Many customers have asked me in passing when Windows LAPS will be supported for managed devices joined to an Entra AD Domain Services domain (formerly known as Azure AD Domain Services). All I can share for now is that the owning team is aware of this ask and it is in their backlog. Please up-vote this feature to add your support!   It would also be helpful if you are willing to PM me with your company name and the # of EADDS\AADDS devices that would be Windows LAPS-enabled once the support is available.   Overview of Microsoft Entra Domain Services - Microsoft Entra ID | Microsoft Learn   thanks, Jay ... View more

Many customers have asked for Windows LAPS to support a suitable replacement for the legacy LAPS UI (AdmPwd.UI.exe). Yes we have the new LAPS tab in ADUC but it seems many customers don't use ADUC that much, especially for helpdesk workers.  Also, ADUC does not have the ability to display password history (frankly there's just not enough UI real-estate left in that dialog).   I would really like to hear feedback from customers on what scenarios a new Windows LAPS UI should support. Off the top of my head, it should:   1. Support targeting of a specific forest 2. Support searching for a specific computer account by various name forms, or by object picker 3. Support setting of the password expiration timestamp 4. Support retrieving of both the current password and password history   A more exotic idea would be a "RDP Connect to device" button which would combine 1) pwd retrieval; 2) on-the-fly creation of an RDP shortcut with password; 3) launching the RDP client.     Looking forward to hearing other suggestions on this topic! :) ... View more

Hello,   Some customers do not really on ADUC anymore for AD operations, but on Active Directory Administrative Center (which replaced ADUC when released) and Windows Admin Center (Active Directory extension). It would be nice if Windows LAPS tabs where also available on these tools.   Regards, ... View more

Currently, in Entra's LAPS, you can filter reports by "Last password rotation" and "Next password rotation"  It would be beneficial to also have a LAPS filter for "Password Has Expired", enabling us to take a proactive approach in investigating instances where password rotations have not occurred on specific managed devices. ... View more

Hello, Windows LAPS requires Active Directory schema update to be fully functional - such updates are often quite difficult to implement on large environments, due the amount of operational risks and approvals tied to them. With LAPS now part of the operating system instead of being on a third-app level, it would make sense to add corresponding attributes and classes to default AD schema when building a new Active Directory. Maybe for Windows Server vNext, which will include several AD enhancements for the first time in many years ?   Regards,   ... View more