How to setup and deploy LAPS (Local Administrator Password Solution)

Learn how to setup, configure, and deploy LAPS (Local Administrator Password Solution) to your active directory environment. In this example, I show you how install the laps application, update the Active Directory schema, deploy and configure LAPS using Group Policy, as well as showing you how to find the LAPS password, and forcing a password change.

[twintron]

This is probably the best IT instructional video out there. Great job.

[onji]

Awesome job! Very thorough and to the point. One of the best tutorial vids. No fluff.

[KnockoutSplash]

Thank you very much! Your Videos about WDS Server and this one are helping me a lot as a beginner, for deploying new Clients! Very clear and straight forward, but every important detail is named. Thanks!

[francocalabresi]

Great video men, really clear! Thanks and greetings from Argentina.

[marioschristofi]

Thank you. Very informative and precise.

[Shxzic]

great video, even better with the blog post keep up the good work!

[DaniLearnsIT]

Simple and to the point! Thank you dude :)

[lilarby]

Great video! Thanks for making this easy!

[therealchris]

very well done, thanks. didn't solve my problem, but I learned something... and learning is always a good thing 😁

[burnbrunet]

Love your videos, straight to the point ! Any reasons to NOT install LAPS on a DC ?

[thomaselser]

Great video, nicely explained.
Question: From a security view, is it ok to make certain domain users members of the security group "LAPSAdmins" so they can access the administrator password?

[BishBosh]

Thanks for the video. What about non built in local admin accounts that were created, can these be managed with laps also?

[techassistcityofcolby]

With the OU structure serperated out by departments and a sub OU holding the computers (all with the name computers) how do you specify it to point at those sub OU's when running the -OrgUnit ??

[dpacman]

Thank you for this video it is great. I do have one question though. In our environment we have 3 Domain Controllers. Do I have to set up laps on all of them or just 1?

[Xylord]

Love the videos! Quick question though... If your environment has multiple domain controllers, do you have to install the MSI file on all DCs or just one and it replicates to the others?

[JPrez-ioqj]

For some reason, the sysvol/scripts directory wasnt' accessible for workstations devices - manually browsing to that LAPS location would generate access denied. I ended up creating a new directory called SoftwarePush and shared it as read only to everyone - it then became accessible to all workstations, and the GPO was able to install the software. This was on Server 2016 - any idea why mine was a bit different and is that expected? - Thx

[mrmanofof]

I have the OU called computers inside several OUs for example Under DRH OU there is the Computers OU, I have another one under DSI OU, How can I specify the exact OUs that have the same name but under other OUs for the below command?
-OrgUnit

[ValterPereira-lrkn]

Hello! I have done everything like you demonstrated in your video, the only change i performed is the custom administrator account, in the gpo i put the name of the account i want to be managed by laps but nothing happens, to the default administrator account works very well but for the custom administrator account doesnt work what i propably miss???

Greetings from Portugal.

[hafizmemmedov]

Hello, thank you for great video.
If I go through these processes (on domain computer) and it still doesn't give me a password, what solutions should I look for?

[charlesbuzz]

Thanks for this tutorial!
Question: admin account is disable on all of the workstations, we use an other account for admin, can I use the GPO "name of administrator account to manage" and put the name of our admin account in that gpo?