Hope I am in the right spot to ask this question.
We have install LAPS and it works like a charm. We want to use it to control all local passwords on all workstations and servers in the company. Now, in order to apply the correct permissions, the powershell scripts say to run it against an OU
and it will be inherited on all sub OUs. Now, since we don't know exactly where all the workstations and servers are and don't necessarily want to run the command against all the root OUs, can we apply it at the domain level?
Same goes for user permissions.
I don't have a test domain and I don't want to test something that has potential impact on the entire company, no matter how small the chance.
Thanks in advance.