Blog Post

Windows IT Pro Blog
4 MIN READ

By popular demand: Windows LAPS available now!

JaySimmons's avatar
JaySimmons
Icon for Microsoft rankMicrosoft
Apr 11, 2023
Welcome to the new and improved Windows LAPS! That's Local Administrator Password Solution. We've been listening to your feedback and requests, and the day is finally here for both cloud and on-premi...
Updated Nov 09, 2023
Version 7.0
security
servicing and updates
Karl-WE's avatar
Karl-WE
MVP
Oct 19, 2023

JaySimmons cheers for taking the time!

Was a great ride finding the cause.

 

GPO EXAMPLE (not working) 

("SID")

or 

"CONTOSO\GROUP OR USER"

 

WORKING EXAMPLE

SID

CONTOSO\GROUP OR USER

 

 

How to make customers more secure and happy:

That said, implementation of Windows LAPS, without compat modes needed on all Windows Servers (2019 or newer only), worked like a charm. 

 

All passwords, if permitted, easily accessible in Active Directory Administrative Center (DSAC) 

 

All they needed were 2 Group Policies, and 3 AD Groups (one for Domain Controllers, one for other servers, one for those that shall not receive LAPS for a reason, such as Citrix VAD etc., put in each GPO apply denied). 

 

Except the glitch, documentation, troubleshooting guidance, PowerShell support, everything was top notch. KUDOS! Great product and enhancement over legacy LAPS. 

 

Next stop: Windows LAPS for Intune. 

Have heard different opinions about manageability.