What a great and detailed explanation of LAPS implementation. I've got some questions, though. 1. Should the detection script also check if the user is in the admin group? If there is a chance the user with such a name exists but is not in the admin group the script will probably fail to execute. 2. Do we need to configure any parameters when creating a user such as "User must change password at next logon" and/or "Password never expires" Thanks
Hi Nicklas. Do you have any suggestions for those who aren't licensed for Remediation scripts? Also, have you run through the migration from legacy to modern scenario yet?
You could use a configuration profile, e.g. here: cloudinfra.net/how-to-create-a-local-admin-account-using-intune/ but that is sometimes a little unreliable. If you are interested in the migration scenario, consider my blog post oceanleaf.ch/windows-laps-guide/ or watch my comprehensive video guide here: ua-cam.com/video/LzGiLCVIew8/v-deo.html&ab
Awesome video, great explanation and breakdown of LAPS.
What a great and detailed explanation of LAPS implementation. I've got some questions, though.
1. Should the detection script also check if the user is in the admin group? If there is a chance the user with such a name exists but is not in the admin group the script will probably fail to execute.
2. Do we need to configure any parameters when creating a user such as "User must change password at next logon" and/or "Password never expires"
Thanks
1. Yes, good idea to extend the script. But in reality I never faced issues with it ;)
2. No, that is not needed.
Hi Nicklas. Do you have any suggestions for those who aren't licensed for Remediation scripts? Also, have you run through the migration from legacy to modern scenario yet?
You could use a configuration profile, e.g. here: cloudinfra.net/how-to-create-a-local-admin-account-using-intune/ but that is sometimes a little unreliable.
If you are interested in the migration scenario, consider my blog post oceanleaf.ch/windows-laps-guide/ or watch my comprehensive video guide here: ua-cam.com/video/LzGiLCVIew8/v-deo.html&ab
@@oceanleafnt excellent thanks!