I'm testing Windows LAPS on one test OU with one computer in it. Everything is working as expected, except I'm the only user that is able to view the LAPS managed password.
If I run the below, where $cred is one of those other users (testuser1), it works fine. So I don't think it's decryption rights. The other users are in the same LAPS Decryption group as me (configured by GPO).
Get-LapsADPassword testcomp -DecryptionCredential $cred
ComputerName : testcomp
DistinguishedName : Redacted
Account : Redacted
Password : Redacted
PasswordUpdateTime : 12/26/2023 10:11:45 AM
ExpirationTimestamp : 1/2/2024 10:11:45 AM
Source