

Local account rotation, credential hygiene, and File Vault.
PAM: local account password rotation
Configure, validate, and operate password rotation for managed Windows local accounts.
Vault: force-rotate and RID-500 admin notes
Safely force-rotate a local account and manage the Windows built-in administrator identity.
Vault credential reveal and role hygiene
Reveal local-account credentials safely and maintain least-privilege Vault roles.
Personal Vault and sharing limits
Configure Personal Vault restrictions, manage user-owned encrypted files, and create limited sharing links.