Test Access Ports (TAP) vs. Network Packet Broker (NPB) for Monitoring Software Defined Networks (SDN)

In summary,

TAPs rely on network packet brokers for advanced features; network packet brokers rely on TAPs for bare metal.

Also, NPBs supposedly enable link-layer visibility.

See the following articles for a starting point to getting more info on this topic:
https://www.networkworld.com/article/2903694/network-management/sdn-management-battle-taps-vs-network-packet-brokers.html
https://www.networkworld.com/article/2291059/infrastructure-management/permanent-network-taps-for-complex-infrastructure.html
https://www.networkworld.com/article/2190430/infrastructure-management/network-packet-brokers-increase-visibility-and-performance.html
https://andyhuckridge.com/2012/02/12/maintaining-link-layer-visibility/

Local Administrator Password Solution - LAPS

Microsoft provide a free local administrator password management tool, to enable centralised management of randomised local administrator passwords, mitigating

the risk of lateral escalation that results when customers have the same administrative local account and password combination on many computers.

The tool is available here:
https://technet.microsoft.com/en-us/mt227395.aspx