AD Computer Discovery for LAPS Password-Attribute Gaps

Enumerate Active Directory computer objects that lack the legacy Microsoft LAPS or Windows LAPS password-backup attributes in the queried AD naming context, then collect local-administrator relationships for those candidate computers. Missing AD attributes indicate no current backup in those attributes; they do not prove that a LAPS policy is disabled, that a host is vulnerable, or that credentials were harvested or reused. This LDAP procedure does not detect Windows LAPS passwords backed up to Microsoft Entra ID and does not request password values.