LAPS - Weird problem

Question

Hi guys,

I'm trying LAPS and I have a problem I've never seen on google or here.

I've installed LAPS on my server. OK
I've installed client LAPS on my PC. OK
I can change local password on a local admin called "sysadmin"

So I decided to create the GPO for installation on all PC.
I put the MSI on a shared folder. X86 and X64. X86 with "only for 32 bits clients" checked.

The nightmare starts here.
I applied this GPO to my PC and now it activates the administrator built-in account automatically, it change the password of sysadmin user but if I try to log in, The message appears:: "This account has expired".

I've tried to change the expiration time from the LAPS UI but even the expiration time is changed, same message appears...

After couple tests, I found out it's only the X86 client installed on my PC and the X64 can't. I don't know why.
I've tried to uninstall X86 client and reinstall X64 client manually but same results.

I think the X86 has destroyed the configuration on my machine and it doesn't work like it should.

Answer 1

First, for the account expiration problem, check that you have set managed account lifetime minimum 30 days in GPO and that setting has been applied.

For x86 problem, maybe I would test first on few x64 machines that x64 client really works and forget about x86 at start. No one uses x86 anymore. Instead of installing MSI with GPO, you might want to look into GPO Preferences Task Scheduler, which is better software installation mechanizm I think. Maybe there you could add some script to recognize, which architect should be installed. GPO msi installation is more dummy solution, Task Scheduler would be better.