Requested LAPS Accounts are not being created
If you are facing the issue that requested LAPS Supporter Accounts are not created and the RJ Portal Device Page seems stuck on the "Requested..." message, you need to make sure all previously on-demand LAPS accounts on the device are no longer used and logged off.
If a Support Admin is requested, the RJ Agent creates the local ADM account on the device with the configuration provided within the tenant. The account has a lifetime, after the lifetime, it will be deleted. As long as the account exists, and it can not be removed, and a new Support Account can not be created.
The problem is, that without elevated rights, you cannot see any other logged on sessions, so if you cannot find any open windows like cmd or PowerShell, a reboot will always fix the issue.
This specific case can easily be identified in the logs written by the RealmJoin service. Those logs can be found in C:\WINDOWS\Logs\realmjoin*.log
In this case the previously created account ADM-2F842BB7 is still loaded, meaning there are open sessions left. So there a still processes running under this account.
Some time later, the account is no longer in use, and RealmJoin has successfully deleted the account
Again, some time later a new LAPS supporter account has been created
Last updated
Was this helpful?