Hello, I want to configure LAPS on my domain and i have some queries related to installation. Please help on these. We have DC1 (Primary) and Replicated to DC2 (Secondary). Where should I have to install LAPS? When I run the command 'nltest.exe /dsgetdc: /writable /force ' Result: DC2 shows as result. Flags: GC DS LDAP KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE FULL_SECRET WS DS_8 DS_9 DS_10 0x20000 If I install it on DC2, would it impact AD environment or replication? How to Install LAPS extension on client side via GPO? As through GPO, LAPS package will install all the features including FAT Client UI, which may show machines password. So how can i install only GPO Extension on client side via GPO? Is Domain admin password will also get changed without any notice? If so domain account will get locked out. Please give me clarification on this.

LAPS installation on Domain controller DC1 and replicated to DC2

NIBRAS ALAMBILAT KANIYAT 26

Hello,

I want to configure LAPS on my domain and i have some queries related to installation. Please help on these.

We have DC1 (Primary) and Replicated to DC2 (Secondary).

Where should I have to install LAPS? When I run the command 'nltest.exe /dsgetdc: /writable /force'
Result: DC2 shows as result.
Flags: GC DS LDAP KDC TIMESERV WRITABLE DNS_DC DNS_DOMAIN DNS_FOREST
CLOSE_SITE FULL_SECRET WS DS_8 DS_9 DS_10 0x20000
If I install it on DC2, would it impact AD environment or replication?
How to Install LAPS extension on client side via GPO? As through GPO, LAPS package will install all the features including FAT Client UI, which may show machines password. So how can i install only GPO Extension on client side via GPO?
Is Domain admin password will also get changed without any notice? If so domain account will get locked out. Please give me clarification on this.