Repository navigation
FAQ
Why did you create another LAPS (G)UI?
- The existing standalone LAPS UI doesn't support Windows LAPS and the Windows LAPS password history.
- There is a built-in Windows LAPS tab in the RSAT (Active Directory Users and Computers). But to use this you have to install the RSAT for everyone who should use it. My GUI is small and portable.
- The LAPS tab in the RSAT (Active Directory Users and Computers) doesn't show the Windows LAPS password history.
- When using my GUI you don't have to learn the PowerShell modules.
Does the script version contains viruses? It is reported on "virustotal.com".
No it doesn't. Unfortunately some scanners are triggered by PowerShell scripts in a zip file. (Feel free to report the download / script as false positive to the manufacturer of your scanner.)
Why is there a copilopt-workspace directory? Have you used AI like copilot?
This folder contains a configuration file that disallows GitHub Copilot to create Issue comments and Pull Requests.
Note
This tool is developed by me and not by any AI. There was no AI used to create code that is written in this script.
Why does Windows / Smart Screen warn about untrusted publisher?
This is because the files are not digitally signed. You can safely proceed with this warning by clicking 'yes' and accepting the risk. (The cost for the signing process would be too expensive for an open source project I do not earn money from. The cost for the signing process would be too expensive for an open source project I do not earn money from.)
Why do some anti-virus scanners warn about PowerShell execution in the setup?
At installation and uninstallation the setup executes PowerShell commands. The PowerShell commands are required for creating and deleting the Windows Event Log category.
Can you support Windows Server 2016?
No. As long as Microsoft doesn't provide the PowerShell cmdlets on Server 2016, I can't support this OS.
Warning
You can find instructions on how to change my script to run on Windows Server 2016. But this is not supported by me. All manipulations of the script happens at your own risk!!!
Why don't you allow side-loading the LAPS module?
I know that such a feature would make my script usable on Windows Server 2016. But loading PowerShell modules from unknown locations is a potential security risk. And it requires to lower the execution policy level which is a security risk too.
How to get the correct window icon shown on my task bar?
You have to create a shortcut to open the Simple Laps Gui and assign it the SimpleLapsGui.ico icon from the downloaded zip file.
How to remove the Windows Event Log data?
You have two options to remove this data:
- Remove them manually in the Windows Event Log console.
- Uninstall the app. (In silent mode, you need the parameter
/RemoveEventLog.)
How to configure Simple LAPS GUI?
You can use the script parameters or Group Policies to configure the app. See the configuration documentation for more details.
Can I configure the tool to copy links instead of opening them?
Yes this is possible by starting the PowerShell script with the parameter ‑CopyLinkTargetsToClipboard or setting the Group Policy Copy links instead of opening them to enabled.
Why does enabling logging require administrative permissions?
When logging into Windows Event Log is enabled and the event log category is not created by the installer, it has to be created first by the app. To create a new category in Windows Event Log, administrative permission is required.
What notations are supported for the computer name?
The following computer name notations are supported:
- Sam Account Name (begins with a '$")
- Name (for all other inputs)
- DNS Hostname (contains at least one '.' character)
<Domain>\<Computer name>
How to query an other domain than my computer/user is joined to?
To do this please use one of the following computer name notations:
- DNS Hostname (contains at least one '.' character)
<Domain>\<Computer name>
Why are no passwords found?
Either you don't have the permission to read them or there are no passwords stored for this computer.
Why do some computers have no history?
To have a history it must be enabled and the computer must use Windows LAPS.
Why is the password not decrypted?
This happens if you don't have the required permission to decrypt the password.
How can I improve the range of characters supported for account name and password at the zoom view?
You can try if running the script in PowerShell 7 fixes this. The GUI framework in PowerShell 7 has better Unicode support.