Share via

Missing GPO for LAPs

Anonymous
2024-08-29T13:38:40+00:00

I have a domain controller running on 2019 server, with domain/forest function level of 2016, and all updates are installed. I am enabled LAPs for our servers and trying to implement GPOs to start this process. However, there seems to be a group policy rule missing that was in our dev and stage environments ( different domain controllers in their own domain separate from production). The group policy is:
Computer Configuration -> Policies -> Admin Templates -> Systems -> LAPS -> Enable Local Admin Password Management.

Has anyone come across this issue before? or know how to import this into group policy management? google searches always seem to point to installing KB5025229 (which it was previously installed). any help would be appreciated.

as a side note i did try and copy the admx from the dev and stage over to prod, however i go some premission denied error related the "trusted installer" being the owner.

Windows for business | Windows Server | Directory services | Deploy group policy objects

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2025-01-04T23:27:25+00:00

    Thank you, but i still have problems.

    I found "LAPS" in administrative template\system but not in administrative template root. There are 9 settingsand but not the "enable local password management" setting . I Folowed all the steps (included copy files in policydefinitions folder

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2024-08-29T16:17:51+00:00

    Hello

    Thank you for posting in Microsoft Community forum.

    1.Make sure you are update the schema in the forest.

    2.How does the ADMX file retrieve from? Local computer or central store？

    C:\Windows\PolicyDefinitions

    C:\Windows\PolicyDefinitions\En-US

    Or

    \a.com\SYSVOL\a.com\Policies\PolicyDefinitions

    \a.com\SYSVOL\a.com\Policies\PolicyDefinitions\En-US

     Please check it here.

    If you have any question or concern, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    Was this answer helpful?

    0 comments