Windows LAPS: choosing the password backup target by device join state
This sheet compares Entra-only joined, AD-only joined, Hybrid-joined.
| Criterion | Entra-only joined | AD-only joined | Hybrid-joined |
|---|---|---|---|
| Valid backup target | Entra ID only | Active Directory only | Either Entra ID or AD, never both simultaneously |
The verdict, the full comparison, 3 rules and 3 traps are part of SC-100 access. Unlock SC-100.