Comments on: Deploy Cloud-Based Windows LAPS to Windows Endpoints

By: James Yip

James Yip — Thu, 25 Apr 2024 23:12:54 +0000

In reply to Michiel. Usually, when I RDP to that device, I use .\administrator or like what you used device\administrator.

By: Lukas

Lukas — Thu, 25 Apr 2024 20:50:01 +0000

This requires the local admin account already present, right? So it can’t really be used on its own but combined with a script to create a local account, which I found a hit and miss in the past.
It puzzles me why MS does not include creation of an admin account in the new solution.

By: Michiel

Michiel — Thu, 18 Apr 2024 17:29:27 +0000

In your article and every other article on other blogs I read this instruction about how to configure Laps. But to my understanding it doesn’t end there. You also need to enable the Laps on the device (via a policy) and enable the administrator account (via a policy). I combined these two in one device configuratie policy. Unless missing something, those are not done by the other policy from your article? And then when you have enabled Laps, how do you sign into the device? Maybe that’s beyond the scope of Laps, but I got it working by signing in as “Device name\administrator” and the password given by Laps.

By: James Yip

James Yip — Thu, 18 Apr 2024 13:48:12 +0000

In reply to JB. It is agentless. That's the best part of the new Windows LAPS

By: JB

JB — Thu, 18 Apr 2024 11:25:36 +0000

Great article,

We don’t use old LAPS but interested in this new version, and like the agentless feature.

thanks