Windows servers
2 TopicsInstalling Windows LAPS over Legacy LAPS
Hi all, I have a simple LAB - of 1 DC and 1 member server (both 2019) which has had legacy LAPS installed (schema extended etc). Now when I installed the MS update on the member server and then tried to run the permission command I got an error saying have you extended the schema. I tried to extend the schema using the new LAPs command but got an exception error. Now I can't find any documentation or info regarding 1 ) In an environment where legacy LAPS has been configured, do you have to extend the schema again? 2) Do you have to run the permission command on the OU so the machines can write to the password attribute? The LAPS has been out for a while so we should have more info.Solved669Views0likes2CommentsActive Directory Unable to reset user passwords
I am managing a Windows Server 2025 Active Directory environment with client machines. I created a test user and enabled the option “User must change password at next logon.” I then provided a temporary password to the user, expecting them to get the prompt to change it on first login. However, when the user attempts to change the password, they receive the error: “The user must change password before signing in.” My goal is that when I provide a temporary password to a user: They get the prompt to change the password at next logon. When they change it, it should not throw the “user must change password before signing in” error. I need guidance on how to achieve this so users can reset their passwords successfully.