Uploaded March 2025 | Updated September 2026, 10 minutes ago
Beginning with Windows 11, version 24H2 and Windows Server 2025, Windows Local Administrator Password Solution (Windows LAPS) can detect when a device was rolled back to a previous image. When a device is rolled back, the password in Active Directory might not match the password on the device that was rolled back. With image rollback detection, a new Active Directory attribute, contains a random GUID that Windows LAPS writes every time a new password is persisted in Active Directory, followed by saving a local copy. See this new feature in action.
To learn more about Windows LAPS capabilities, watch our latest deep dive: https://aka.ms/LatestInLAPS.
You can also visit our documentation at https://aka.ms/LAPS.
Beginning with Windows 11, version 24H2 and Windows Server 2025, Windows Local Administrator Password Solution (Windows LAPS) can detect when a device was rolled back to a previous image. When a device is rolled back, the password in Active Directory might not match the password on the device that was rolled back. With image rollback detection, a new Active Directory attribute, contains a random GUID that Windows LAPS writes every time a new password is persisted in Active Directory, followed by saving a local copy. See this new feature in action.
To learn more about Windows LAPS capabilities, watch our latest deep dive: https://aka.ms/LatestInLAPS.
You can also visit our documentation at https://aka.ms/LAPS.
