Getting started with Windows LAPS for Azure Active Directory

This quick-start guide will provide you with all the information you need to get up-and-running with using Lithnet Access Manager to access LAPS passwords created by the new Windows LAPS agent.

Step 1: Enable and configure Windows LAPS

Make sure your test machines have installed the April 2023 Windows updates, which include the new LAPS capability.

Follow the first steps in Microsoft's getting started guide to enable LAPS via Intune CSP.

You don't need to complete the steps after configuring the policy and testing the LAPS client locally.

Step 2: Test LAPS Access

Before configuring Access Manager, it's a good idea to make sure that LAPS is working natively first. Using the Azure AD or Intune management portal, make sure you can see and retrieve the LAPS passwords for your test devices.

Once you are confident that it is all working, you can move onto the next step of installing Access Manager.

Step 3: Install Lithnet Access Manager Server

Now you can proceed with installing Access Manager itself. Our detailed setup guide will walk you through the process.

If you just want to set up a quick test environment, you can use a single server deployment, with the built-in SQL Express engine, to simplify the deployment.

Step 4: Configure Access Manager to read LAPS passwords from Azure AD

Once Access Manager is installed, you need to grant it the permissions it needs to read passwords from Azure AD, and assign access to your users.

Follow the steps in the configuration guide for Microsoft LAPS for Azure AD to correctly delegate and assign user permissions.

Step 6: Test user access

Visit the Access Manager web app in the browser and request the LAPS password for your test computer. If you have configured the app correctly, you should be presented with the LAPS password for the machine.

Check out our troubleshooting guide for more help.