mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-28 13:17:23 +00:00
LAPS CSP
This commit is contained in:
parent
5c0cc3476f
commit
b240087b96
File diff suppressed because it is too large
Load Diff
@ -1,40 +1,29 @@
|
|||||||
---
|
---
|
||||||
title: LAPS DDF file
|
title: LAPS DDF file
|
||||||
description: Learn about the OMA DM device description framework (DDF) for the Local Administrator Password Solution configuration service provider.
|
description: View the XML file containing the device description framework (DDF) for the LAPS configuration service provider.
|
||||||
ms.author: jsimmons
|
author: vinaypamnani-msft
|
||||||
ms.topic: article
|
manager: aaroncz
|
||||||
|
ms.author: vinpa
|
||||||
|
ms.date: 02/17/2023
|
||||||
|
ms.localizationpriority: medium
|
||||||
ms.prod: windows-client
|
ms.prod: windows-client
|
||||||
ms.technology: itpro-manage
|
ms.technology: itpro-manage
|
||||||
author: jsimmons
|
ms.topic: reference
|
||||||
ms.localizationpriority: medium
|
|
||||||
ms.date: 07/04/2022
|
|
||||||
ms.reviewer: jsimmons
|
|
||||||
manager: jsimmons
|
|
||||||
---
|
---
|
||||||
|
|
||||||
# Local Administrator Password Solution DDF file
|
<!-- Auto-Generated CSP Document -->
|
||||||
|
|
||||||
This article shows the OMA DM device description framework (DDF) for the Local Administrator Password Solution (LAPS) configuration service provider.
|
# LAPS DDF file
|
||||||
|
|
||||||
Looking for the DDF XML files? See [CSP DDF files download](configuration-service-provider-ddf.md).
|
The following XML file contains the device description framework (DDF) for the LAPS configuration service provider.
|
||||||
|
|
||||||
The XML below is the current version for this CSP.
|
|
||||||
|
|
||||||
```xml
|
```xml
|
||||||
<?xml version='1.0' encoding='utf-8' standalone='yes'?>
|
<?xml version="1.0" encoding="UTF-8"?>
|
||||||
<identity
|
<!DOCTYPE MgmtTree PUBLIC " -//OMA//DTD-DM-DDF 1.2//EN" "http://www.openmobilealliance.org/tech/DTD/DM_DDF-V1_2.dtd"[<?oma-dm-ddf-ver supported-versions="1.2"?>]>
|
||||||
xmlns="urn:Microsoft.CompPlat/ManifestSchema.v1.00"
|
<MgmtTree xmlns:MSFT="http://schemas.microsoft.com/MobileDevice/DM">
|
||||||
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
|
|
||||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
||||||
owner="Microsoft"
|
|
||||||
namespace="Windows-DeviceManagement-CspDefinition"
|
|
||||||
name="LAPS">
|
|
||||||
<cspDefinition>
|
|
||||||
<MgmtTree>
|
|
||||||
<VerDTD>1.2</VerDTD>
|
<VerDTD>1.2</VerDTD>
|
||||||
<BinaryPath>"%windir%\system32\LapsCSP.dll</BinaryPath>
|
<MSFT:Diagnostics>
|
||||||
<Diagnostics></Diagnostics>
|
</MSFT:Diagnostics>
|
||||||
<ComClsid>{298a6f17-03e7-4bd4-971c-544f359527b7}</ComClsid>
|
|
||||||
<Node>
|
<Node>
|
||||||
<NodeName>LAPS</NodeName>
|
<NodeName>LAPS</NodeName>
|
||||||
<Path>./Device/Vendor/MSFT</Path>
|
<Path>./Device/Vendor/MSFT</Path>
|
||||||
@ -53,15 +42,13 @@ The XML below is the current version for this CSP.
|
|||||||
<Permanent />
|
<Permanent />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<DDFName></DDFName>
|
<DDFName />
|
||||||
</DFType>
|
</DFType>
|
||||||
<Applicability>
|
<MSFT:Applicability>
|
||||||
<OsBuildVersion>99.9.99999</OsBuildVersion>
|
<MSFT:OsBuildVersion>99.9.99999</MSFT:OsBuildVersion>
|
||||||
<CspVersion>1.0</CspVersion>
|
<MSFT:CspVersion>1.0</MSFT:CspVersion>
|
||||||
</Applicability>
|
<MSFT:EditionAllowList>0x4;0x1B;0x30;0x31;0x48;0x54;0x62;0x63;0x64;0x65;0x77;0x79;0x7A;0x7D;0x7E;0x81;0x82;0x87;0x88;0x88*;0x8A;0x8B;0xA1;0xA2;0xA4;0xA5;0xAB;0xAC;0xAF;0xB4;0xBC;0xBF;0xCA;0xCB;0xCD;</MSFT:EditionAllowList>
|
||||||
<ExposedTo>
|
</MSFT:Applicability>
|
||||||
<Mdm />
|
|
||||||
</ExposedTo>
|
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
<Node>
|
<Node>
|
||||||
<NodeName>Policies</NodeName>
|
<NodeName>Policies</NodeName>
|
||||||
@ -81,9 +68,9 @@ The XML below is the current version for this CSP.
|
|||||||
</Scope>
|
</Scope>
|
||||||
<DFTitle>Policies</DFTitle>
|
<DFTitle>Policies</DFTitle>
|
||||||
<DFType>
|
<DFType>
|
||||||
<DDFName></DDFName>
|
<DDFName />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AtomicRequired />
|
<MSFT:AtomicRequired />
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
<Node>
|
<Node>
|
||||||
<NodeName>BackupDirectory</NodeName>
|
<NodeName>BackupDirectory</NodeName>
|
||||||
@ -114,22 +101,22 @@ If not specified, this setting will default to 0.</Description>
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AllowedValues ValueType="ENUM">
|
<MSFT:AllowedValues ValueType="ENUM">
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>0</Value>
|
<MSFT:Value>0</MSFT:Value>
|
||||||
<ValueDescription>Disabled (password will not be backed up)</ValueDescription>
|
<MSFT:ValueDescription>Disabled (password will not be backed up)</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>1</Value>
|
<MSFT:Value>1</MSFT:Value>
|
||||||
<ValueDescription>Backup the password to Azure AD only</ValueDescription>
|
<MSFT:ValueDescription>Backup the password to Azure AD only</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>2</Value>
|
<MSFT:Value>2</MSFT:Value>
|
||||||
<ValueDescription>Backup the password to Active Directory only</ValueDescription>
|
<MSFT:ValueDescription>Backup the password to Active Directory only</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
</AllowedValues>
|
</MSFT:AllowedValues>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
<Node>
|
<Node>
|
||||||
@ -159,27 +146,41 @@ This setting has a maximum allowed value of 365 days.</Description>
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AllowedValues ValueType="Range">
|
<MSFT:AllowedValues ValueType="Range">
|
||||||
<Value>[1-365]</Value>
|
<MSFT:Value>[1-365]</MSFT:Value>
|
||||||
</AllowedValues>
|
</MSFT:AllowedValues>
|
||||||
<DependencyBehavior>
|
<MSFT:DependencyBehavior>
|
||||||
<DependencyGroup FriendlyId="BackupDirectory">
|
<MSFT:DependencyGroup FriendlyId="BackupDirectoryAADMode">
|
||||||
<DependencyChangedAllowedValues ValueType="Range">
|
<MSFT:DependencyChangedAllowedValues ValueType="Range">
|
||||||
<Value>[7-365]</Value>
|
<MSFT:Value>[7-365]</MSFT:Value>
|
||||||
</DependencyChangedAllowedValues>
|
</MSFT:DependencyChangedAllowedValues>
|
||||||
<Dependency Type="DependsOn">
|
<MSFT:Dependency Type="DependsOn">
|
||||||
<DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</DependencyUri>
|
<MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
|
||||||
<DependencyAllowedValue ValueType="ENUM">
|
<MSFT:DependencyAllowedValue ValueType="ENUM">
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>1</Value>
|
<MSFT:Value>1</MSFT:Value>
|
||||||
<ValueDescription>BackupDirectory configured to Azure AD</ValueDescription>
|
<MSFT:ValueDescription>BackupDirectory configured to Azure AD</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
</DependencyAllowedValue>
|
</MSFT:DependencyAllowedValue>
|
||||||
</Dependency>
|
</MSFT:Dependency>
|
||||||
</DependencyGroup>
|
</MSFT:DependencyGroup>
|
||||||
</DependencyBehavior>
|
<MSFT:DependencyGroup FriendlyId="BackupDirectoryADMode">
|
||||||
|
<MSFT:DependencyChangedAllowedValues ValueType="Range">
|
||||||
|
<MSFT:Value>[1-365]</MSFT:Value>
|
||||||
|
</MSFT:DependencyChangedAllowedValues>
|
||||||
|
<MSFT:Dependency Type="DependsOn">
|
||||||
|
<MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
|
||||||
|
<MSFT:DependencyAllowedValue ValueType="ENUM">
|
||||||
|
<MSFT:Enum>
|
||||||
|
<MSFT:Value>2</MSFT:Value>
|
||||||
|
<MSFT:ValueDescription>BackupDirectory configured to Active Directory</MSFT:ValueDescription>
|
||||||
|
</MSFT:Enum>
|
||||||
|
</MSFT:DependencyAllowedValue>
|
||||||
|
</MSFT:Dependency>
|
||||||
|
</MSFT:DependencyGroup>
|
||||||
|
</MSFT:DependencyBehavior>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
<Node>
|
<Node>
|
||||||
@ -212,26 +213,26 @@ If not specified, this setting will default to 4.</Description>
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AllowedValues ValueType="ENUM">
|
<MSFT:AllowedValues ValueType="ENUM">
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>1</Value>
|
<MSFT:Value>1</MSFT:Value>
|
||||||
<ValueDescription>Large letters</ValueDescription>
|
<MSFT:ValueDescription>Large letters</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>2</Value>
|
<MSFT:Value>2</MSFT:Value>
|
||||||
<ValueDescription>Large letters + small letters</ValueDescription>
|
<MSFT:ValueDescription>Large letters + small letters</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>3</Value>
|
<MSFT:Value>3</MSFT:Value>
|
||||||
<ValueDescription>Large letters + small letters + numbers</ValueDescription>
|
<MSFT:ValueDescription>Large letters + small letters + numbers</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>4</Value>
|
<MSFT:Value>4</MSFT:Value>
|
||||||
<ValueDescription>Large letters + small letters + numbers + special characters</ValueDescription>
|
<MSFT:ValueDescription>Large letters + small letters + numbers + special characters</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
</AllowedValues>
|
</MSFT:AllowedValues>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
<Node>
|
<Node>
|
||||||
@ -261,11 +262,11 @@ This setting has a maximum allowed value of 64 characters.</Description>
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AllowedValues ValueType="Range">
|
<MSFT:AllowedValues ValueType="Range">
|
||||||
<Value>[8-64]</Value>
|
<MSFT:Value>[8-64]</MSFT:Value>
|
||||||
</AllowedValues>
|
</MSFT:AllowedValues>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
<Node>
|
<Node>
|
||||||
@ -294,7 +295,7 @@ Note: if a custom managed local administrator account name is specified in this
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
@ -323,31 +324,31 @@ If not specified, this setting defaults to True.</Description>
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AllowedValues ValueType="ENUM">
|
<MSFT:AllowedValues ValueType="ENUM">
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>false</Value>
|
<MSFT:Value>false</MSFT:Value>
|
||||||
<ValueDescription>Allow configured password expiriration timestamp to exceed maximum password age</ValueDescription>
|
<MSFT:ValueDescription>Allow configured password expiriration timestamp to exceed maximum password age</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>true</Value>
|
<MSFT:Value>true</MSFT:Value>
|
||||||
<ValueDescription>Do not allow configured password expiriration timestamp to exceed maximum password age</ValueDescription>
|
<MSFT:ValueDescription>Do not allow configured password expiriration timestamp to exceed maximum password age</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
</AllowedValues>
|
</MSFT:AllowedValues>
|
||||||
<DependencyBehavior>
|
<MSFT:DependencyBehavior>
|
||||||
<DependencyGroup FriendlyId="BackupDirectory">
|
<MSFT:DependencyGroup FriendlyId="BackupDirectory">
|
||||||
<Dependency Type="DependsOn">
|
<MSFT:Dependency Type="DependsOn">
|
||||||
<DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</DependencyUri>
|
<MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
|
||||||
<DependencyAllowedValue ValueType="ENUM">
|
<MSFT:DependencyAllowedValue ValueType="ENUM">
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>2</Value>
|
<MSFT:Value>2</MSFT:Value>
|
||||||
<ValueDescription>BackupDirectory configured to Active Directory</ValueDescription>
|
<MSFT:ValueDescription>BackupDirectory configured to Active Directory</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
</DependencyAllowedValue>
|
</MSFT:DependencyAllowedValue>
|
||||||
</Dependency>
|
</MSFT:Dependency>
|
||||||
</DependencyGroup>
|
</MSFT:DependencyGroup>
|
||||||
</DependencyBehavior>
|
</MSFT:DependencyBehavior>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
<Node>
|
<Node>
|
||||||
@ -359,7 +360,7 @@ If not specified, this setting defaults to True.</Description>
|
|||||||
<Get />
|
<Get />
|
||||||
<Replace />
|
<Replace />
|
||||||
</AccessType>
|
</AccessType>
|
||||||
<DefaultValue>False</DefaultValue>
|
<DefaultValue>True</DefaultValue>
|
||||||
<Description>Use this setting to configure whether the password is encrypted before being stored in Active Directory.
|
<Description>Use this setting to configure whether the password is encrypted before being stored in Active Directory.
|
||||||
|
|
||||||
This setting is ignored if the password is currently being stored in Azure.
|
This setting is ignored if the password is currently being stored in Azure.
|
||||||
@ -370,7 +371,7 @@ If this setting is enabled, and the Active Directory domain meets the DFL prereq
|
|||||||
|
|
||||||
If this setting is disabled, or the Active Directory domain does not meet the DFL prerequisite, the password will be stored as clear-text in Active Directory.
|
If this setting is disabled, or the Active Directory domain does not meet the DFL prerequisite, the password will be stored as clear-text in Active Directory.
|
||||||
|
|
||||||
If not specified, this setting defaults to False.</Description>
|
If not specified, this setting defaults to True.</Description>
|
||||||
<DFFormat>
|
<DFFormat>
|
||||||
<bool />
|
<bool />
|
||||||
</DFFormat>
|
</DFFormat>
|
||||||
@ -381,31 +382,31 @@ If not specified, this setting defaults to False.</Description>
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AllowedValues ValueType="ENUM">
|
<MSFT:AllowedValues ValueType="ENUM">
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>false</Value>
|
<MSFT:Value>false</MSFT:Value>
|
||||||
<ValueDescription>Store the password in clear-text form in Active Directory</ValueDescription>
|
<MSFT:ValueDescription>Store the password in clear-text form in Active Directory</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>true</Value>
|
<MSFT:Value>true</MSFT:Value>
|
||||||
<ValueDescription>Store the password in encrypted form in Active Directory</ValueDescription>
|
<MSFT:ValueDescription>Store the password in encrypted form in Active Directory</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
</AllowedValues>
|
</MSFT:AllowedValues>
|
||||||
<DependencyBehavior>
|
<MSFT:DependencyBehavior>
|
||||||
<DependencyGroup FriendlyId="BackupDirectory">
|
<MSFT:DependencyGroup FriendlyId="BackupDirectory">
|
||||||
<Dependency Type="DependsOn">
|
<MSFT:Dependency Type="DependsOn">
|
||||||
<DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</DependencyUri>
|
<MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
|
||||||
<DependencyAllowedValue ValueType="ENUM">
|
<MSFT:DependencyAllowedValue ValueType="ENUM">
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>2</Value>
|
<MSFT:Value>2</MSFT:Value>
|
||||||
<ValueDescription>BackupDirectory configured to Active Directory</ValueDescription>
|
<MSFT:ValueDescription>BackupDirectory configured to Active Directory</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
</DependencyAllowedValue>
|
</MSFT:DependencyAllowedValue>
|
||||||
</Dependency>
|
</MSFT:Dependency>
|
||||||
</DependencyGroup>
|
</MSFT:DependencyGroup>
|
||||||
</DependencyBehavior>
|
</MSFT:DependencyBehavior>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
<Node>
|
<Node>
|
||||||
@ -436,21 +437,21 @@ If the specified user or group account is invalid the device will fallback to us
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<DependencyBehavior>
|
<MSFT:DependencyBehavior>
|
||||||
<DependencyGroup FriendlyId="BackupDirectory">
|
<MSFT:DependencyGroup FriendlyId="BackupDirectory">
|
||||||
<Dependency Type="DependsOn">
|
<MSFT:Dependency Type="DependsOn">
|
||||||
<DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</DependencyUri>
|
<MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
|
||||||
<DependencyAllowedValue ValueType="ENUM">
|
<MSFT:DependencyAllowedValue ValueType="ENUM">
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>2</Value>
|
<MSFT:Value>2</MSFT:Value>
|
||||||
<ValueDescription>BackupDirectory configured to Active Directory</ValueDescription>
|
<MSFT:ValueDescription>BackupDirectory configured to Active Directory</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
</DependencyAllowedValue>
|
</MSFT:DependencyAllowedValue>
|
||||||
</Dependency>
|
</MSFT:Dependency>
|
||||||
</DependencyGroup>
|
</MSFT:DependencyGroup>
|
||||||
</DependencyBehavior>
|
</MSFT:DependencyBehavior>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
<Node>
|
<Node>
|
||||||
@ -480,24 +481,24 @@ This setting has a maximum allowed value of 12 passwords.</Description>
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AllowedValues ValueType="Range">
|
<MSFT:AllowedValues ValueType="Range">
|
||||||
<Value>[0-12]</Value>
|
<MSFT:Value>[0-12]</MSFT:Value>
|
||||||
</AllowedValues>
|
</MSFT:AllowedValues>
|
||||||
<DependencyBehavior>
|
<MSFT:DependencyBehavior>
|
||||||
<DependencyGroup FriendlyId="BackupDirectory">
|
<MSFT:DependencyGroup FriendlyId="BackupDirectory">
|
||||||
<Dependency Type="DependsOn">
|
<MSFT:Dependency Type="DependsOn">
|
||||||
<DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</DependencyUri>
|
<MSFT:DependencyUri>Vendor/MSFT/LAPS/Policies/BackupDirectory</MSFT:DependencyUri>
|
||||||
<DependencyAllowedValue ValueType="ENUM">
|
<MSFT:DependencyAllowedValue ValueType="ENUM">
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>2</Value>
|
<MSFT:Value>2</MSFT:Value>
|
||||||
<ValueDescription>BackupDirectory configured to Active Directory</ValueDescription>
|
<MSFT:ValueDescription>BackupDirectory configured to Active Directory</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
</DependencyAllowedValue>
|
</MSFT:DependencyAllowedValue>
|
||||||
</Dependency>
|
</MSFT:Dependency>
|
||||||
</DependencyGroup>
|
</MSFT:DependencyGroup>
|
||||||
</DependencyBehavior>
|
</MSFT:DependencyBehavior>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
<Node>
|
<Node>
|
||||||
@ -527,11 +528,11 @@ This setting has a maximum allowed value of 12 passwords.</Description>
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AllowedValues ValueType="Range">
|
<MSFT:AllowedValues ValueType="Range">
|
||||||
<Value>[0-24]</Value>
|
<MSFT:Value>[0-24]</MSFT:Value>
|
||||||
</AllowedValues>
|
</MSFT:AllowedValues>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
<Node>
|
<Node>
|
||||||
@ -558,22 +559,22 @@ If not specified, this setting will default to 3 (Reset the password and logoff
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AllowedValues ValueType="ENUM">
|
<MSFT:AllowedValues ValueType="ENUM">
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>1</Value>
|
<MSFT:Value>1</MSFT:Value>
|
||||||
<ValueDescription>Reset password: upon expiry of the grace period, the managed account password will be reset.</ValueDescription>
|
<MSFT:ValueDescription>Reset password: upon expiry of the grace period, the managed account password will be reset.</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>3</Value>
|
<MSFT:Value>3</MSFT:Value>
|
||||||
<ValueDescription>Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will terminated.</ValueDescription>
|
<MSFT:ValueDescription>Reset the password and logoff the managed account: upon expiry of the grace period, the managed account password will be reset and any interactive logon sessions using the managed account will terminated.</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
<Enum>
|
<MSFT:Enum>
|
||||||
<Value>5</Value>
|
<MSFT:Value>5</MSFT:Value>
|
||||||
<ValueDescription>Reset the password and reboot: upon expiry of the grace period, the managed account password will be reset and the managed device will be immediately rebooted.</ValueDescription>
|
<MSFT:ValueDescription>Reset the password and reboot: upon expiry of the grace period, the managed account password will be reset and the managed device will be immediately rebooted.</MSFT:ValueDescription>
|
||||||
</Enum>
|
</MSFT:Enum>
|
||||||
</AllowedValues>
|
</MSFT:AllowedValues>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
</Node>
|
</Node>
|
||||||
@ -594,7 +595,7 @@ If not specified, this setting will default to 3 (Reset the password and logoff
|
|||||||
</Scope>
|
</Scope>
|
||||||
<DFTitle>Actions</DFTitle>
|
<DFTitle>Actions</DFTitle>
|
||||||
<DFType>
|
<DFType>
|
||||||
<DDFName></DDFName>
|
<DDFName />
|
||||||
</DFType>
|
</DFType>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
<Node>
|
<Node>
|
||||||
@ -614,9 +615,8 @@ If not specified, this setting will default to 3 (Reset the password and logoff
|
|||||||
<Dynamic />
|
<Dynamic />
|
||||||
</Scope>
|
</Scope>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
<AsynchronousTracking ResourceSuccessURI="ResetPasswordStatus" ResourceSuccessValues="0" ResourceInProgressValues="10" ResourceFailureValues="20"/>
|
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
<Node>
|
<Node>
|
||||||
@ -638,17 +638,15 @@ If not specified, this setting will default to 3 (Reset the password and logoff
|
|||||||
</Scope>
|
</Scope>
|
||||||
<DFTitle>ResetPasswordStatus</DFTitle>
|
<DFTitle>ResetPasswordStatus</DFTitle>
|
||||||
<DFType>
|
<DFType>
|
||||||
<MIME>text/plain</MIME>
|
<MIME />
|
||||||
</DFType>
|
</DFType>
|
||||||
</DFProperties>
|
</DFProperties>
|
||||||
</Node>
|
</Node>
|
||||||
</Node>
|
</Node>
|
||||||
</Node>
|
</Node>
|
||||||
</MgmtTree>
|
</MgmtTree>
|
||||||
</cspDefinition>
|
|
||||||
</identity>
|
|
||||||
```
|
```
|
||||||
|
|
||||||
## Related articles
|
## Related articles
|
||||||
|
|
||||||
[LAPS configuration service provider](laps-csp.md)
|
[LAPS configuration service provider reference](laps-csp.md)
|
||||||
|
@ -767,10 +767,10 @@ items:
|
|||||||
items:
|
items:
|
||||||
- name: LanguagePackManagement DDF file
|
- name: LanguagePackManagement DDF file
|
||||||
href: language-pack-management-ddf-file.md
|
href: language-pack-management-ddf-file.md
|
||||||
- name: Local Administrator Password Solution
|
- name: LAPS
|
||||||
href: laps-csp.md
|
href: laps-csp.md
|
||||||
items:
|
items:
|
||||||
- name: Local Administrator Password Solution DDF
|
- name: LAPS DDF file
|
||||||
href: laps-ddf-file.md
|
href: laps-ddf-file.md
|
||||||
- name: MultiSIM
|
- name: MultiSIM
|
||||||
href: multisim-csp.md
|
href: multisim-csp.md
|
||||||
|
Loading…
x
Reference in New Issue
Block a user