Read "Remote Use of Local Accounts: LAPS Changes Everything"
Over on the Microsoft Security Guidance blog, we've posted a long overdue article about LAPS enabling us to revisit the question about whether and when to block the use of local accounts, particularly for remote administration: https://blogs.technet.microsoft.com/secguide/2018/12/10/remote-use-of-local-accounts-laps-changes-everything/