Security Recommendations for LAPS are outdated

ADM-Griffin2, Jay 116 Reputation points
2023-06-28T10:54:09.08+00:00

These recommendations in the Microsoft Secure Score seems to be ignoring the new Windows LAPS and looking at the old LAPS. When we changed over to the Windows LAPS, these recommendations started getting flagged. I thought Microsoft would eventually change them over, but they haven't yet.

Enable Local Admin password management

Remediation -- pointing to the old GPO settings....

Option 1 - Set the following Group Policy:
Computer Configuration\Policies\Administrative Templates\LAPS\Enable Local Admin Password Management
To the following value: Enable

Option 2 - Set the following registry value:
HKLM\SOFTWARE\Policies\Microsoft Services\AdmPwd\AdmPwdEnabled
To the following REG_DWORD value: 1

These appear to be the OLD GPO settings, not the new Windows LAPS.

I have Windows LAPS working and my Secure Score is still being flagged for this recommendation.

Protect and manage local admin passwords with Microsoft LAPS

This recommendation directs you to download the old LAPS client.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,748 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,128 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
149 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Michele Ariis 5 Reputation points
    2023-07-11T12:15:21.42+00:00

    I also have the same problem

    1 person found this answer helpful.