From cdb6655e4a0d359424046e1568becd761c3859b0 Mon Sep 17 00:00:00 2001
From: cproudlock <cproudlock@localhost>
Date: Thu, 14 May 2026 19:47:46 -0400
Subject: [PATCH] imaging: drop LAPS deep-link, keep only category

LAPS retrieval blade is keyed on AAD object id, not aadDeviceId /
mdmDeviceId. We capture aadDeviceId from dsregcmd; resolving to
objectId would require a Graph API call with Device.Read.All which
we don't have at WJ. Removed the LAPS button - operator goes to
Intune portal manually for LAPS as before.

set-category button stays - aadDeviceId works for that blade.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 webapp/templates/imaging.html | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/webapp/templates/imaging.html b/webapp/templates/imaging.html
index 7584912..9162af1 100644
--- a/webapp/templates/imaging.html
+++ b/webapp/templates/imaging.html
@@ -52,10 +52,6 @@
                style="font-size:0.7rem; line-height:1;"
                target="_blank" rel="noopener"
                href="https://portal.azure.us/?feature.msaljs=false#view/Microsoft_Intune_Devices/DeviceSettingsMenuBlade/~/properties/aadDeviceId/{{ s.intune_device_id }}">set category</a>
-            <a class="btn btn-sm btn-outline-primary py-0 px-1 ms-1"
-               style="font-size:0.7rem; line-height:1;"
-               target="_blank" rel="noopener"
-               href="https://intune.microsoft.us/#view/Microsoft_Intune_Devices/DeviceSettingsMenuBlade/~/localAdminPassword/mdmDeviceId/{{ s.intune_device_id }}">LAPS</a>
           </div>{% endif %}
         </div>
       </div>