Why Isn't LAPS Information Showing Up in Active Directory After Upgrading to Windows 11?
Asked by
TechieTurtle89
After upgrading to Windows 11, I've noticed that the LAPS (Local Administrator Password Solution) information isn't visible under the LAPS Tab in Active Directory. Although the tab itself is present, it doesn't display crucial details like the password expiration date, admin name, or password. Instead, I have to navigate to the Attributes Tab to find the password, which is quite inconvenient. Does anyone have suggestions on what might be going wrong or how to fix this?
Answers
Windows 11 version 23H2 adjusted the way LAPS attributes are cached in ADUC. The issue you're facing is that the LAPS Tab relies on the legacy LAPS UI, which doesn't read the newer LAPS (2023) attributes. It’s a good idea to install the latest LAPS client UI from Microsoft, or you can retrieve the password using PowerShell with the command: Get-LapsADPassword -Identity -AsPlainText. The Attributes Tab continues to function correctly because it accesses the raw LDAP.
Reply to this answer
Check your Group Policy Objects (GPOs). There's a distinction between legacy LAPS and the newer Windows LAPS that you're trying to access in Active Directory User Center (ADUC). Make sure your forest is set to at least 2016, and verify that the AD schema has been extended with the correct settings in GPO.
Reply to this answer
I think it might be helpful to clarify which version of LAPS you're using. The legacy version still works in many cases, but if that's the case, ensure that you're running the LAPS UI as an administrator to see the proper information.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions