LAPS Installation and Configuration

1. Download LAPS from Microsoft 2. Install LAPS on AD 3. Extend the AD Schema Import-module AdmPwd.PS Update-AdmPwdADSchema 4. Set the Permissions Set-AdmPwdComputerSelfPermission -OrgUnit FOCServers Set-AdmPwdComputerSelfPermission -OrgUnit FOCClients Assign permissions to the group for password access Find-AdmPwdExtendedRights -Identity FOCServers Find-AdmPwdExtendedRights -Identity FOCClients Grant Permissions to IT Support to view the admin passwords. ITSupport is the Security Group having IT support users with admin rights Set-AdmPwdReadPasswordPermission -Identity FOCServers -AllowedPrincipals ITSupport Find-AdmPwdExtendedRights -Identity FOCServers fl 5. Now Install Client Side Extension Computer Configuration Policies Software Settings Software Installations Computer Configuration Administrative Templates LAPS 6. Testing Check local administrator password using LAPS UI or PowerShell Get-AdmPwdPassword -ComputerName FileSRV,

#