Using Laps with activated UAC?
Hello,
I want to use Laps as default credentials in PDQ Inventory.
In our Windows AD environment is on every System a local Admin configured.
Both on Server Systems (WinSer 2019) and Clients (Win 10) I get a password in Laps.
In PDQ Inventory Laps seem to work fine on Server Systems, but on Windows Clients I get the message "Access is denied".
When I deactivate UAC it works on Windows Clients too, but that is not a permanent fix cause of the lack of security.
Btw. UAC is activated on our Server Systems too.
Do I miss something here? Any tips how I can PDQ Inventory and Laps make work with activated UAC?
Thanks in regards!
Comments
I believe you will need to disable Remote UAC: https://help.pdq.com/hc/en-us/articles/220533007
@Colby Bouma why does it work with our Windows Server 2019 Systems though?
I'm not sure. Is Remote UAC already disabled on them? I don't have much experience with workgroup computers.
They are members of our domain and have UAC activated, I just checked it to be certain.
Just a heads up, it looks like STIG recommends not disabling it and using a domain account. https://www.stigviewer.com/stig/windows_server_2008_r2_member_server/2014-04-02/finding/V-36439
Curious if anyone else has any input on the topic of disabling it..