0 votes

We are in the process of implementing LAPS in our environment. Is there an option / way to get the password from the Adaxes web portal?

by (880 points)

1 Answer

0 votes
by (197k points)

Hello,

As a solution, you can create a View User Web Interface action that will contain only the ms-Mcs-AdmPwd property on its form and will always show the value for the currently logged on user. For information on how to manage Web Interface actions, have a look at the following tutorial: https://www.adaxes.com/tutorials_WebInterfaceCustomization_ConfigureActionsPane.htm. Also, you will need to grant users the permissions to see the ms-Mcs-AdmPwd property value of their own accounts. For details, have a look at the following tutorial: https://www.adaxes.com/tutorials_SelfService_AllowUsersToModifySpecificPropertiesOfTheirAccounts.htm. On step 3 of the guide, select the checkbox in the Allow column for the Read ‘ms-Mcs-AdmPwd’ Property permission.

If that is not what you need, please, describe the desired behavior in all the possible details with live examples.

0

Hello Support Team,

I try to follow your information, but I am not able to give a security group permissions to read the 'ms-Mcs-AdmPwd' attribute as it is not shown up like other properties like seen in step 3 of the guide.

Could you point me in the right direction or tell me why I am not able to give permissions to this specific property (ms-Mcs-AdmPwd)?

I´d like to give different permissions for the LAPS attribute for different security groups.

Thanks in advance!

0

Hello,

Please, make sure to select the Show all properties check box on step 3 of the provided tutorial to display all available properties. Also you can filter attributes by typing their names in the corresponding field. image.png

0

Dear Support,

as shown in my screenshot the property is not found somehow. Can you support me why this is the case?

image.png

Thank you.

0

Hello,

Sorry for the confusion. The ms-Mcs-AdmPwd is a property of the Computer object. You need to select the Computer object type first and then find the required property. image.png

Related questions

0 votes
0 answers

ACK - disregard the below question, the answer is simple and a misunderstanding on my part. For those searching this, simply expose the ms-mcs-admpwd computer property and as ... in the web UI. What might be the best/cleanest way to implement this? Thanks!

asked Aug 9, 2016 by VTPatsFan (3.7k points)
0 votes
1 answer

I want to send an e-mail (after create user job) with the password visible, how to do that? Remco

asked Jan 13, 2014 by RTiel (5.3k points)
0 votes
1 answer

Hi, I'm trying to create a web console only for sending SMS using adaxes 2018.2. The SMS-users that are going to use the console should only be able to view users, not edit ... which removes a lot of OUs that the users should not see or be able to browse to.

asked Sep 2, 2020 by eirikza (710 points)
0 votes
1 answer

Hello We are using the Computer Manager security role and have given access to this group of staff to a web console, what I can't get working is getting it to display the ... else like OS, service pack, role are displaying OK. Can you help please? Thank you.

asked Feb 4, 2015 by CBurn (3.3k points)
0 votes
1 answer

We turned on SSO using SAML logins via the Azure Active Directory to the Admin and Help Desk web portals in Adaxes. Common, Self Sevice, and a couple of other portals ... preferred. Is there a setting I am missing somewhere? Adaxes version 3.12.17215.0 Thanks

asked Mar 2, 2020 by jiambor (5.7k points)
2,447 questions
2,198 answers
5,913 comments
295,157 users