Skip to content

Commit a666207

Browse files
authored
Update howto-windows-laps-with-azuread.md
1 parent 687a4f9 commit a666207

File tree

1 file changed

+9
-8
lines changed

1 file changed

+9
-8
lines changed

articles/active-directory/devices/howto-windows-laps-with-azuread.md

Lines changed: 9 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -36,13 +36,15 @@ Azure AD support for LAPS includes the following capabilities:
3636
- **Conditional Access policies for local administrator password recovery** - Configure Conditional Access policies on directory roles that have the authorization of password recovery.
3737

3838
> [!NOTE]
39-
> Devices that are workplace-joined (WPJ) are not supported by Intune for LAPS.
39+
> Windows LAPS with Azure AD is not supported for Windows devices that are [Azure AD registered](https://learn.microsoft.com/azure/active-directory/devices/concept-azure-ad-register).
4040
4141
To learn about Windows LAPS in more detail, start with the following articles in the Windows documentation:
4242

4343
- [What is Windows LAPS?](https://learn.microsoft.com/windows-server/identity/laps/laps-scenarios-azure-active-directory) – Introduction to Windows LAPS and the Windows LAPS documentation set.
4444
- [Windows LAPS CSP](https://learn.microsoft.com/windows/client-management/mdm/laps-csp) – View the full details for LAPS settings and options. Intune policy for LAPS uses these settings to configure the LAPS CSP on devices.
4545
- [Microsoft Intune support for Windows LAPS](https://learn.microsoft.com/mem/intune/protect/windows-laps-overview)
46+
- [Windows LAPS architecture](https://learn.microsoft.com/windows-server/identity/laps/laps-concepts#windows-laps-architecture)
47+
4648

4749
## Requirements
4850

@@ -123,16 +125,15 @@ To configure Conditional Access for local administartor passwrod recovery you wi
123125
> [!NOTE]
124126
> Other role types including administrative unit-scoped roles and custom roles aren't supported
125127
126-
**Licensing requirements**:
128+
## Licensing requirements
127129

128-
- **Azure Active Directory subscription**
129-
*Azure Active Directory Free*, when you are using basic Windows LAPS with Microsoft Entra (Azure AD) features such as enabling LAPS using device settings, storing encrypted local administrator password, password recovery and audit logsis the free version of Azure AD that’s included when you subscribe to Intune. With Azure AD Free, you can use all the features of LAPS.
130-
*Azure Active Directory Premium*, when you are using premium experiences to improve security with capabilities such as Conditional Access, Custom Roles and Administrative Units
131-
- **Intune subscription**
132-
*Microsoft Intune Plan 1*, which is the basic Intune subscription. You can also use Windows LAPS with a free trial subscription for Intune.
130+
### Azure Active Directory subscription
131+
**Azure Active Directory Free**, when you are using basic Windows LAPS with Microsoft Entra (Azure AD) features such as enabling LAPS using device settings, storing encrypted local administrator password, password recovery and audit logsis the free version of Azure AD that’s included when you subscribe to Intune. With Azure AD Free, you can use all the features of LAPS.
132+
**Azure Active Directory Premium**, when you are using premium experiences to improve security with capabilities such as Conditional Access, Custom Roles and Administrative Units
133133

134+
### Microsoft Intune subscription
135+
**Microsoft Intune Plan 1**, which is the basic Intune subscription. You can also use Windows LAPS with a free trial subscription for Intune.
134136

135-
For information about Windows LAPS architecture, see [Key concepts in Windows LAPS](/windows-server/identity/laps/laps-concepts#windows-laps-architecture) in the Windows documentation.
136137

137138
## Frequently Asked Questions
138139

0 commit comments

Comments
 (0)