Query about Local administartor password solution

Question

Query about Local administartor password solution

Boopathi S 3,866

Hi,

One of the Windows 10 workstation last contact to domain controller was on 29-May-2020.
LAPS Password expired on 14-Jun-2020. If I enter the password then the workstation does not accept the password.

Is there any reason why the LAPS password in the below screenshot does not accepted by the workstation

Anonymous

2020-08-05T05:14:25.547+00:00

Hi,
Before going further, would you please tell how did you configure the management computer,is it on the DC?
Did you get the password from the client or the management computer?Was the password the same ?
Do you want to keep the client disconnected from the DC?
Appreciate you patience and understanding.

Best Regards,
Boopathi S 3,866 Reputation points

2020-08-05T16:14:53.97+00:00
Thanks for the reply.

How did you configure the management computer,is it on the DC?
LAPS GPO is liked to Workstations OU. LAPS is installed in the workstations. It gets GPO and password generated.

Did you get the password from the client or the management computer?Was the password the same ?
Enable local admin password management:Enabled, Password Settings:Enabled, Password Complexity: arge letters + small letters + numbers + specials, Password Length: 14, Password Age (Days):30

Do you want to keep the client disconnected from the DC
No, Clients are always connected to DC. Offices were closed due to COVID19. Few offices are opened now and clients are switched on. Then it gives "The trust relationship between this workstation and the primary domain failed" message. Then tried to login to Local User Bultin account with LAPS password but it says User name and password is Invalid

Answer accepted by question author

0 additional answers

Your answer

Anonymous

2020-08-05T05:14:25.547+00:00

Hi,
Before going further, would you please tell how did you configure the management computer,is it on the DC?
Did you get the password from the client or the management computer?Was the password the same ?
Do you want to keep the client disconnected from the DC?
Appreciate you patience and understanding.

Best Regards,
Boopathi S 3,866 Reputation points

2020-08-05T16:14:53.97+00:00

Thanks for the reply.

How did you configure the management computer,is it on the DC?
LAPS GPO is liked to Workstations OU. LAPS is installed in the workstations. It gets GPO and password generated.

Did you get the password from the client or the management computer?Was the password the same ?
Enable local admin password management:Enabled, Password Settings:Enabled, Password Complexity: arge letters + small letters + numbers + specials, Password Length: 14, Password Age (Days):30

Do you want to keep the client disconnected from the DC
No, Clients are always connected to DC. Offices were closed due to COVID19. Few offices are opened now and clients are switched on. Then it gives "The trust relationship between this workstation and the primary domain failed" message. Then tried to login to Local User Bultin account with LAPS password but it says User name and password is Invalid

Answer 1

Anonymous

Hi,

Since the trust relation is broken , it need to recreated firstly.

Due to the trust-relationship broken ,I would recommend you cut he network down and logon to the workstation as domain administrator with cached credentials , reset the password for the local administrator .
Then perform domain dis-joining and domain joining as normal.

Fan

Anonymous

2020-08-10T02:16:24.47+00:00

Hi,

Just checking in to see if the information provided was helpful.
Please let us know if you would like further assistance.

Best Regards,
Boopathi S 3,866 Reputation points

2020-08-10T16:51:04.537+00:00

Will the password saved in Mcs_AdmPwd attribute during the last communication to the DC for a computer will work or not
Anonymous

2020-08-11T00:57:27.143+00:00

Hi,
It supposed to be work since it can't be updated when off the domain.
But if it was incorrect, it may be changed by following reasons:
a) A third party program/tool
b) System restore
c) User initiated change

Best Regards,
Anonymous

2020-08-13T00:38:48.81+00:00

Hi，
I am checking to see if the problem has been resolved.
If there's anything you'd like to know, don't hesitate to ask.
Best Regards,

Share via

Query about Local administartor password solution

0 additional answers

Your answer