MSFT:ValueDescription>Allow configured password expiriration timestamp to exceed maximum password age</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
<Enum> <MSFT:Enum>
<Value>true</Value> <MSFT:Value>true</MSFT:Value>
<ValueDescription>Do not allow configured password expiriration timestamp to exceed maximum password age</ValueDescription> <MSFT:ValueDescription>Do not allow configured password expiriration timestamp to exceed maximum password age</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
</AllowedValues> </MSFT:AllowedValues>
<DependencyBehavior> <MSFT:DependencyBehavior>
<DependencyGroup FriendlyId="BackupDirectory"> <MSFT:DependencyGroup FriendlyId="BackupDirectory">
<Dependency Type="DependsOn"> <MSFT:Dependency Type="DependsOn">
<DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</DependencyUri> <MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
<DependencyAllowedValue ValueType="ENUM"> <MSFT:DependencyAllowedValue ValueType="ENUM">
<Enum> <MSFT:Enum>
<Value>2</Value> <MSFT:Value>2</MSFT:Value>
<ValueDescription>BackupDirectory configured to Active Directory</ValueDescription> <MSFT:ValueDescription>BackupDirectory configured to Active Directory</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
</DependencyAllowedValue> </MSFT:DependencyAllowedValue>
</Dependency> </MSFT:Dependency>
</DependencyGroup> </MSFT:DependencyGroup>
</DependencyBehavior> </MSFT:DependencyBehavior>
</DFProperties> </DFProperties>
</Node> </Node>
<Node> <Node>
@ -359,7 +360,7 @@ If not specified, this setting defaults to True.</Description>
<Get /> <Get />
<Replace /> <Replace />
</AccessType> </AccessType>
<DefaultValue>False</DefaultValue> <DefaultValue>True</DefaultValue>
<Description>Use this setting to configure whether the password is encrypted before being stored in Active Directory. <Description>Use this setting to configure whether the password is encrypted before being stored in Active Directory.
This setting is ignored if the password is currently being stored in Azure. This setting is ignored if the password is currently being stored in Azure.
@ -370,7 +371,7 @@ If this setting is enabled, and the Active Directory domain meets the DFL prereq
If this setting is disabled, or the Active Directory domain does not meet the DFL prerequisite, the password will be stored as clear-text in Active Directory. If this setting is disabled, or the Active Directory domain does not meet the DFL prerequisite, the password will be stored as clear-text in Active Directory.
If not specified, this setting defaults to False.</Description> If not specified, this setting defaults to True.</Description>
<DFFormat> <DFFormat>
<bool /> <bool />
</DFFormat> </DFFormat>
@ -381,31 +382,31 @@ If not specified, this setting defaults to False.</Description>
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<AllowedValues ValueType="ENUM"> <MSFT:AllowedValues ValueType="ENUM">
<Enum> <MSFT:Enum>
<Value>false</Value> <MSFT:Value>false</MSFT:Value>
<ValueDescription>Store the password in clear-text form in Active Directory</ValueDescription> <MSFT:ValueDescription>Store the password in clear-text form in Active Directory</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
<Enum> <MSFT:Enum>
<Value>true</Value> <MSFT:Value>true</MSFT:Value>
<ValueDescription>Store the password in encrypted form in Active Directory</ValueDescription> <MSFT:ValueDescription>Store the password in encrypted form in Active Directory</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
</AllowedValues> </MSFT:AllowedValues>
<DependencyBehavior> <MSFT:DependencyBehavior>
<DependencyGroup FriendlyId="BackupDirectory"> <MSFT:DependencyGroup FriendlyId="BackupDirectory">
<Dependency Type="DependsOn"> <MSFT:Dependency Type="DependsOn">
<DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</DependencyUri> <MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
<DependencyAllowedValue ValueType="ENUM"> <MSFT:DependencyAllowedValue ValueType="ENUM">
<Enum> <MSFT:Enum>
<Value>2</Value> <MSFT:Value>2</MSFT:Value>
<ValueDescription>BackupDirectory configured to Active Directory</ValueDescription> <MSFT:ValueDescription>BackupDirectory configured to Active Directory</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
</DependencyAllowedValue> </MSFT:DependencyAllowedValue>
</Dependency> </MSFT:Dependency>
</DependencyGroup> </MSFT:DependencyGroup>
</DependencyBehavior> </MSFT:DependencyBehavior>
</DFProperties> </DFProperties>
</Node> </Node>
<Node> <Node>
@ -436,21 +437,21 @@ If the specified user or group account is invalid the device will fallback to us
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<DependencyBehavior> <MSFT:DependencyBehavior>
<DependencyGroup FriendlyId="BackupDirectory"> <MSFT:DependencyGroup FriendlyId="BackupDirectory">
<Dependency Type="DependsOn"> <MSFT:Dependency Type="DependsOn">
<DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</DependencyUri> <MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
<DependencyAllowedValue ValueType="ENUM"> <MSFT:DependencyAllowedValue ValueType="ENUM">
<Enum> <MSFT:Enum>
<Value>2</Value> <MSFT:Value>2</MSFT:Value>
<ValueDescription>BackupDirectory configured to Active Directory</ValueDescription> <MSFT:ValueDescription>BackupDirectory configured to Active Directory</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
</DependencyAllowedValue> </MSFT:DependencyAllowedValue>
</Dependency> </MSFT:Dependency>
</DependencyGroup> </MSFT:DependencyGroup>
</DependencyBehavior> </MSFT:DependencyBehavior>
</DFProperties> </DFProperties>
</Node> </Node>
<Node> <Node>
@ -480,24 +481,24 @@ This setting has a maximum allowed value of 12 passwords.</Description>
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<AllowedValues ValueType="Range"> <MSFT:AllowedValues ValueType="Range">
<Value>[0-12]</Value> <MSFT:Value>[0-12]</MSFT:Value>
</AllowedValues> </MSFT:AllowedValues>
<DependencyBehavior> <MSFT:DependencyBehavior>
<DependencyGroup FriendlyId="BackupDirectory"> <MSFT:DependencyGroup FriendlyId="BackupDirectory">
<Dependency Type="DependsOn"> <MSFT:Dependency Type="DependsOn">
<DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</DependencyUri> <MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
<DependencyAllowedValue ValueType="ENUM"> <MSFT:DependencyAllowedValue ValueType="ENUM">
<Enum> <MSFT:Enum>
<Value>2</Value> <MSFT:Value>2</MSFT:Value>
<ValueDescription>BackupDirectory configured to Active Directory</ValueDescription> <MSFT:ValueDescription>BackupDirectory configured to Active Directory</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
</DependencyAllowedValue> </MSFT:DependencyAllowedValue>
</Dependency> </MSFT:Dependency>
</DependencyGroup> </MSFT:DependencyGroup>
</DependencyBehavior> </MSFT:DependencyBehavior>
</DFProperties> </DFProperties>
</Node> </Node>
<Node> <Node>
@ -527,11 +528,11 @@ This setting has a maximum allowed value of 12 passwords.</Description>
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<AllowedValues ValueType="Range"> <MSFT:AllowedValues ValueType="Range">
<Value>[0-24]</Value> <MSFT:Value>[0-24]</MSFT:Value>
</AllowedValues> </MSFT:AllowedValues>
</DFProperties> </DFProperties>
</Node> </Node>
<Node> <Node>
@ -558,22 +559,22 @@ If not specified, this setting will default to 3 (Reset the password and logoff
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<AllowedValues ValueType="ENUM"> <MSFT:AllowedValues ValueType="ENUM">
<Enum> <MSFT:Enum>
<Value>1</Value> <MSFT:Value>1</MSFT:Value>
<ValueDescription>Reset password: upon expiry of the grace period, the managed account password will be reset.</ValueDescription> <MSFT:ValueDescription>Reset password: upon expiry of the grace period, the managed account password will be reset.</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
<Enum> <MSFT:Enum>
<Value>3</Value> <MSFT:Value>3</MSFT:Value>
<ValueDescription>Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will terminated.</ValueDescription> <MSFT:ValueDescription>Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will terminated.</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
<Enum> <MSFT:Enum>
<Value>5</Value> <MSFT:Value>5</MSFT:Value>
<ValueDescription>Reset the password and reboot: upon expiry of the grace period, the managed account password will be reset and the managed device will be immediately rebooted.</ValueDescription> <MSFT:ValueDescription>Reset the password and reboot: upon expiry of the grace period, the managed account password will be reset and the managed device will be immediately rebooted.</MSFT:ValueDescription>
</Enum> </MSFT:Enum>
</AllowedValues> </MSFT:AllowedValues>
</DFProperties> </DFProperties>
</Node> </Node>
</Node> </Node>
@ -594,7 +595,7 @@ If not specified, this setting will default to 3 (Reset the password and logoff
</Scope> </Scope>
<DFTitle>Actions</DFTitle> <DFTitle>Actions</DFTitle>
<DFType> <DFType>
<DDFName></DDFName> <DDFName />
</DFType> </DFType>
</DFProperties> </DFProperties>
<Node> <Node>
@ -614,9 +615,8 @@ If not specified, this setting will default to 3 (Reset the password and logoff
<Dynamic /> <Dynamic />
</Scope> </Scope>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
<AsynchronousTracking ResourceSuccessURI="ResetPasswordStatus" ResourceSuccessValues="0" ResourceInProgressValues="10" ResourceFailureValues="20"/>
</DFProperties> </DFProperties>
</Node> </Node>
<Node> <Node>
@ -638,17 +638,15 @@ If not specified, this setting will default to 3 (Reset the password and logoff
</Scope> </Scope>
<DFTitle>ResetPasswordStatus</DFTitle> <DFTitle>ResetPasswordStatus</DFTitle>
<DFType> <DFType>
<MIME>text/plain</MIME> <MIME />
</DFType> </DFType>
</DFProperties> </DFProperties>
</Node> </Node>
</Node> </Node>
</Node> </Node>
</MgmtTree> </MgmtTree>
</cspDefinition>
</identity>
``` ```
## Related articles ## Related articles
[LAPS configuration service provider](laps-csp.md) [LAPS configuration service provider reference](laps-csp.md)

View File

@ -767,10 +767,10 @@ items:
items: items:
- name: LanguagePackManagement DDF file - name: LanguagePackManagement DDF file
href: language-pack-management-ddf-file.md href: language-pack-management-ddf-file.md
- name: Local Administrator Password Solution - name: LAPS
href: laps-csp.md href: laps-csp.md
items: items:
- name: Local Administrator Password Solution DDF - name: LAPS DDF file
href: laps-ddf-file.md href: laps-ddf-file.md
- name: MultiSIM - name: MultiSIM
href: multisim-csp.md href: multisim-csp.md