Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # Check if LAPS Group Policy is enabled
- $lapsPolicyEnabled = Get-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd" -Name "LAPSEnabled" -ErrorAction SilentlyContinue
- if ($lapsPolicyEnabled -eq $null) {
- # LAPS Group Policy is not enabled, enable it
- Write-Host "LAPS Group Policy is not enabled. Enabling it now..."
- New-Item -Path "HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd" -Force | Out-Null
- New-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd" -Name "LAPSEnabled" -Value 1
- Write-Host "LAPS Group Policy has been enabled."
- } else {
- # LAPS Group Policy is already present, resetting back to 1
- Write-Host ("LAPS Group Policy is present, settings LAPSEnabled value to 1.")
- Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd" -Name "LAPSEnabled" -Value 1
- }
- $AdmPwdEnabled = Get-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd" -Name "AdmPwdEnabled"-ErrorAction SilentlyContinue
- if ($AdmPwdEnabled -eq $null) {
- # AdmPwdEnabled Group Policy is not enabled, enable it
- Write-Host "AdmPwdEnabled Group Policy is not enabled. Enabling it now..."
- New-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd" -Name "AdmPwdEnabled" -Value 1 -PropertyType "DWORD" -Force | Out-Null
- Write-Host "AdmPwdEnabled Group Policy has been enabled."
- } else {
- # AdmPwdEnabled Group Policy is already present, resetting back to 1
- Write-Host ("AdmPwdEnabled Group Policy is present, setting AdmPwdEnabled value to 1.")
- Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft Services\AdmPwd" -Name "AdmPwdEnabled" -Value 1 -Force | Out-Null
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement