[SOLVED] Windows LAPS in DFL 2016

[yaldoo]

Good evening,
I recently installed samba-ad on Debian 13. It works perfectly!
I wanted to set up LAPS, but since Windows 11 24H2, the way it works has changed. Does the new LAPS work with the latest version of Samba? Is there any documentation available?
Alternatively, have you managed to install LAPS Legacy on the latest version of Windows 11?

Thank you for your help.

[dcardon]

Hi Julien,

Samba-AD doesn't yet support GKDI calls over MS-RPC/DCE-RPC, which is necessary for LAPS-v2 (which allows for encrypted passwords in AD in addition to access control lists). LAPSv1 should work with the module integrated by default in Windows 11 (i.e., you don't need to install the DLL separately) by configuring it in legacy mode [1].

Regards,

Denis

[1] https://learn.microsoft.com/en-us/windo ... ios-legacy

[yaldoo]

SOLVED

Thank you

[dcardon]

Hello Julien,

thank you for the feedback

Denis