Query about Local administartor password solution

Boopathi Subramaniam 3,301

Hi,

One of the Windows 10 workstation last contact to domain controller was on 29-May-2020.
LAPS Password expired on 14-Jun-2020. If I enter the password then the workstation does not accept the password.

Is there any reason why the LAPS password in the below screenshot does not accepted by the workstation

Fan Fan 15,321 Reputation points Microsoft Vendor

2020-08-05T05:14:25.547+00:00

Hi,
Before going further, would you please tell how did you configure the management computer,is it on the DC?
Did you get the password from the client or the management computer?Was the password the same ?
Do you want to keep the client disconnected from the DC?
Appreciate you patience and understanding.

Best Regards,
Boopathi Subramaniam 3,301 Reputation points

2020-08-05T16:14:53.97+00:00
Thanks for the reply.

How did you configure the management computer,is it on the DC?
LAPS GPO is liked to Workstations OU. LAPS is installed in the workstations. It gets GPO and password generated.

Did you get the password from the client or the management computer?Was the password the same ?
Enable local admin password management:Enabled, Password Settings:Enabled, Password Complexity: arge letters + small letters + numbers + specials, Password Length: 14, Password Age (Days):30

Do you want to keep the client disconnected from the DC
No, Clients are always connected to DC. Offices were closed due to COVID19. Few offices are opened now and clients are switched on. Then it gives "The trust relationship between this workstation and the primary domain failed" message. Then tried to login to Local User Bultin account with LAPS password but it says User name and password is Invalid

Accepted answer

Fan Fan 15,321 Reputation points Microsoft Vendor

2020-08-06T01:43:20.3+00:00

Hi,

Since the trust relation is broken , it need to recreated firstly.

Due to the trust-relationship broken ,I would recommend you cut he network down and logon to the workstation as domain administrator with cached credentials , reset the password for the local administrator .
Then perform domain dis-joining and domain joining as normal.

Fan
Please sign in to rate this answer.
Fan Fan 15,321 Reputation points Microsoft Vendor

2020-08-10T02:16:24.47+00:00

Hi,

Just checking in to see if the information provided was helpful.
Please let us know if you would like further assistance.

Best Regards,

Boopathi Subramaniam 3,301 Reputation points

2020-08-10T16:51:04.537+00:00

Will the password saved in Mcs_AdmPwd attribute during the last communication to the DC for a computer will work or not

Fan Fan 15,321 Reputation points Microsoft Vendor

2020-08-11T00:57:27.143+00:00

Hi,
It supposed to be work since it can't be updated when off the domain.
But if it was incorrect, it may be changed by following reasons:
a) A third party program/tool
b) System restore
c) User initiated change

Best Regards,

Fan Fan 15,321 Reputation points Microsoft Vendor

2020-08-13T00:38:48.81+00:00

Hi，
I am checking to see if the problem has been resolved.
If there's anything you'd like to know, don't hesitate to ask.
Best Regards,
Sign in to comment

Share via

Query about Local administartor password solution

0 additional answers