• Stars
    star
    143
  • Rank 255,785 (Top 6 %)
  • Language
    JavaScript
  • License
    MIT License
  • Created over 6 years ago
  • Updated over 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

A web site for managing access to local admin passwords managed by Microsoft LAPS

Lithnet LAPS Web App is now Lithnet Access Manager!

Lithnet Access Manager (AMS) is the next generation of Lithnet LAPS web. Lithnet Access Manager provides all the functionality of LAPS web, and more! This guide will explain the key differences between the products, and how to get started on your upgrade journey.

User experience

LAPS web users will feel a sense of familiarity with the Access Manager interface - while we have freshened-up the user interface, the experience is kept similar to LAPS web to minimize the organization change impact of upgrading to AMS. We've added features like showing a phonetic breakdown of the password (great for reading passwords out over the phone) and reading the password aloud using the text-to-speech engine of the browser.

Our products have been first and foremost designed to enhance the experience of support staff in the field, and that experience continues with AMS.

Administration and configuration experience

We've ditched the need for IIS completely, so AMS runs as a standalone service. Along with a single installer executable, this drastically reduces the complexity of the setup and upgrade process.

One of the biggest benefits to LAPS web administrators is that the dreaded config file has now been replaced with an intuitive configuration user interface. All configuration is now done through the configuration tool.

Instead of fighting with XML, you're now able to use the familiar built-in security editor to assign permissions.

We've rebuilt the authorization engine to solve common complaints about LAPS web, such as the computer not being able to be part of multiple targets, or errors that occur when organizational units used in targets are removed from the directory.

You'll find support for new things like smart card authentication, sending audit notifications to Slack and Microsoft Teams, and scripts automatically generated by the application to help you configure things like permission delegation in AD.

We know you'll just love the new features and configuration experience!

Licensing

Access Manager comes in two editions - Standard and Enterprise edition. Standard edition is free for all organizations, while enterprise edition is a paid product.

However, all scenarios supported by LAPS web, continue to be free in the Standard Edition of Access Manager. LAPS web users can upgrade to AMS Standard edition, without any loss of functionality. In fact, the standard edition of AMS brings many new features that were not available in LAPS web, including support for accessing BitLocker recovery keys, and providing just-in-time administrative access to Windows computers.

Enterprise edition offers features that were never available in LAPS web, and includes a dedicated support offering.

See our comparison guide for more information on the differences between the standard and enterprise edition offerings.

Migration

Ready to get started?

  1. First, download the latest edition of Access Manager from the downloads page.
  2. We recommend starting with a new server to install AMS on. Otherwise, you may run into contention over the use of the web server ports between LAPS web and IIS and the new product.
  3. Install and configure the Access Manager Service. You'll need to re-setup some things like the authentication provider, email setup, and UI options.
  4. Finally, you can automatically import all your authorization rules directly from your LAPS web config file, using the import wizard

If you run into any issues, you can log an issue here on GitHub for support

Support for LAPS Web

The Lithnet LAPS Web product is no longer actively supported. The repository and wiki will remain available for historical purposes. If you experience any issues with LAPS web, please migrate to Access Manager, and if the issue is still not solved, then please raise an issue on the Access Manager GitHub page

Organizations that have licensed Access Manager Enterprise edition are eligible for a fixed-term support for LAPS web, while they transition to Access Manager.

More Repositories

1

ad-password-protection

Active Directory password filter featuring breached password checking and custom complexity rules
C#
485
star
2

access-manager

Access Manager provides web-based access to local admin (LAPS) passwords, BitLocker recovery keys, and just-in-time administrative access to Windows computers in a modern, secure, and user-friendly way.
C#
209
star
3

idle-logoff

A group-policy enabled utility for logging off idle windows user sessions
C#
100
star
4

miis-powershell

Lithnet PowerShell Module for FIM/MIM Synchronization Service
C#
40
star
5

resourcemanagement-powershell

Lithnet FIM/MIM Service PowerShell Module
C#
38
star
6

miis-autosync

Lithnet AutoSync for Microsoft Identity Manager
C#
30
star
7

resourcemanagement-webservice

Lithnet FIM/MIM Service REST API
C#
20
star
8

moveuser

Tool to change the owner of a Windows profile from one user to another
C#
19
star
9

resourcemanagement-client

Lithnet FIM/MIM Service .NET Client Library
C#
18
star
10

googleapps-managementagent

Google Workspace Management Agent for MIM 2016
C#
12
star
11

pan-ra-proxy

A windows service that recieves RADIUS accounting requests, and submits them as User-ID updates to a Palo Alto firewall
C#
10
star
12

ad-password-protection-lists

Banned word lists for use with Lithnet Password Protection for Active Directory
9
star
13

resourcemanagement-ui-assistedpasswordreset

Administrator-assisted pasword reset module for FIM 2010 and MIM 2016
C#
6
star
14

acma

Codeless business rules engine for FIM/MIM
C#
6
star
15

mms-utilities

Utilities for the FIM/MIM Microsoft.MetadirectoryServices library
C#
6
star
16

umare

Codeless data transform engine for FIM/MIM
C#
5
star
17

windows-credential-provider

A library for creating secure Windows Credential Providers in .NET
C#
4
star
18

miis-client

Lithnet FIM/MIM Synchronization Service Client
C#
3
star
19

okta-managementagent

Okta management agent for Microsoft Identity Manager
C#
3
star
20

ad-passwordchange-web

JavaScript
3
star
21

transform-engine

Lithnet Transform Engine
C#
2
star
22

teams-managementagent

C#
2
star
23

ssh-managementagent

Lithnet FIM/MIM Linux/Unix SSH Management Agent
C#
2
star
24

resourcemanagement-ui-userverification

User verification module for FIM2010/MIM2016
C#
2
star
25

security

Lithnet Security Library
C#
1
star
26

identitymanager-poshbot

PowerShell
1
star
27

eventlogmessages

C
1
star
28

ecma2-framework

A framework for creating high performance multi-threaded management agents for Microsoft Identity Manager
C#
1
star
29

googleapps-client

Google Apps Admin SDK .NET client
C#
1
star