LAPS PS Module not available

Question

Hello there,

I am trying to implement the new windows LAPS (Not the Legacy version) in my test environment (with only win 2k19 Servers) and then i will go live. I have read the documentation and i am trying to set it up. So according to documentation i have to first upgrade the AD Schema, with the update-LapsADSchema command.Unfortunately the LAPS PS module is not available therefore i cannot run the command.

I know that the module is available in the .msi for the legacy LAPS but as i said i want to implement the new version and not the legacy. In the documentation there are no further details. It is written that we should just run the command.

Can someone clarify it?

After reading the concept page , my starting point is here :

https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-scenarios-windows-server-active-directory

Thank you in advance for your time.

Answer 1

yes there are differences between old and new version

but the new version is only valid for

Windows 11 Insider Preview Build 25145 and later

and as you can see from this link

https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-overview#windows-laps-supported-platforms-and-azure-ad-laps-preview-status

if you want to use new version with W2K19 yo need to wait a liitle bir more

Answer 2

If you're unable to find the LAPS PowerShell module and are having trouble upgrading the AD schema, there are a few potential solutions you can try:

1. Download the LAPS installer: You may be able to download the LAPS installer from the Microsoft Download Center or the Microsoft Evaluation Center. Once you have the installer, you can extract the LAPS PowerShell module and import it into your environment.
2. Install LAPS on a test machine: You can also install LAPS on a test machine and copy the PowerShell module from that machine to your target environment. To do this, install LAPS on a test machine, then navigate to the LAPS installation directory and copy the "AdmPwd.PS" folder to your target environment.
3. Check PowerShell module path: Ensure that your PowerShell module path includes the directory where the LAPS PowerShell module is located. You can check this by running the command "echo $env:PSModulePath" in PowerShell.

Once you have the LAPS PowerShell module installed, you can run the "Update-LapsADSchema" command to upgrade the AD schema for LAPS. Make sure that you have the appropriate permissions and have taken any necessary backups before making schema changes.

Answer 3

Thank you very much for the reply.

This was not clear in the documentation since the new version and the Legacy Version are kept and described like seperate concepts.

Maybe someone would like to clarify that.

PS: Unfortunately according to the documentation , it is not the same module:

Get-LapsAADPassword	Doesn't apply
Get-LapsDiagnostics	Doesn't apply
Find-LapsADExtendedRights	Find-AdmPwdExtendedRights
Get-LapsADPassword	Get-AdmPwdPassword
Invoke-LapsPolicyProcessing	Doesn't apply
Reset-LapsPassword	Doesn't apply
Set-LapsADAuditing	Set-AdmPwdAuditing
Set-LapsADComputerSelfPermission	Set-AdmPwdComputerSelfPermission
Set-LapsADPasswordExpirationTime	Reset-AdmPwdPassword
Set-LapsADReadPasswordPermission	Set-AdmPwdReadPasswordPermission
Set-LapsADResetPasswordPermission	Set-AdmPwdResetPasswordPermission
Update-LapsADSchema	Update-AdmPwdADSchema

Source : https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-management-powershell

Answer 4

Hello,

i guess you are right. We have to wait a bit more.