Situation: The client just configures Local Administrator Password Solution (LAPS) on their domain. It works for a while. Now, most domain computers don’t install LAPS and LAPS doesn’t change the administrator password..
Troubleshooting: 1. gpresult /R shows the LAPS policy has been applied to the computer.
Applied Group Policy Objects
—————————–
LAPS GPO
Default Domain Policy
Local Group Policy
2. The Event Viewer shows this Event ID 108
Failed to apply changes to software installation settings. The installation of software deployed through Group Policy for this user has been delayed until the next logon because the changes must be applied before the user logon. The error was : %%1274
Resolution 1: Enable the Specify startup policy processing wait time
- On the Domain Controller, run Group Policy Management
2. Right click on the policy you want to modify, for example LAPS GPO in our example, click on Edit.
3. Navigate to:
Computer Configuration > Policies > Administrative Templates > System > Group Policy.
4. Enable the Specify startup policy processing wait time or Startup policy processing wait time. Set Amount of time to wait (in seconds): = 90 or more for a test.
Resolution 2: Enable Always wait for the network at computer startup and logon
- Repeat resolution 1 step 1 and 2.
- In a GPO that applies to that computer, add the following setting:
- Computer Settings
- Administrative Templates
- System
- Logon
- Always wait for the network at computer startup and logon – Enabled
- Logon
- System
- Administrative Templates
- Computer Settings
3. Check Enabled
Resolution 3: Make sure the computer can access the LAPS software and have permissions. For example, you may assign everyone to access the LAPA shared folder for a test.
Resolution 4: And I just found another different cause of this error. If you have “Spanning Tree” configured on the ethernet switch connected to the problem workstation, it will delay activation of the switch port when the PC boots up. Disabling Spanning Tree for the switch port or enabling “Spanning Tree Portfast” for the switchport solved this problem on a few of my workstations.