A basic GUI for managing legacy Microsoft LAPS and Windows LAPS passwords.
A WinForm desktop application written in C# and .NET Framework that manages a computer's local administrator password in a LAPS environment. It calls the appropriate PowerShell commands to retrieve and expire/change a password.
- PowerShell 5.1.
- Included by default in Windows 10+.
- Windows LAPS PowerShell module.
- Included in the April 2023 and later CUs.
- Domain-joined PC.
- Required for interacting with Active Directory computer object attributes.
- 64-bit OS.
- Not tested and/or supported on 32-bit.
- Download the souce code.
- Open the solution in Visual Studio.
- Build the solution.
Note
Since the Windows LAPS PowerShell cmdlets are only available in 64-bit mode the application build platform target must be set to "x64" to work.
- Locate the execuatable from above.
- Double-click to run.
Please ensure the account running the executable has the appropriate permissions in Active Directory.
Note
Microsoft LAPS or Windows LAPS GPO configuration and permissions delegation are outside the scope of this project.
Note
Computer objects with a legacy Microsoft LAPS policy applied will not have a password history. Only objects with a Windows LAPS policy will.
- 1.1.0
- Removed Visual Studio Installer Project and related files from solution/project.
- Modified comment formatting for ease of readability.
- Updated prerequisite check that occurs on startup.
- Updated README.md.
- 1.0.1
- Updated all variables to be explicitly typed instead of implicitly typed (e.g. var).
- Cleaned up source code.
- Added version history file.
- Added a description (e.g. "/d") to the PostBuildEvent command in the setup project to display the MSI installer name during a UAC prompt instead of a randomly generated name.
- 1.0.0
- Initial Release.
This project is licensed under the MIT License - see the LICENSE.md file for details.
This project was inspired by