Share via

Operation error when executing Set-LapsADComputerSelfPermission -Identity OU=Teste -Verbose

Anonymous
2025-02-24T14:24:45+00:00

I'm setting up Windows LAPS on my network. I'm using a Windows Server 2019 server and a Windows 11 terminal, both with the necessary updates.

After running the “update-LapsADSchema” command, the process was successful.

When executing the “Set-LapsADComputerSelfPermission -Identity OU=Test -Verbose” command, the system displayed an error message.

DETAILED MODE: Searching for specific OU by DN

DETAILED MODE: Original identity: OU=LAPSLindal

DETAILED MODE: Escaped identity: OU=LAPSLindal

Set-LapsADComputerSelfPermission : Operation error.

No line:1 character:1

  • Set-LapsADComputerSelfPermission -Identity OU=LAPSLindal -Verbose 
  • 
    + CategoryInfo : NotSpecified: (:) [Set-LapsADComputerSelfPermission], DirectoryOperationException 

    + FullyQualifiedErrorId : System.DirectoryServices.Protocols.DirectoryOperationException,Microsoft.Windows.LAPS.SetLapsADComputerSelfPermission
Windows Server Identity and access Active Directory

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2025-02-25T09:23:32+00:00

    Hello Diggroc,

    Thank you for posting in Microsoft Community forum.

    You can try the command below (change the OUName to the actual OU name in your case):

    Set-LapsADComputerSelfPermission -Identity OUName

    Reference:

    Get started with Windows LAPS and Windows Server Active Directory | Microsoft Learn

    I hope the information above is helpful.

    If you have any question or concern, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    0 comments