Windows LAPS helps administrators manage passwords for local administrator accounts on devices connected to Azure Active Directory or Windows Server Active Directory by automatically rotating and backing up passwords on AD domain controllers.
Microsoft says that LAPS is now natively integrated into Windows as an inbox feature and is maintained through the standard Windows patching processes: “As of the April 11, 2023 security update, LAPS is natively integrated into Windows and provides new capabilities for on-premises AD scenarios and the coming benefits of Azure Active Directory (currently in private preview). New features include comprehensive policy management, automatic rotation, a dedicated event log, a new PowerShell module, hybrid connection support and much more.”
This function is not entirely new, but it was distributed to all Windows 10 and Windows 11 users for the first time with the April 2023 patch.
Interoperability bug discovered
Now, days after the announcement, however, the company has confirmed reports that applying the April 2023 updates will affect both legacy LAPS and the newly introduced Windows LAPS will also interfere. “There is a legacy LAPS interop bug in the (…) April 11, 2023 update. If you install the legacy LAPS GPO CSE on a computer patched with the April 11, 2023 security update, and apply a legacy LAPS policy, both Windows LAPS and legacy LAPS will be broken,” Microsoft explains.
“Symptoms include Windows LAPS Event Log IDs 10031 and 10032 and Legacy LAPS Event ID 6. Microsoft is working on a fix for this issue.” Until Microsoft can provide a new update, a workaround is recommended that affected administrators can use to restore LAPS functionality.
To do this, either the old LAPS must be uninstalled or all registry values under the HKLM Software Microsoft Windows Windows CurrentVersion LAPS State registry key must be deleted.
- Microsoft is investigating bugs after Patch Day April 11, 2023.
- Windows LAPS supports admin in managing local admin passwords.
- LAPS now integrated into Windows as an inbox feature.
- April 11, 2023 update disrupts legacy LAPS and Windows LAPS.
- Microsoft working on fix; Interim solution recommended.
- Solution: Uninstall or delete registry values.
- New features for on-premises AD scenarios & benefits of Azure Active Directory.
Windows 11 FAQ Instructions, tips and tricks
Windows 10 FAQ All questions fully answered
See also:
microsoft, operating system, windows 10, update, error, bug, bugs, bugs bugs bugs, windows 10 update, windows 10 bugs, windows 10 bug, windows 10 error
