Laps Saved password count

Question

Laps Saved password count

Muhammad Hussain 201

Is there any way we can count how many passwords are stored in our LAPS database?I have a command to export all the passwords but I don't want to export them I just want to count how many passwords of systems are available.

Anonymous

2020-09-21T01:37:28.077+00:00

Hi，
I am checking to see if the problem has been resolved.
If there's anything you'd like to know, don't hesitate to ask.
Best Regards,

2 answers

Your answer

Anonymous

2020-09-21T01:37:28.077+00:00

Hi，
I am checking to see if the problem has been resolved.
If there's anything you'd like to know, don't hesitate to ask.
Best Regards,

Answer 1

Anonymous

Hi,

For your 2 questions:
1,To view who has permissions, you can use the command :Find-AdmPwdExtendedRights
Find-AdmPwdExtendedRights –Identity “OU Name”

2,Based on my research, there is not such a command to remove the permission, we need to do it in another way:
Open Active Directory Users and Computers as an account with Domain Admin rights
Right click on the OU in question and select Properties
Click on the Security tab
Click Advanced
Select the user or group to modify permissions for
Click Edit
Uncheck the All extended rights box

Fan

Muhammad Hussain 201 Reputation points

2020-09-17T06:42:02.353+00:00

Alright!
1,To view who has permissions, you can use the command :Find-AdmPwdExtendedRights
Find-AdmPwdExtendedRights –Identity “OU Name”
It is giving me a very large list, can we get the names of users precisely?
Anonymous

2020-09-18T00:59:04.077+00:00

Hi,
You can get a list of user accounts or groups having these permissions on the OU you defined.As following:

Best Regards,
Anonymous

2020-09-23T02:15:06.947+00:00

Hi,@Muhammad Hussain

Just checking in to see if the information provided was helpful.

If the reply helped you, please remember to mark it as an answer.
If no, please reply and tell us the current situation in order to provide further help

Best Regards,

Answer 2

Anonymous

Hi,
Thanks for posting here!
I found you post the questions in other platform :
https://community.spiceworks.com/topic/2288606-laps-saved-password-count

I'm glad that a command was provided , and i tested that it should be working for you.
If there's anything you'd like to know, don't hesitate to ask.
Best Regards,

Muhammad Hussain 201 Reputation points

2020-09-17T04:32:31.24+00:00
Yes, the query was answered.

Can you please provide me two more commands?

I used the below commands to set permissions but I need two more commands

To view who has permissions

To remove any existing user / group permissions.

Set-AdmPwdReadPasswordPermission -OrgUnit “OU=Desktops,OU=NY,OU=USA,DC=woshub,DC=com” -AllowedPrincipals Group Name

Set-AdmPwdResetPasswordPermission -OrgUnit “OU=Desktops,OU=NY,OU=USA,DC=woshub,DC=com” -AllowedPrincipals Group Name

Share via

Laps Saved password count

2 answers

Your answer