-
-
Notifications
You must be signed in to change notification settings - Fork 3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support for Windows LAPS #423
Comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
This is a feature request to detect the (newer) Windows LAPS in addition to the current (legacy) Microsoft LAPS. I have only checked winPEAS.bat, but this feature request may also be relevant to winPEAS.ps1 and winPEAS.exe.
The LAPSInstallCheck in winPEAS.bat checks the (legacy) Microsoft LAPS status looking at the registry value(s) at
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd
. The newer Microsoft LAPS variant uses a different registry value atHKLM\Software\Microsoft\Policies\LAPS
,HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\LAPS
andHKLM\Software\Microsoft\Windows\CurrentVersion\LAPS\Config
. See also the documentation at Supported policy roots.The text was updated successfully, but these errors were encountered: