Good Evening Jay, I will be using this feature for the first time in my new Environment. I have never installed the previous version of LAPS, referred here as Legacy LAPS. My environment is as follow:
1) DCs on Server 2012 r2, 2016
2) Other member servers, but none on Server 2019 or higher
3) Clients - Windows 10, 11 - all to be updated with April '23 SU very soon
I want to know if I install legacy LAPS on domain controllers for management purpose, and put all the machines (including the updated Windows 10,11 clients) in LAPS scope, will the Windows LAPS honor the legacy LAPS GPOs and continue to perform the required actions? OR, should I introduce a member server 2019, update the schema as per Windows LAPS and apply Windows LAPS policy on all the eligible machines?
I understand it's too many questions in one comment, but I believe many like me will be benefitted from your answer. Thank you in advance!