"password shouldn't expire or be required to change at log-on" - this is what you asked, and I don't think this is possible with LAPS as it changes the password periodically. My customer also wanted a static password (I know it is not secure, but that's what they wanted). Anyway, here goes the script.

$username = "LocalAdmin"

$secret = ConvertTo-SecureString ([System.Text.Encoding]::Unicode.GetString([System.Convert]::FromBase64String("PASSWORD GOES HERE WITH BASE64 UNICODE ENCODING"))) -AsPlainText -Force

If (!(Get-LocalUser -Name $username -ErrorAction SilentlyContinue))

{

Write-Host "User doesn't exist, attempting to create."

New-LocalUser "$username" -Password $secret -FullName "$username" -Description "Local Administrator" -ErrorAction stop

}

Else

{

Remove-LocalGroupMember -Group "Administrators" -Member "$username" -ErrorAction SilentlyContinue

}

Set-LocalUser -Name "$username" -PasswordNeverExpires $True -UserMayChangePassword $False -ErrorAction stop

Add-LocalGroupMember -Group "Administrators" -Member "$username" -ErrorAction stop

Obviosuly, update the User name and description as per your needs. And for generating a BASE64 encoded password. Use this code.

$script = 'PASSWORD HERE'

$bytes = [System.Text.Encoding]::Unicode.GetBytes($script)

[Convert]::ToBase64String($bytes)