After upgrading to Windows 11, I've noticed that the LAPS (Local Administrator Password Solution) information isn't visible under the LAPS Tab in Active Directory. Although the tab itself is present, it doesn't display crucial details like the password expiration date, admin name, or password. Instead, I have to navigate to the Attributes Tab to find the password, which is quite inconvenient. Does anyone have suggestions on what might be going wrong or how to fix this?
2 Answers
Check your Group Policy Objects (GPOs). There's a distinction between legacy LAPS and the newer Windows LAPS that you're trying to access in Active Directory User Center (ADUC). Make sure your forest is set to at least 2016, and verify that the AD schema has been extended with the correct settings in GPO.
Windows 11 version 23H2 adjusted the way LAPS attributes are cached in ADUC. The issue you're facing is that the LAPS Tab relies on the legacy LAPS UI, which doesn't read the newer LAPS (2023) attributes. It’s a good idea to install the latest LAPS client UI from Microsoft, or you can retrieve the password using PowerShell with the command: Get-LapsADPassword -Identity -AsPlainText. The Attributes Tab continues to function correctly because it accesses the raw LDAP.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures