I need to enable local admin accounts on most of the computers. I have these passwords managed by LAPS, but I can't allow it with GPO when I have "Minimum password length" policy in place. Is there any workaround how to enable it via GPO without removing ""Minimum password length" policy? I don't want to allow these accounts with script. Thank you for every suggestion!

  • What happens? Is there an error? – Greg Askew Apr 2 at 13:38
  • I don't know... gpupdate runs without errors, "gpupdate /R" shows no errors, GPO is applied. I found this thread link so I have tried that and it's working with no "minimum password length" policy set... – devlin Apr 2 at 13:50
  • What is the length of the account password and the minimum password length policy? – Greg Askew Apr 2 at 13:53
  • Maybe, there is a problem with LAPS and setting password on disabled account. I have minimum password length 10 characters and LAPS is showing me password for that account which is 20 characters long. – devlin Apr 2 at 14:06
  • Does enabling the account manually work? – Greg Askew Apr 3 at 11:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.