Deprecation of legacy Microsoft LAPS product

Question

Hi all,

My environment : Windows domain , domain controllers : windows server 2016 standard , forest/doman function level 2008 R2 , legacy Microsoft LAPS installed and working.

I have read https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-overview

As of October 23, 2023 the legacy legacy Microsoft LAPS product is deprecated.

Installation of the legacy Microsoft LAPS MSI package is blocked on newer OS versions.

So gpo that install msi LAPs Client will not work for Windows 11 client anymore but does it affect applying gpo to change the local admin password on the client computer ? I mean New Built-in LAPs Client for Windows 11 and 10. You no longer have to install the LAP MSI client on Windows devices because LAPs is an Inbox feature --> so legacy Microsoft LAPS gpo still work with windows 11 client ? (except the part installation of Microsoft LAPS MSI package msi)

Or I have to migrate to Windows LAPS ?

* Moved from Windows 11/Settings

Answer 1

Hello,

Thanks for visiting Microsoft Community.

The issues on Microsoft LAPS is out of reach of the response support community. It is more suitable for publishing on Microsoft Learn, you can click on "Ask a question", there are experts who can provide more professional solutions in that place.

Here is a link to the forum where you can raise specific scenarios and share your idea to help solve the problem.

I won't be able to help you, but I'll leave that question open in case one of our amazing volunteers has ideas for you.

Best Regards,

Johann - MSFT | Microsoft Community Support Specialist

Answer 2

Thats what i am wondering too, how do we migrate?

You don't need to "Migrate" Microsoft LAPS, as your Domain will still continue to function correctly using that ONLY for Server 2016 and older.

You can follow the steps at the link below to configure Windows LAPS.

We run both in our environment. We have Server 2008 all the way to Server 2022, along with Windows 10 machines.

Both LAPS packages record as they should.

Link: > Configure Windows LAPS step by step

Answer 3

Hello Jack Chuong,

Thank you for posting in Microsoft Community forum.

So gpo that install msi LAPs Client will not work for Windows 11 client anymore but does it affect applying gpo to change the local admin password on the client computer? I mean New Built-in LAPs Client for Windows 11 and 10. 

A1: You need to configure and deploy Windows LAPS for Windows 10 with Windows Updates released on April 11, 2023 and Windows 11. Then the machines will generate Windows LAPS.

You no longer have to install the LAP MSI client on Windows devices because LAPs is an Inbox feature --> so legacy Microsoft LAPS gpo still work with windows 11 client? (except the part installation of Microsoft LAPS MSI package msi)

A2: As of October 23, 2023 the legacy legacy Microsoft LAPS product is deprecated, starting with the next versions of Windows 11 and Windows Server. Installation of the legacy Microsoft LAPS MSI package is blocked on newer OS versions, and Microsoft will no longer consider code changes for the legacy Microsoft LAPS product.

Or I have to migrate to Windows LAPS?
A3: For New Built-in LAPs Client for Windows 11 and 10, if you want to use Windows LAPS, you need to migrate them.

For more information. please refer to link below.

Get started with Windows LAPS and Windows Server Active Directory | Microsoft Learn

Windows LAPS overview | Microsoft Learn

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 4

how to migrate from the old laps self deployed legacy to the new windows laps?

Answer 5

Thats what i am wondering too, how do we migrate?