Overview

TWAPS stands for Third Wall Administrator Password Solution.  Very much like Microsoft's LAPS, it ensures each remote computer's built-in local administrator account has applied a unique and complex password which is automatically generated.  As soon as this policy is enabled, expect the built-in local administrator account on all Workstations to be changed quickly.


This policy is found under the 'Local Built-In Account Management' category in Third Wall and it offers two controls with the policy.  Password length (in characters) and password age (in days).  Moving the slider for ether value will change the settings applied to the remote:



Application


Very shortly after applying the policy, the Built-In Administrator account's password will be modified and monitored.  Expect the password to be modified at the interval selected by the 'Password Life' slider.  Neither application will cause an alert to occur.  If the policy monitor (which runs every five minutes) finds the password changed, a new password will be generated and applied, and an alert will be issued to notify you of the change.


Requirements


This policy requires the FIPS-Compliant encryption has been enabled within Third Wall.  To do this, open the Automate Dashboard and navigate to Config -> Integrations -> Third Wall.  From that screen, press the Encryption link and follow the on-screen instructions.


Utilization


When a managed computer has the TWAPS policy enabled, the password will be viewable from the Computer Screen.  To see this, open the Computer Screen, then the Third Wall tab.  Finally, check the bottom right of the screen for the Emergency Action buttons.  You'll find a new row on the bottom with two new buttons:  Show Password and Reset Password.

'Show Password' shows the password currently assigned to the built-in, local administrator:



'Reset Password' allows you to change the password at any time:


Undo


Undo has no effect on the computer.  There is no 'default' password which is assigned.  The Undo process only stops the monitor and any further changes to the password.


Backup


TWAPS supports scheduled backups of all your TWAPS assigned passwords.  This KB https://thirdwallhelp.freshdesk.com/a/solutions/articles/43000630906 will explain the process in detail.