Windows LAPS isn’t compatible with legacy policies, says Microsoft

2 min. read

Published onApril 14, 2023

published onApril 14, 2023

Share this article

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

If you’ve installedApril’s Patch Tuesday update, there’s a likelihood that you’veencountered an interoperability issuebetween the new Windows Local Administrator Password Solution (LAPS) and legacy LAPS policies. The update featured a new integration between Windows LAPS on Windows 10, Windows 11, and Windows Server 2019 or newer releases.

For those not familiar, Windows LAPS is a tool designed to help IT admins manage and back up passwords for local administrator accounts on Azure Active Directory-joined or Windows Server Active Directory-joined devices. It can also be used to manage and back up the Directory Services Restore Mode (DSRM) account password on the Windows Server Active Directory domain controllers.

According toMicrosoft:

There is a legacy LAPS interop bug in the above April 11, 2023 update. If you install the legacy LAPS GPO CSE on a machine patched with the April 11, 2023 security update and an applied legacy LAPS policy, both Windows LAPS and legacy LAPS will break.

Microsoft has indicated that some of the main tale-tell signs include Windows LAPS event log IDs 10031 and 10032, and legacy LAPS event ID 6. The company has indicated that it’s currently working on a fix to patch this issue.

However, till the fix is available, Microsoft has provided a workaround for the issue. If you’ve encountered this issue and would like to get rid of it, you’ll need to uninstall legacy LAPS under theHKLM\Software\Microsoft\Windows\CurrentVersion\LAPS\Stateregistry key. Alternatively, you can delete all registry values.

Have you encountered this issue? Let us know in the comments.

via:BleepingComputer

Radu Tyrsina

Radu Tyrsina has been a Windows fan ever since he got his first PC, a Pentium III (a monster at that time).

For most of the kids of his age, the Internet was an amazing way to play and communicate with others, but he was deeply impressed by the flow of information and how easily you can find anything on the web.

Prior to founding Windows Report, this particular curiosity about digital content enabled him to grow a number of sites that helped hundreds of millions reach faster the answer they’re looking for.

User forum

0 messages

Sort by:LatestOldestMost Votes

Comment*

Name*

Email*

Commenting as.Not you?

Save information for future comments

Comment

Radu Tyrsina

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low#

Copilot in Outlook will generate personalized themes for you to customize the app#

Microsoft will raise the price of its 365 Suite to include AI capabilities#

Death Stranding Director’s Cut is now Xbox X|S at a huge discount#

Outlook will let users create custom account icons so they can tell their accounts apart easier#

Windows LAPS isn’t compatible with legacy policies, says Microsoft#

With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low

Copilot in Outlook will generate personalized themes for you to customize the app

Microsoft will raise the price of its 365 Suite to include AI capabilities

Death Stranding Director’s Cut is now Xbox X|S at a huge discount

Outlook will let users create custom account icons so they can tell their accounts apart easier

Windows LAPS isn’t compatible with legacy policies, says Microsoft