Migrate LAPS from GPO to Intune

@debon1, Thanks for posting in Q&A.

To migrate from GPO to Intune for Local Administrator Password Solution (LAPS), you do not need to uninstall LAPS or remove the configuration on the GPO. Instead, you need to create and assign Intune LAPS policy to devices, and then ensure that the client-side LAPS policy is configured to backup passwords to Azure AD.

It is important to note that when migrating from GPO to Intune for LAPS, you should disable the GPO that currently configures LAPS policy on your domain-joined machines after the Intune policy has taken effect. This will ensure that the two policies do not conflict with each other.

Here are the high-level steps to migrate LAPS from GPO to Intune:

1. Create and assign Intune LAPS policy to devices using the Intune admin center.
2. Verify that the Intune policy is successfully applied to the targeted devices.
3. Ensure that the client-side LAPS policy is configured to backup passwords to Azure AD.
4. Wait until the client-side LAPS policy refreshes and verifies that the password is correctly backed up to Azure AD.
5. Monitor the client-side LAPS policy to ensure the backup is occurring as expected.

You can find more detailed steps for managing LAPS with Intune in the Microsoft documentation on "Manage Windows LAPS policy with Microsoft Intune".

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.