Windows 11 Build 22145 adds ‘Local Administrator Password Solution’, LAPS

Windows 11 Make 25145 receives native support for the legacy Regional Administrator Password Answer merchandise (aka “LAPS”)

The “Area Administrator Password Remedy” (LAPS) gives administration of nearby account passwords of domain joined desktops. Passwords are stored in Energetic Directory (Ad) and shielded by ACL, so only eligible users can read it or request its reset.

The latest update of Windows 11 Dev (Preview) create 25145.1000 for the Windows Insiders arrives with the native assistance for the legacy Regional Administrator Password Alternative (LAPS) and involves various new capabilities. If you have utilized the legacy LAPS item, numerous of the features (stated below) in this new version of LAPS will be common to you.

1. Prolong your Active Listing schema by functioning the Update-LapsADSchema cmdlet in the new LAPS PowerShell module.
2. Add the required permissions on your computer’s OU by functioning the Established-LapsADComputerSelfPermission cmdlet.
3. Increase a new LAPS Group Coverage item and permit the “Configure password backup listing” location and configure it to backup the password to “Energetic Listing”.
4. The domain-joined consumer will method the policy at the up coming GPO refresh interval. Run “gpupdate /focus on:computer system /force” to avoid waiting.
5. At the time the area-joined consumer has backed up a new password, operate the Get-LapsADPassword cmdlet to retrieve the recently stored password (by default you will have to be functioning as a area administrator).

To get to this new Group Policy, open up the Team Coverage editor and navigate to Computer Configuration > Administrative Templates > Program > LAPS.

The aspect is absolutely useful for Active Listing area-joined clients, but Azure Energetic Directory aid is limited for now to a modest set of Insiders, says Microsoft.