bmkaiser00
Jul 29, 2025Copper Contributor
Status:
New
LAPS Passwords Should Always Be Removed from AD When switching to Entra password backup
In our deployment of Windows LAPS, we've discovered two scenarios where the Legacy LAPS password details persists in Active Directory even though the device is now using Windows LAPS:
When changi...
bmkaiser00
Aug 27, 2025Copper Contributor
Thank you, JaySimmons ! One possibly important detail that I left out of my original post is that we had been using Windows LAPS in legacy Microsoft LAPS emulation mode. We uninstalled the LAPS GPO CSE while continuing to use the legacy Microsoft LAPS group policy templates until this final migration where we started to use the Windows LAPS policies.