{"id":109544,"date":"2023-04-18T10:55:49","date_gmt":"2023-04-18T01:55:49","guid":{"rendered":"https:\/\/softantenna.com\/blog\/?p=109544"},"modified":"2023-04-18T10:55:49","modified_gmt":"2023-04-18T01:55:49","slug":"windows-laps-compatibility","status":"publish","type":"post","link":"https:\/\/softantenna.com\/blog\/windows-laps-compatibility\/","title":{"rendered":"Microsoft\u3001Windows LAPS\u306e\u4e92\u63db\u6027\u554f\u984c\u3092\u8b66\u544a"},"content":{"rendered":"<p><img decoding=\"async\" style=\"display:block; margin-left:auto; margin-right:auto;\" src=\"https:\/\/softantenna.com\/blog\/wp-content\/uploads\/2023\/04\/s_20230418_104359.jpg\" alt=\"S 20230418 104359\" title=\"s_20230418_104359.jpg\" border=\"0\" width=\"915\" height=\"560\" \/><\/p>\n<p>Microsoft\u306f4\u6708\u306e\u6708\u4f8b\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u3067\u3001<a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/laps\/laps-overview#legacy-laps-interop-issues-with-the-april-11-2023-update\">Windows LAPS(Local Administrator Password Solution)<\/a>\u306e\u63d0\u4f9b\u3092\u958b\u59cb\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u6a5f\u80fd\u306fWindows 10\u3001Windows 11\u3084\u30b5\u30fc\u30d0\u30fc\u3067\u5229\u7528\u53ef\u80fd\u3067\u3001Azure Active Directory\u306b\u53c2\u52a0\u3057\u3066\u3044\u308b\u30c7\u30d0\u30a4\u30b9\u3001\u307e\u305f\u306fWindows Server Active Directory\u306b\u53c2\u52a0\u3057\u3066\u3044\u308b\u30c7\u30d0\u30a4\u30b9\u306e\u30ed\u30fc\u30ab\u30eb\u7ba1\u7406\u8005\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u81ea\u52d5\u7684\u306b\u7ba1\u7406\u3057\u3001\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3059\u308b\u4e8b\u304c\u3067\u304d\u308b\u3068\u3044\u3046\u3082\u306e\u3067\u3059\u3002<\/p>\n<p>\u3057\u304b\u3057\u3053\u306eWindows LAPS\u3068\u5f93\u6765\u306e\u30ec\u30ac\u30b7\u30fcLAPS\u3068\u9593\u3067\u76f8\u4e92\u904b\u7528\u306e\u554f\u984c\u304c\u767a\u751f\u3057\u3066\u304a\u308a\u3001Microsoft\u304c\u8b66\u544a\u3092\u884c\u3063\u3066\u3044\u307e\u3059(<a href=\"https:\/\/www.neowin.net\/news\/following-windows-patch-tuesday-laps-release-microsoft-warns-about-major-legacy-issues\/\">Neowin<\/a>)\u3002<\/p>\n<p>\u3053\u306e\u60c5\u5831\u306b\u3088\u308b\u3068\u3001\u6700\u65b0\u306e\u6708\u4f8b\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u304c\u9069\u7528\u3055\u308c\u305f\u74b0\u5883\u306b\u30ec\u30ac\u30b7\u30fcLAPS(MSI\u30d1\u30c3\u30b1\u30fc\u30b8)\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3068\u3001\u30ec\u30ac\u30b7\u30fc\u304a\u3088\u3073\u65b0\u3057\u3044Windows LAPS\u306e\u4e21\u65b9\u304c\u6b63\u5e38\u306b\u6a5f\u80fd\u3057\u306a\u304f\u306a\u308b\u3068\u306e\u3053\u3068\u3002\u3053\u306e\u5834\u5408\u30a4\u30d9\u30f3\u30c8\u30ed\u30b0ID 10031\u307e\u305f\u306f10032\u304c\u751f\u6210\u3055\u308c\u300c<strong>LAPS blocked an external request that tried to modify the password of the current managed account.<\/strong>\u300d\u3068\u3044\u3046\u30e1\u30c3\u30bb\u30fc\u30b8\u304c\u8868\u793a\u3055\u308c\u308b\u305d\u3046\u3067\u3059\u3002<\/p>\n<p>Microsoft\u306f\u3053\u306e\u554f\u984c\u306e\u4fee\u6b63\u306b\u53d6\u308a\u7d44\u3093\u3067\u304a\u308a\u3001\u30ec\u30ac\u30b7\u30fcLAPS\u3092\u30a2\u30f3\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u304b\u3001\u4ee5\u4e0b\u306e\u30ec\u30b8\u30b9\u30c8\u30ea\u30ad\u30fc\u4ee5\u4e0b\u306e\u5024\u3092\u5168\u3066\u524a\u9664\u3059\u308b\u56de\u907f\u7b56\u3092<a href=\"https:\/\/techcommunity.microsoft.com\/t5\/windows-it-pro-blog\/by-popular-demand-windows-laps-available-now\/ba-p\/3788747\">\u6848\u5185<\/a>\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<pre>\nHKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\LAPS\\State\n<\/pre>\n<p>\u307e\u305f<a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/laps\/laps-overview#legacy-laps-interop-issues-with-the-april-11-2023-update\">\u3053\u3061\u3089<\/a>\u306e\u30da\u30fc\u30b8\u306b\u3082\u3088\u308a\u8a73\u7d30\u306a\u56de\u907f\u7b56\u304c\u63b2\u8f09\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<blockquote><p>\nThe April 11, 2023 update has two potential regressions related to interoperability with legacy LAPS scenarios. Please read the following to understand the scenario parameters plus possible workarounds.<\/p>\n<p>Issue #1: If you install the legacy LAPS CSE on a device patched with the April 11, 2023 security update and an applied legacy LAPS policy, both Windows LAPS and legacy LAPS will enter a broken state where neither feature will update the password for the managed account. Symptoms include Windows LAPS event log IDs 10031 and 10033, as well as legacy LAPS event ID 6. Microsoft is working on a fix for this issue.<\/p>\n<p>Two primary workarounds exist for the above issue:<\/p>\n<p>a. Uninstall the legacy LAPS CSE (result: Windows LAPS will take over management of the managed account)<\/p>\n<p>b. Disable legacy LAPS emulation mode (result: legacy LAPS will take over management of the managed account)<\/p>\n<p>Issue #2: If you apply a legacy LAPS policy to a device patched with the April 11, 2023 update, Windows LAPS will immediately enforce\\honor the legacy LAPS policy, which may be disruptive (for example if done during OS deployment workflow). Disable legacy LAPS emulation mode may also be used to prevent those issues.\n<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft\u306f4\u6708\u306e\u6708\u4f8b\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u3067\u3001Windows LAPS(Local Administrator Password Solution)\u306e\u63d0\u4f9b\u3092\u958b\u59cb\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u6a5f\u80fd\u306fWindows 10\u3001Windows  [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":109545,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"swell_btn_cv_data":"","footnotes":""},"categories":[3],"tags":[3298,4387],"class_list":["post-109544","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-windows","tag-windows","tag-windows11"],"_links":{"self":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/109544","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/comments?post=109544"}],"version-history":[{"count":0,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/posts\/109544\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media\/109545"}],"wp:attachment":[{"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/media?parent=109544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/categories?post=109544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/softantenna.com\/blog\/wp-json\/wp\/v2\/tags?post=109544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}