Implement LAPS

Microsoft Local Administrator Password Solution

LAPS helps you to maintain your network secure and prevent Pass-the-hash attacks. 

Too often admins will use the same local admin passwords (or worst, the domain admin password) for all the domain joined endpoints they manage. LAPS is an easy solution provided by Microsoft to help you manage your Windows workstations with a unique administrator passwords.