Local Admin Password Solution showing 1 password from non-admin PowerShell

Thorin

11/21/22, 9:50 PM

We run the following command to check and make sure systems have their LAPS setup correctly. We are supposed to do this from an elevated PowerShell prompt and it works fine. When we run it as a non-admin PowerShell none of the computer show the password, which is correct except for 1 and I don't know why. any ideas how to get it to behave like the others?

Get-ADComputer -Filter * -Properties ms-Mcs-AdmPwd |
where-object {($_.DistinguishedName -notlike '*,OU=Non-Windows*') -and
($_.DistinguishedName -notlike '*,OU=Cemetery*') -and ($_.DistinguishedName
-notlike '*,OU=Domain Controllers*')}  |
select name, ms-Mcs-AdmPwd | Sort-Object name

0 + 4

powershell

active-directory

windows-server-2019

DarkMoon

11/21/22, 10:39 PM

'which is correct except for 1' In what way isn't it correct? Can you see it, but you don't expect to? Did you modify permissions on that one so you could see it, but you don't? Something else?

Thorin

11/21/22, 10:50 PM

So when running as admin it is correct, I can see everything. Running as non-admin is almost right, I see none except one and I shouldn't see it for any.

DarkMoon

11/21/22, 11:00 PM

Sorry, realized the answer to my question was in the title, and had a further look. Bottom of page 21 of the Operations Guide covered this; did you check it?

Thorin

11/22/22, 8:04 PM

I couldn't figure out what the deal was with this OU and there was only one computer in it so I recreated the OU, attached the GPO, moved the computer and now its fixed, good enough for me. Thanks

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Local Admin Password Solution showing 1 password from non-admin PowerShell

TH: โซลูชันรหัสผ่านผู้ดูแลระบบภายในแสดง 1 รหัสผ่านจาก PowerShell ที่ไม่ใช่ผู้ดูแลระบบ

RO: Soluție locală pentru parole de administrator care afișează o parolă de la PowerShell non-administrator

RU: Решение для локального пароля администратора, показывающее 1 пароль от PowerShell без прав администратора

VI: Giải pháp mật khẩu quản trị viên cục bộ hiển thị 1 mật khẩu từ PowerShell không phải quản trị viên

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.