AMA: Windows LAPS

Hi GreigMitchell ,

There could be multiple angles to this question.   If you are referring to slicing and dicing of assigned Group Polices, there is nothing specific about Windows LAPS in that respect.  If you want to make it easy, just target a difference local admin account for your Windows LAPS-capable machines and assign a blanket uniform policy to all machines.   As the older machines age out, the ratio of Windows LAPS-only machines will continue to climb.   Just an idea.

If you are referring to monitoring, then you do need to be aware of the different attributes that new Windows LAPS is using.  See:

Windows LAPS schema extensions reference

You may need to update any homegrown monitoring solutions that you were using with legacy LAPS. 

Jay