Microsoft Confirms Interoperability Issues Between New Windows LAPS and Legacy LAPS Policies

Windows 11 2022 Update

Microsoft is investigating an interoperability issue between the new Windows Local Administrator Password Solution (LAPS) and legacy LAPS policies. The company has confirmed that installing the April 2023 Patch Tuesday updates will break the functionality of both Windows LAPS and legacy LAPS on Windows devices.

Earlier this week, Microsoft announced the native integration of Windows Local Administrator Password Solution (LAPS) on Windows 11, Windows 10, and Windows Server. The feature allows IT admins to manage local account passwords on Windows PCs. LAPS supports both Active Directory and Azure Active Directory (Azure AD) environments. Windows LAPS policies can be managed with Group Policy templates or the CSP interface on Windows.

Up until now, Windows Local Administrator Password Solution was available as a free download on the Microsoft Download Center. Going forwards, the tool will continue to exist as an optional download, but it will now be called “Legacy LAPS.”

“There is a legacy LAPS interop bug in the above April 11, 2023 update. If you install the legacy LAPS GPO CSE on a machine patched with the April 11, 2023 security update and an applied legacy LAPS policy, both Windows LAPS and legacy LAPS will break. Symptoms include Windows LAPS event log IDs 10031 and 10032, as well as legacy LAPS event ID 6,” Microsoft explained.

How to fix legacy LAPS interop bug on Windows

Fortunately, Microsoft says that it’s working to resolve the problem, and a fix should be available in the near future. In the meantime, the company has provided a temporary workaround to help organizations address the LAPS interop bug in on-premises environments.

Microsoft recommends that IT admins can uninstall legacy LAPS to mitigate the problem. Alternatively, they can delete all values under the following registry key: HKLM\Software\Microsoft\Windows\CurrentVersion\LAPS\State

Did you experience any problems with the LAPS functionality on Windows PCs? Let us know in the comments below.