I set up two new WS2025 server machines and promoted them as DCs. FFL and DFL = 2025.

I tried to follow up the steps for activating LAPS in Active Directory, but I’m stucked on the first step for extending the AD schema.

When I execute the command Update-LapsADSchema I get the following error:

Update-LapsADSchema : An operation error occurred.
At line:1 char:1
+ Update-LapsADSchema
+ ~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Update-LapsADSchema], DirectoryOperationException
+ FullyQualifiedErrorId : System.DirectoryServices.Protocols.DirectoryOperationException,Microsoft.Windows.LAPS.UpdateLapsADSchema

I run this as domain admin on the domain controller in an administrative powershell console, this account is a member of Schema and Enterprise Admins.

Any help appreciated.

Regards

Uwe

​I set up two new WS2025 server machines and promoted them as DCs. FFL and DFL = 2025.I tried to follow up the steps for activating LAPS in Active Directory, but I’m stucked on the first step for extending the AD schema. When I execute the command Update-LapsADSchema I get the following error:Update-LapsADSchema : An operation error occurred.At line:1 char:1+ Update-LapsADSchema+ ~~~~~~~~~~~~~~~~~~~+ CategoryInfo : NotSpecified: (:) [Update-LapsADSchema], DirectoryOperationException+ FullyQualifiedErrorId : System.DirectoryServices.Protocols.DirectoryOperationException,Microsoft.Windows.LAPS.UpdateLapsADSchema I run this as domain admin on the domain controller in an administrative powershell console, this account is a member of Schema and Enterprise Admins. Any help appreciated. RegardsUwe  Read More

​