Windows Local Administrator Password Solution (LAPS) is now integrated into the operating system to secure local accounts by rotating unique passwords and escrowing them to a directory. To manage this through Microsoft Intune, administrators must first enable the feature at the tenant level within the Microsoft Entra admin center. Once enabled, an account protection policy can be deployed to define the backup directory, password complexity, and rotation frequency for managed devices.
Source