Windows and Microsoft Laps in mixed environment

Question

We have a mixed environment. 2012R2, 2016 and 2019

We will implement both Windows Laps and Microsoft Laps.

In Active Directory, due to different branches, we have multiple Server OUs containing a mix of 2012R2, 2016 en 2019

1. Configuring Computer Configuration > Policies > Administrative Templates > System > LAPS, Password history/password encryption won't work for 2016 and earlier, but the other settings will?? Can I then create 1 GPO for all operating systems?
2. Or do we have to create 2 GPOs. For 2016 and below and for 2019 and above. Based on the WMI filter

Thanks

Answer 1

Hi @Steve •

Windows LAPS and Microsoft LAPS GPO settings not use the same admx file, but when you install the both admx file you will find the both settings in same GPO.

So in order to avoid any configuration conflict , It's recommended to create two 2 GPOs based with WMI filter based on Windows version as you mentioned it.

---

Please don't forget to accept helpful answer

---