[Feature request]: Support for Windows LAPS

[DennisHirsch26]

Is your feature request related to a problem? Please describe.

The BIS-F function Set-LAPSExpirationTime uses legacy LAPS commands to set the attribute ms-Mcs-AdmPwdExpirationTime to 0.

This does not work with Windows LAPS, which is supported from Windows Sevrer 2019 and newer.
https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-overview

Describe the solution you'd like

To support both LAPS versions there has to bee a check if Legacy LAPS or Windows LAPS is used.

If Windows LAPS there is a new function Reset-LapsPassword.

https://support.citrix.com/s/article/CTX331247-laps-randomizing-local-admin-passwords-in-nonpersistent-environments?language=en_US

Describe alternatives you've considered

BIS-F Custom Skript to run Reset-LapsPassword in Personalization

Screenshots

No response

Additional context

[DennisHirsch26]

Possible Custom Skript Solution:

<#
.SYNOPSIS
 Resets the LAPS-managed password during BIS-F Personalization phase (New LAPS)

.DESCRIPTION
 Resets the LAPS-managed password during BIS-F Personalization phase (New LAPS)

.PARAMETER <Parameter_Name>
    <Brief description of parameter input required. Repeat this attribute if required>

.INPUTS
  None

.OUTPUTS
  None

.NOTES

  Author:	Dennis Hirsch

  History:
	16.04.2025 - DH: Initial script

.Link
  https://eucweb.com
#>

Begin {
    # define environment
	$script_path = $MyInvocation.MyCommand.Path
	$script_dir = Split-Path -Parent $script_path
	$script_name = [System.IO.Path]::GetFileName($script_path)

    # Setting default variables ($PSScriptroot/$logfile/$PSCommand,$PSScriptFullname/$scriptlibrary/LogFileName) independent on running script from console or ISE and the powershell version.
    If ($($host.name) -like "* ISE *") {
        # Running script from Windows Powershell ISE
        $PSScriptFullName = $psise.CurrentFile.FullPath.ToLower()
        $PSCommand = (Get-PSCallStack).InvocationInfo.MyCommand.Definition
    }
    ELSE {
        $PSScriptFullName = $MyInvocation.MyCommand.Definition.ToLower()
        $PSCommand = $MyInvocation.Line
    }
    [string]$PSScriptName = (Split-Path $PSScriptFullName -leaf).ToLower()
    If (($PSScriptRoot -eq "") -or ($PSScriptRoot -eq $null)) { [string]$PSScriptRoot = (Split-Path $PSScriptFullName).ToLower() }
}

Process {
    try {
        # Ensure LAPS module is available
        Import-Module LAPS -ErrorAction Stop
    
        # Reset the LAPS password for the local admin account on the current computer
        Reset-LapsPassword -Verbose -ErrorAction Stop

        Write-BISFLog -Msg "$script_name - LAPS password reset successfully."

    }
    catch {
        Write-BISFLog -Msg "$script_name - Failed to reset LAPS password: $_ "
    }

}

End {
    Add-BISFFinishLine
}