Step-by-Step Guide: How to Configure Microsoft Local Administrator Password Solution (LAPS)

Nice article! Just two additions...

As we had the problem and according to my research multiple others as well, if you don't have the LAPS options in your GPO Administrative Templates:

The MSI installs the template and language files locally, you might want to copy them to SYSVOL

Example:

C:\Windows\PolicyDefinitions\AdmPwd.admx

to

\\yourdomain.fqdn\SYSVOL\YOURDOMAIN.FQDN\Policies\PolicyDefinitions\

And

C:\Windows\PolicyDefinitions\en-US\AdmPwd.adml

to

\\yourdomain.fqdn\SYSVOL\YOURDOMAIN.FQDN\Policies\PolicyDefinitions\en-US\

To be able to trigger a reset / change the expiration time it is necessary to set the permissions with the Set-AdmPwdResetPasswordPermission Cmdlet:

Set-AdmPwdResetPasswordPermission​ -Identity "RAServers" -AllowedPrincipals "ITAdmins"