The search filter is invalid (Windows Laps)

Question

Hi,

I have enabled Windows Laps in AD but when I try to run the below command

Set-LapsADComputerSelfPermission -Identity Test

I am getting "Set-LapsADComputerSelfPermission : The search filter is invalid."

Secondly, how to enable permissions for an OU having a space in it? For Example "Desktops HO"?

Thanks.

Answer 1

For me it worked to use the distinquished name of the OU for example:
Set-LapsADComputerSelfPermission -Identity "OU=Company,DC=exoip,DC=local"

You can find this if you right click the OU you want to use LAPS for and click on properties. There you have to go on attribute editor. The first thing there should be the distinquished name. Maybe this helps you if not I dont know another solution.

Answer 2

The problem was resolved after I applied the Group Policy on the main domain container instead of the OU. Not sure if this was the actual reason or something else because then it accepted the below command

Set-LapsADComputerSelfPermission -Identity "OU=Desktops HO,DC=domain,DC=com"

Thanks.

Answer 3

found that it was necessary to wrap the -Identity value in "" much like shown in the above successful examples - my early failed attempts lacked only that