This is hands down the best technical video for a deployment I have ever seen. I was getting stressed out reading all the confusing MS documentation and needed this deployed ASAP and this video hit out of the park. We're up and running in a couple of hours! Thank you!!!!
Perfectly outlined video that hit all the topics. Our environment is a bit different, but all of this really helped me see the missing components for the deployment. Thank you!
@@TheSysadminChannel lab went well, as with anything practising it makes it easy to understand. It raises good security policy questions to have in the organisation, for example high secure servers can only have their admin passwords read by a different group compared to other servers etc
No. Domain Controllers don’t have local users so laps is not needed. Only a domain admin (and the like) can log into a domain controller. Hence why in the video we excluded domain controllers from the push policy
We've 4 sites and 2 DCs per site, What is the best practice to install Laps. Do we need to install in DC? Do we need to install it in schema master DC?What are the risks of updating the schema in such a infrastructure ? Advice please
Hi Dinoop - Installing LAPS increases your security footprint so it’s definitely recommended. But to answer your questions, the LAPS client does not get installed on DCs because local accounts can’t login to DCs. When you update your schema, youll want to update it on the DC that holds the schema master role. (Netdom query FSMO) is the command to check FSMO roles. The video goes into depth and if you follow it step by step you shouldn’t have any issues
hi, i've done implementing my LAPS, but there is some problem. when i install the LAPS on new PC Desktop, the LAPS wont updated the password automaticly. what should i do? 1. Gpupdate /force from my domain controller? 2. import the module then update the module pwd again? pls i need answer thx.
Hi - are your accounts the default administrator account? Did you add yourself permissions to view the passwords? If you run a gpresult does the policy show it being applied? If you followed the video step by step you shouldn’t have any issues as it’s shown working in the video
Blog Post for Powershell Commands:
thesysadminchannel.com/deploying-laps-sccm-local-administrator-password-solution/
This is hands down the best technical video for a deployment I have ever seen. I was getting stressed out reading all the confusing MS documentation and needed this deployed ASAP and this video hit out of the park. We're up and running in a couple of hours! Thank you!!!!
Perfectly outlined video that hit all the topics. Our environment is a bit different, but all of this really helped me see the missing components for the deployment.
Thank you!
I’m super glad it helped and thanks for the feedback mate!
Thank you
Great video thank you very much
Thanks for the feedback and I’m glad you liked it. Cheers mate!
It's helpful video.
Glad you think so! Cheers Mate!
great vid!
Great vid, thanks for your effort.
Thanks for the feedback! Much appreciated.
I intend to practice this
Awesome. Let me know how it goes. It’s well worth it and much more secure than using default passwords. It’s best practice.
@@TheSysadminChannel lab went well, as with anything practising it makes it easy to understand. It raises good security policy questions to have in the organisation, for example high secure servers can only have their admin passwords read by a different group compared to other servers etc
does laps need to be installed on a Domain Controller, i have read no in some cases , but other articles say yes
No. Domain Controllers don’t have local users so laps is not needed. Only a domain admin (and the like) can log into a domain controller.
Hence why in the video we excluded domain controllers from the push policy
We've 4 sites and 2 DCs per site, What is the best practice to install Laps. Do we need to install in DC? Do we need to install it in schema master DC?What are the risks of updating the schema in such a infrastructure ? Advice please
Hi Dinoop - Installing LAPS increases your security footprint so it’s definitely recommended. But to answer your questions, the LAPS client does not get installed on DCs because local accounts can’t login to DCs.
When you update your schema, youll want to update it on the DC that holds the schema master role. (Netdom query FSMO) is the command to check FSMO roles.
The video goes into depth and if you follow it step by step you shouldn’t have any issues
@@TheSysadminChannel Thanks Mate
hi, i've done implementing my LAPS, but there is some problem.
when i install the LAPS on new PC Desktop, the LAPS wont updated the password automaticly. what should i do?
1. Gpupdate /force from my domain controller?
2. import the module then update the module pwd again?
pls i need answer thx.
Hi - are your accounts the default administrator account? Did you add yourself permissions to view the passwords? If you run a gpresult does the policy show it being applied?
If you followed the video step by step you shouldn’t have any issues as it’s shown working in the video
Make sure the PC's computer account is in an OU to which you applied the GPO.
I can not see client password, what am doing it wrong?