In this short post we will see how to deploy Microsoft LAPS using SCCM. Microsoft LAPS can be deployed using various methods, one among them is using the Configuration Manager or SCCM. The Local Administrator Password Solution (LAPS) provides management of local account passwords of domain joined computers. Passwords are stored in Active Directory (AD) and protected by ACL, so only eligible users can read it or request its reset. In my previous posts on Microsoft LAPS, we deployed the LAPS software using Group Policy. In this post we will deploy Microsoft LAPS using Configuration Manager. If you are looking for LAPS step by step guides, you can access the posts by clicking on the below links.

Part 1 – How to install and deploy Microsoft LAPS Software

Part 2 – How to configure Active Directory for LAPS

Part 3 – How to configure Group Policy for LAPS

Download Step by Step Guide to Deploy Microsoft Local Administrator Password Solution

Download Microsoft Local Administrator Password Solution

How to deploy Microsoft LAPS using SCCM

Let’s now see the steps to deploy Microsoft LAPS. Launch the Configuration Manager console, click on Software Library, expand Application Management. Right click Applications and click on Create Application.

In the Create Application Wizard, choose Manually specify the application information. Click Next.

Provide a name to the app and some other details, click on Next.

Click Next.

We will be adding the x64 and x86 LAPS msi files. Click on Add.

Choose Automatically identify information about this deployment type from installation files. Choose the location where LAPS x64 msi file is located. Click Next.

Wait for the information to be imported from msi file. Click Next.

Provide a name to the deployment type and ensure the installation program is same as seen in the screenshot below. Click Next.

I have not specified any Requirements and dependencies for this app. So click Next and finally on the completion page click on Close.

So we have just imported the x64 msi. The next step is to import LAPS x86 msi file. Click on Add. You need to repeat the same steps as shown above to import the LAPS x86 msi file.

Once you import the LAPS x86, you will see both the msi files. Click Next.

On the completion screen, click on Close.

The next step is to distribute the LAPS to the distribution points. Right click on the app and click distribute content and choose the DP’s that you want to distribute the content. Once the content is available with the DP, right click on the app and click on Deploy. Choose the collection to which you want to deploy the app (Available or Required). In this example I have made the app Available to a device collection. On the client machine, launch the software center and under Applications click on Install to install the Microsoft Local Administrator Password Solution.

The installation is very quick and within few seconds you will find the LAPS installed on the computer. To verify the LAPS installation, launch the control panel and click on Programs and Features. If the installation is successful you will find the LAPS entry in the list of installed programs in Programs and Features.

Note – The uninstall command and detection methods are automatically added when you import the msi file. The uninstall option should also work fine. In case of install errors look for appenforce.log file for troubleshooting.