using Logindata from LAPS with EntraID
Hi,
what do I need to do to link credentials for the Remote Desktop Manager (RDM) with LAPS data from Entra ID to a PC entry so that authentication works?
I can currently go to the LAPS entry connected to Entra, view the current password for a selected computer, and manually copy it into the entry, but there must be a more convenient way...
Thank you very much for your support.
All Comments (5)
Hello Reiner,
Thank you for contacting Devolutions Support.
You can link the LAPS entry directly to your RDP entry instead of copying the password. In the RDP entry properties, set Credentials to Linked (vault) and select your LAPS entry. The LAPS entry needs to be in the same vault as the RDP entry for it to appear in the list.
Could you try this and let me know the result?
Best regards,
Samuel Dery
Hello Reiner,
Thank you for contacting Devolutions Support.
You can link the LAPS entry directly to your RDP entry instead of copying the password. In the RDP entry properties, set Credentials to Linked (vault) and select your LAPS entry. The LAPS entry needs to be in the same vault as the RDP entry for it to appear in the list.
Could you try this and let me know the result?
Best regards,
Hello Samuel,
thank you for your answer.
If I do as suggested, a LAPS window comes up where I should choose the host.
If I double click the host in the RDM the entry should know which entry I double-clicked and not to ask me for LAPS to choose it again.
How can I do this better?
Kind regards,
Reiner
Hello Reiner,
Thank you for the follow-up. To understand why you are asked to choose the computer, could you send a screenshot of the properties of the RDP entry you are launching? Please redact any sensitive information before sending.
Best regards,
Samuel Dery
Hello Reiner,
Thank you for the follow-up. To understand why you are asked to choose the computer, could you send a screenshot of the properties of the RDP entry you are launching? Please redact any sensitive information before sending.
Best regards,
Hello Samuel,
thank you for following up. My tests indicate that the assignment occurs automatically via the host entry. As this was previously set to a registered IP address, it could not be mapped by LAPS. Therefore, it should function correctly provided that name resolution for the clients is available.
I'll keep trying it myself.
Best regards,
Reiner
Hello Reiner,
Thank you for your reply,
No problem. Please let me know if you have any further questions.
Best regards,
Samuel Dery