Is the GPO also applied together with Intune policy? If yes, then GPO will take precedence.
Migrate LAPS from GPO to Intune
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(28.799999999999997, 73%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYH%3C/text%3E%3C/svg%3E)
Yared H. Kebede
0
Reputation points
I have LAPS configured using Group Policy, and it's working fine. Now, I would like to migrate the management to Intune. I followed an article I found online and set up our configuration accordingly, but I can't see the local administrator password in the Intune portal (it's not working).
What did I miss, or what should I do to successfully migrate LAPS from GPO to Intune?
1.I have enabled Azure AD LAPS within my Azure Tenant: Entra ID > Devices > Device Settings > Enable Microsoft Entra Local Administrator Password Solution (LAPS)
- I have enabled the Built-in Administrator Account: Devices > Configuration profiles > Create profile....Local Policies Security Options (Enabled).
3.Configured the LAPS Policy: In the Intune admin center, Endpoint security > Account protection > Create policy.
- Prerequisite: Windows platform: Windows 11 23H2
Microsoft Security | Intune | Configuration
2 answers
Sort by: Most helpful
-
-
Yared H. Kebede 0 Reputation points
2025-08-19T05:01:03.2566667+00:00 Yes, both the GPO and Intune policies are applied together. I excluded my test workstations from GPO-2, do I also need to exclude them from GPO-1?
GPO-1:
Computer Configuration > Policies >Policies > Security Settings> Local Policies/Security Options
Accounts: Administrator account status : Enabled
Accounts: Rename administrator account : "CSAdmin"
GPO-2:
Computer Configuration > Policies > Administrative Templates > LAPS > Policy
Do not allow password expiration time longer than required by policy Enabled
Enable local admin password management Enabled
Password Settings Enabled