Principle of Least Privilege states that a subject should be given only those privileges needed for it to complete its task.
Microsoft LAPS is a password manager that utilizes Active Directory to manage and rotate passwords for local Administrator accounts across all of your Windows endpoints.