Uploaded June 2025 | Updated September 2026, 2 weeks ago
Windows LAPS Automatic Account Management using Microsoft Intune #msintune #intune
===
Important Points to Note
. Devices that are workplace-joined (WPJ) are not supported by Intune for LAPS
· LAPS on Windows devices can be configured to use one directory type or the other, but not both. Also consider, the backup directory must be supported by the devices join type
- if you set the directory to an on-premises Active Directory and the device is not domain joined, it will accept the policy settings from Intune, but LAPS cannot successfully use that configuration
. Intune policy for Windows LAPS is supported for GCC High environments The Remote tasks action of Rotate Local Admin Password is not included by any Intune built-in role or the Microsoft Entra built-in role of Intune Administrator.
Instead, use a custom Intune role to assign this permissionte users who should have this capability.
RBAC Roles Supported
Endpoint Security Manager, Read Only Operator
=====
More Blog posts related to SCCM/Intune/Windows 11/Cloud PC/AVD/Hyper-V/Cloud/IT Pro/Azure -
✔ anoopcnair.com/windows-365
👉 Stay Connected - howtomanagedevices.com/stay-connected 👉 howtomanagedevices.com/sccm/1791/how-to-manage-devices-live-digital-events-weekend-learning
#CloudPC #Windows365 #W365
howtomanagedevices.com
Learn SCCM Read anoopcnair.com/sccm
anoopcnair.com/learn-sccm-intune
Learn Intune Read - anoopcnair.com/intune
anoopcnair.com/learn-microsoft-intune
Learn Windows 10 Read - anoopcnair.com/windows-10
Learn Hyper-V Read - anoopcnair.com/hyperv-2
Learn About Cloud Read - anoopcnair.com/cloud
Learn about Azure Read - anoopcnair.com/cloud/azure
Learn About IT Pros Events - anoopcnair.com/itpro
Learn about me - anoopcnair.com/about
#SCCM #ConfigMgr #SCCMVideos #SCCMTutorials #SCCMStudyVideos #SCCMFreeTraining #SCCMTraining #HowtoManageDevices
#Intune #MicrosoftIntune #IntuneVideos #IntuneTutorials #IntuneGuide #IntuneStudy #MSIntune #IntuneTraining #HowtoManageDevices
Windows LAPS Automatic Account Management using Microsoft Intune #msintune #intune
===
Important Points to Note
. Devices that are workplace-joined (WPJ) are not supported by Intune for LAPS
· LAPS on Windows devices can be configured to use one directory type or the other, but not both. Also consider, the backup directory must be supported by the devices join type
- if you set the directory to an on-premises Active Directory and the device is not domain joined, it will accept the policy settings from Intune, but LAPS cannot successfully use that configuration
. Intune policy for Windows LAPS is supported for GCC High environments The Remote tasks action of Rotate Local Admin Password is not included by any Intune built-in role or the Microsoft Entra built-in role of Intune Administrator.
Instead, use a custom Intune role to assign this permissionte users who should have this capability.
RBAC Roles Supported
Endpoint Security Manager, Read Only Operator
=====
More Blog posts related to SCCM/Intune/Windows 11/Cloud PC/AVD/Hyper-V/Cloud/IT Pro/Azure -
✔ anoopcnair.com/windows-365
👉 Stay Connected - howtomanagedevices.com/stay-connected 👉 howtomanagedevices.com/sccm/1791/how-to-manage-devices-live-digital-events-weekend-learning
#CloudPC #Windows365 #W365
howtomanagedevices.com
Learn SCCM Read anoopcnair.com/sccm
anoopcnair.com/learn-sccm-intune
Learn Intune Read - anoopcnair.com/intune
anoopcnair.com/learn-microsoft-intune
Learn Windows 10 Read - anoopcnair.com/windows-10
Learn Hyper-V Read - anoopcnair.com/hyperv-2
Learn About Cloud Read - anoopcnair.com/cloud
Learn about Azure Read - anoopcnair.com/cloud/azure
Learn About IT Pros Events - anoopcnair.com/itpro
Learn about me - anoopcnair.com/about
#SCCM #ConfigMgr #SCCMVideos #SCCMTutorials #SCCMStudyVideos #SCCMFreeTraining #SCCMTraining #HowtoManageDevices
#Intune #MicrosoftIntune #IntuneVideos #IntuneTutorials #IntuneGuide #IntuneStudy #MSIntune #IntuneTraining #HowtoManageDevices
