Is Azure AD LAPS supported?

[DMurr]

As of Lansweeper 10.4.2, AD LAPS is now supported. We have many Windows devices that are Intune managed and exist in Azure AD that do not exist in our on-prem AD. As such, the option to use on-prem AD LAPS to manage scanning credentials won't work for these devices. We'd like to implement Azure AD LAPS for network scanning to avoid using a local account with the same credentials on all devices. The agent doesn't support deployment packages or on-demand forced rescans, hence why we're using network scanning.

Does Lansweeper's LAPS configuration support Azure AD LAPS? If so, is the setup straightforward or is there anything specific that needs to be done to get it working with Lansweeper?

[XateEsix]

Ditto!

[Obi_1_Cinobi]

Hello there!

Currently, we only support Microsoft LAPS (legacy LAPS), and there are no immediate plans to implement the newest version of LAPS (Windows LAPS via Azure AD) as described below:

https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-overview

We've already received similar requests from our user base to add this feature, and as such, it was added to our customer wish list. We can't guarantee that this feature will be implemented or provide you with an estimated release date at this time.

[cvsysadmin]

Hey Obi_1,

How about on-prem Windows LAPS (with on-prem AD and not Azure AD)? If not, can we +1 this on your customer wish list? Many AD organizations are making the transition to Windows LAPS to leverage the more secure encrypted passwords. If you guys need an organization that uses it so you can do some testing, hit me up and we'll be happy to help.

Thanks! 

[Obi_1_Cinobi]

Hello there!

Currently, we only support Microsoft LAPS (legacy LAPS), and there are no immediate plans to implement other forms of LAPS. Thank you for offering to test!

[jwulffraat]

Same question here. It would be awesome if it would be possible to use credentials set via Azure AD LAPS for scanning!