[Samba] Future support for ADWS, gMSA, and Windows LAPS in Samba AD

[Ingo Asche]

Hi Philippe.

I can answer point 2 and 3:

gMSA are supported since Samba 4.21.0
https://wiki.samba.org/index.php/Samba_4.21_Features_added/changed#Group_Managed_Service_Accounts

And LAPS is already working, the old one and the new one.

Exception for the new LAPS is the encryption of passwords in AD. The is 
this:
https://lists.samba.org/archive/samba/2023-December/247489.html

I got it running with the new one with this done:
https://lists.samba.org/archive/samba/2023-December/247491.html

Regards
Ingo
https://github.com/WAdama


Philippe OTMANI via samba schrieb am 10.11.2025 um 17:23:
> Hello Samba Team,
>
> I am currently using Samba AD as a domain controller in a mixed 
> environment and I have a few questions regarding planned features.
>
> System details:
> - Samba version: 4.23.3
> - OS: Debian 13
>
> Questions:
> 1. ADWS (Active Directory Web Services) – are there plans to implement 
> support for remote management via PowerShell ?
>
> 2. gMSA (Group Managed Service Accounts) – will Samba AD support gMSA 
> accounts in the near future?
>
> 3. Windows LAPS (Local Administrator Password Solution) – is there any 
> roadmap or intention to support LAPS for local administrator password 
> management?
>
> Any guidance or information about ongoing or planned developments 
> regarding these features would be greatly appreciated.
>
> Thank you for your time and for the continued development of Samba.
>
> Best regards,
> Philippe OTMANI
>
> philippe.otmani at gmail.com
>
>