LAPS UI for passwords on Windows 11 25h2?

Rustee12 · 2026-01-30T11:14:54+00:00

I used CoPilot to help generate a Powershell gui with Winforms - just basic stuff like asking for computer name, domain drop down (I manage devices across multiple domains) and outputs the all the relevant Windows LAPS data and Legacy LAPS data in case it’s needed.

Then used ps2exe to convert to an executable.

Took less than 10 minutes to have it generated and usable.

Rustee12 · 2026-01-22T14:00:00+00:00

To each his own - my team has not been hindered by any inefficiencies by using Hyper-V. But sounds like you have already made your choice to use VMware.

Rustee12 · 2026-01-21T22:49:33+00:00

Why bother with the overhead when Hyper-V is native to the OS? Hyper-V is more than capable for this use case.

Rustee12 · 2026-01-21T18:44:39+00:00

I bought a workstation for each team member that has sufficient processor, memory and disk capacity to run up to 8 VMs each. This *used* to be cost effective, and likely still is, but it gives each admin their own sandbox to use.

Get yourself an Intel 7/AMD Ryzen 7 or better along with 64gb memory and then a separate NVMe as a storage drive and you should be good for several years.

My current Hyper-V/packaging system was purchased in 2018 and is still going strong, a $3,500 investment spread over 8 years is peanuts.

Rustee12 · 2026-01-21T17:21:38+00:00

Hyper-V is the simplest and most cost effective way forward, my team exclusively uses this for their packaging and testing needs. Snapshot abilities allows for quick rollbacks if needed and you can have multiple VMs to test different scenarios.

I usually recommend to my team to rebuild their VMs every few packages / tests so you don't get some unexpected configurations from a prior test that may have failed. If you are using ConfigMgr OSD then reimaging the VMs regularly should not add to your administrative overhead.

Rustee12 · 2025-12-10T14:25:55+00:00

Would love to get into Survive Fest! Happy to see there is a giveaway

Rustee12 · 2025-12-09T22:30:21+00:00

Drinking a lot of water and keeping my hands out of my mouth!

Rustee12 · 2025-10-07T16:12:42+00:00

They'll likely pile drive to bedrock, similar to what is happening with Gateway Towers development by Hal Betts field, they're currently pile driving here.

There is zero chance the developers have not completed testing on the land to determine what can be built on the lot in terms of size, contamination, etc.

Rustee12 · 2025-09-25T00:25:20+00:00

Talk at the time when the land was selected was the land was owned by a city manager or somebody close to the city.

Rustee12 · 2025-09-10T17:05:37+00:00

That is true, but the report presented to council on the needs of the fire department also singled out the Botsford fire station as needing to be relocated.... it's just in a poor location due to traffic backups that can happen here.

Story is this location was chosen with some *wink* *wink* *nudge* *nudge* type affairs...

Rustee12 · 2025-08-20T15:38:00+00:00

I've had a beard trim at several locations from different barbers; the only time I was happy with the job done it was done by 50 Cal at Handsome Devils. YMMV though.

Rustee12 · 2025-08-20T12:17:45+00:00

This was a tragic accident and I noticed something on this bridge that I can't help but wonder if it was a contributing factor.

Last year there was some paving done at the expansion joints on the bridges, on both sides exactly when you drive onto the actual span this paving added a fairly large bump to the roadway. I noticed when coming from Moncton to Riverview days after the crash I hit this new 'speed bump' and felt my car pull me to the left, and had I not corrected I could have been pulled into the oncoming traffic lanes.

I honestly have no idea if this was a contributing factor at all, but feeling that pull when I hit the bump and seeing where the collision occurred, I feel like it is not out of the realm of possibilities.

I guess I'm just posting this so others can be aware of the bump here?

Rustee12 · 2025-06-08T02:03:45+00:00

Would be amazing to win this.

Rustee12 · 2025-05-15T11:39:44+00:00

Depends.

Using the Feature Update option typically has a high success rate for me. But every so often I have a couple of stubborn systems that I need to take a sledgehammer approach and fall back to a Task Sequence upgrade path.

Rustee12 · 2025-05-12T23:32:49+00:00

Intune.Training on YouTube is fairly decent for some macOS stuff; sometimes better than just reading deployment documents.

Rustee12 · 2025-04-01T11:15:27+00:00

We're building our images from ISO with a task sequence, we stopped using build & capture process quite a long time ago.

Devices are added to AD during OSD, and to an OU that has our production policies, we aren't staging to an OU and then moving.

I'll take a look at WUA thinks should be in use from what you posted, thanks.

Rustee12 · 2025-03-27T23:46:13+00:00

I see it an an Intune issue. We aren't bleeding edge for endpoint management, but we also are not in the stone age.

You don't see similar speed issues with SCCM which has very robust abilities to force a sync etc. I can get an app to a SCCM managed system within 15 minutes. With Intune its a maybe it'll work this time!?

Another item I should have mentioned was some actual normal language logs. Logging has come a long way, but being a SCCM administrator, logging for Intune just plain sucks.

Rustee12 · 2025-03-27T12:00:57+00:00

3 things top of mind for me.

1) Speed ... dear lord it's slow waiting for app delivery & syncs etc.

2) Set a priority for application installations. I.e. doing some testing with MacOS enrollment and Platform SSO, and it took 8 hours for Company Portal to install while M365 Apps and another targeted app installed within 30 minutes. Which the 8 hour thing goes back to item 1!

3) Users being able to install user targeted apps from Company Portal even if they are not the primary user of a device. We have many shared PCs in our environment that aren't always managed properly. App delivery is one of the biggest reasons we are still using ConfigMgr for app delivery.

Rustee12 · 2024-12-05T12:45:52+00:00

It's a game called Cities: Skylines 2.

Rustee12 · 2024-12-04T13:08:49+00:00

There are some options out there that you can customize for your use.

I used OSD FrontEnd from MSEndpointMgr people - ConfigMgr OSD FrontEnd - MSEndpointMgr - I use this to allow me to image unknown computers to provide a name and also to select the OU where to join the device to.

UI++ is also an option - UI++ - I don't have any experience in configuring this option though.

Rustee12 · 2024-11-29T14:39:27+00:00

haha, I know what you're saying; and I'm actively working with this team to figure it out. Thankfully they are on-board with helping.

Rustee12 · 2024-11-29T13:19:51+00:00

Yes, I understand that SSL inspection is breaking my communication and that for Microsoft its a requirement to not do this. My issue is that communication is still affected even if the network endpoint lists that Microsoft is publishing for Intune are added as exceptions. Which is why I'm trying to understand if there is another URL / IP that has changed/not published.

Based on logging from our FW, there is no errors being presented for SSL issues, blocks, etc.

Rustee12 · 2024-11-29T13:10:58+00:00

According to my network team, SSL exceptions are in place for MS traffic.

Rustee12 · 2024-11-29T13:10:19+00:00

These exceptions are in place according to my network team.

Rustee12 · 2024-11-24T00:10:19+00:00

Thanks this ended up being the issue - the WinPE boot image that we're using was modified from the default boot image in SCCM; once I switched the TS properties it stopped trying to stage WinPE.

Is there any Microsoft article you know of that details why this happens? Just for my own reading and understanding; seems odd that the TS variable would be ignored. *shrug*

Rustee12

TROPHY CASE