Make the LAPS tab available to non-domain admins on ADUC (RSAT)

Make the LAPS tab available to non-domain admins on ADUC (RSAT)
0

Upvotes

Upvote

 May 04 2023
5 Comments (5 New)
Completed

Currently, the tab is only available to Domain Admins and the rest of our delegated admins can only use PowerShell.

Comments
Microsoft
Status changed to: In the backlog
 
Microsoft

@mandreou - thanks for the feedback.  Adding the new LAPS-enabled ADUC to RSAT is something I am actively looking into.  No ETA at this time.

 

One question: I keep hearing that non-Domain Admins are not able to see the new LAPS ADUC tab.  I was unable to repro this - I tested by logging into a Server sku as a non-DA account and running ADUC - the LAPS tab showed up fine.   So I am interpreting the comment "non-Domain Admins cannot see the LAPS tab" to really mean "the new LAPS-enabled ADUC is not available on client SKUs" (ie via RSAT).   Please correct me if this interpretation is incorrect.

Microsoft

@mandreou - I've tested Windows 11 and Windows 10 with RSAT installed and the new LAPS-enabled ADUC tab IS present in that configuration.  And the new new LAPS-enabled ADUC tab shows up just fine on those client SKUs for a non-Domain Admin.  Can you clarify where you are not seeing the new LAPS-enabled ADUC tab?

Microsoft

I have added documentation here that describes how to get access to the new LAPS-enabled ADUC, including via RSAT on Windows 11 and Windows 10:

 

Windows LAPS Snap-in Availability

 

There are no plans to make the new LAPS-enabled ADUC available on any older platforms or in older versions of RSAT, including the externally installed pkg version of RSAT.

Microsoft
Status changed to: Completed