New Features

• Template based Bulk User Modification: Modify users in bulk with the help of User Modification Templates through CSV import.
• Restore Deleted Contacts: Option to recover the deleted AD contacts.
• Microsoft 365 Management and Reporting:
  • New bulk management operations including Modify Naming Attributes, Delete Groups, Create Security Group and more have been added to efficiently manage your Microsoft 365 environment.
  • Over 25 new Security Reports, including reports on account status and mailbox features, have been added to the Microsoft 365 module.
  • Report from CSV: Generate a comprehensive report on the desired Microsoft 365 users via CSV import.

• You can now modify Exchange 2010/2013/2016 mailbox policies for on-premise mailboxes using the Single User Modification feature.
• User management templates:
  • Flexibility to copy all the settings/configurations and values between User Creation and Modification Templates.
  • Option to validate the Telephone Number attribute by specifying a format in user management templates.
  • A new, dedicated Microsoft 365 tab for configuring Microsoft 365 features in Single User Modification Template.
  • New fields including Storage limits, Exchange Online Policies, and more have been added to the Microsoft 365 tab in Single User Creation Template.
  • User Modification and Creation Rules in templates:
    • Last Name, Full Name, sAMAccountName, Display name, Logon name, Account Status, E-mail and Description fields have been added to the Conditions section and can be used to configure User Modification Rules.
    • sAMAccountName, Display name, Logon name, Account Status and E-mail fields have been added to the Conditions section and can be used to configure User Creation Rules.
    • An E-mail and a Notes field have been added to the Assign Values section of User Modification and Creation Rules, respectively.
    • A Follow_Template_Format value has been added to the E-mail and Logon Name fields under the Assign Values section to standardize the prefix value while leaving only the suffix value (domain name) open to modification.
    • New conditions have been added to Organization, Country and other single-valued attributes for more flexibility in configuring User Creation and Modification Rules in templates.
    • It is now possible to include/exclude child OUs when 'Select Container' is specified in the conditions field.
    • You can now copy the rules between User Creation and Modification Templates.
    • You can now customize the number of rules displayed per page.
• Reports: Options to change filename, include/exclude logo and serial number while exporting reports.
• Workflow:
  • While creating a request, it is now possible to select users by importing a CSV file.
  • You can now create requests to enable users for a specific time period, after which the users will be disabled automatically.
• Automation:
  • Data from external databases can be used as input for automating group management operations as well.
  • Disabling automation will now disable the configured successive tasks as well.
• Integrations:
  • Option to enable/disable and remove/delete Integrations.
  • Option to enable/disable REST APIs.
  • Support for adding multiple MS SQL and Oracle database servers.
  • Integration with Zoho People can only be configured by technicians with super admin privileges.
• MS Authenticator: It is now possible to use MS Authenticator as a Two Factor Authentication service to secure access to ADManager Plus.
• You can now configure a proxy server in Server Settings.
• Option to hide alerts irrespective of whether the recommended security hardening settings are configured or not.
• Notification Templates:
  • You can now include inline images while curating mail content.
  • Ability to control notifications on Automation execution status.

The following issues have been fixed in this release:

• Issue in differentiating users from groups in the 'Accept messages from' column while generating Exchange Reports.
• Help desk technicians not being able to access the dashboard when multiple domains are delegated.
• Issues in adding users to groups via Automation.
• Error in adding users to Microsoft 365 groups when executed as a delayed task.
• Microsoft 365 password reset notifications via email display blank passwords.
• Issues related to Mouse Wheel plugin from cdnjs.cloudflare.com.
• Issue in redirecting to a workflow request via notifications when SAML SSO authentication is configured.
• Issues with group membership modification that causes removal of members have been fixed.

Fixes

• In some cases, the Bulk User Modification's search result page displays "No data available."
• When ADSelfService Plus integration is enabled, the Reset Password request raised from ADSelfService Plus does not reflect as a Workflow request in ADManager Plus.
• Issues in using the Employee Quick Search feature.
• In some cases, duplicate rows appear in Bulk User Modification search result.

New Features

• Microsoft 365 management templates: Create Microsoft 365 groups, Distribution/Security Mail enabled groups and Dynamic distribution groups in single and bulk, with all entitlements easily and quickly, using the new group creation templates.
• New GPO reports: Enhanced reporting on GPOs with the addition of four new reports - GPOs with specific settings, GPO settings, GPOs with Script, and Compare GPO Versions report.
• Netapp and Isilon support: Manage and report on access permissions in NetApp and Isilon storage.
• Integration with ServiceDesk Plus Cloud, Jira and Freshservice: In addition to ServiceNow, Zendesk and ServiceDesk Plus, ADManager Plus now offers out-of-the-box integration with ServiceDesk Plus Cloud, Jira and Freshservice to perform IAM actions like user onboarding and offboarding, enabling, disabling, unlocking and deleting user accounts, and resetting passwords from within the helpdesk console.
• TLS Support: Option to configure TLS protocol with cipher suites, for greater security.
• User logon security: Option to block users or technicians from logging onto ADManager Plus after the specified number of failed logon attempts.
• Support for MSSQL database in the Azure for product database.

• Microsoft 365 management: Microsoft 365 accounts can be configured using Microsoft 365 modern authentication.
• GPO management: Enhanced GPO management with options to configure security settings like Account Policies, Local Policies, Event Log, Restricted Groups, System Services, Registry, and File System for computer objects.
• Option to enable LDAP SSL for only the desired domains.
• Notification profile:
  • Spruced up UI, which displays the technicians names in a pop-up, making it easier to select the desired technicians.
  • Options to add additional attributes like alternate email ID, proxy mail ID, and fax, etc. for email and mobile notification.
• Organization attributes The organization attributes can be imported in bulk from csv files.
• Automation:
  • Integration with external databases will also support configuration of Auto Reply, Disable Lync, Delete Home Folder, Move Home Folder, Manage User Photos and Disable/Delete Mailbox actions.
  • Option to use 'modify users by templates' in Automation Policy as the last task, or any of the instant tasks, other than the first one.
  • For all HRMS based automation tasks, all the records in the database can be processed fully or incrementally depending on the task, every time the automation is executed.
• Workflow: While configuring requestor roles, Choose Template option can be enabled or disabled for help desk technicians.
• Scheduled reports:
  • Search for report schedules from column based search, besides the schedule name search option.
  • Execute the advanced scheduled reports instantly from the Run Now column options.
• Delegation: When configuring help desk roles, customize the Schedule Report, View Archives, and Archive Settings options to be enabled or disabled for the technicians.
• ADManager Plus now uses an updated version of JRE (jre_1_8_0_162) for enhanced security.
• Unique encryption key for each instance of the product.
• Mobile app authorization - Options to customize logon settings to allow or disallow logon from the ADManager Plus Android or iOS applications.
• ADManager Plus now uses an upgraded version of Apache Tomcat (version 8.5.51) for enhanced reliability and security.

The following issues have been fixed in this release:

• Vulnerability issues in JSON .jar files and login password encryption.
• Issues in delegated OUs and group memberships in the Workflow module.
• Issues in scheduled reports listing nested group member values despite checking the 'Exclude nested groups' option while configuring scheduled reports.
• Issues in configuring Microsoft 365 settings for AzureUSGovernment and the Chinese environments.
• Product crashing during the generation of scheduled 'Group for users' report.
• The groups selected and the commands added in the custom scripts section in the 'Add to Groups' task in Automation were not getting saved.
• Issues in disabling the Hide from Exchange address list when modifying a single user.
• Error in accessing Computer modification templates.
• The OUs list for choosing group members during single group modification takes a long time to load.
• Issues in setting a photo for an AD user account through the user modification template.
• Time taken for modifying groups with more than 4000 users had been optimized.
• Unable to get shares from the server when there is a mismatch between the machine name and the DNS name.
• When a helpdesk technician has been delegated two domains, one with only a few OUs and the other being fully delegated, and a group is modified to remove a few group members, all the members of the group are removed.
• Multiple Cross site scripting vulnerabilities reported by Alexander.

Fix

• This release includes fixes to ensure ADManager Plus is immune to unauthenticated remote code execution vulnerability.

Enhancements

• If the OU name provided during creation of bulk AD objects using CSV does not exist, then a new OU of the specified name will be created and the desired AD objects will be created under it.

The following issues have been fixed in this release:

• The selected report window was blank for some customers.
• While modifying users, with CSV, when the value for removeMemberOf attribute is empty, the user modification action failed.
• During computer modification, even if the sAMAccountName was only 15 characters long followed by $ symbol, an error message for exceeding character limit was shown.
• While scheduling custom reports, if the OUs selected during custom report configuration and creation of automation schedule are different, the scheduled custom report will contain results from the OUs chosen during custom report configuration.
• When configuring additional email address during single group modification for mail enabled group, when the additional email address added is already in use for a different mail enabled group, error message failed to show up.

Enhancements:

• Capability to edit all administrative template settings of a GPO, including the custom template settings.
• Capability to add an AD object's manager as an approver and/or reviewer in the business workflow. This will enable managers to have complete control over the creation, modification, and deletion of objects they manage.

New Features:

• Office 365 group creation: Create distribution groups, mail enabled security groups and regular Office 365 groups in bulk using CSV files.

• After generating Office 365 group members report, you can filter the data to view only members of specific groups.
• Option to execute custom script on successful creation and modification of room and equipment mailboxes.
• Supports management of Office 365 tenants configured in independent Azure cloud deployments, including Azure Germany and Azure China.
• While removing NTFS permissions for folders, you can now preview permissions before updating the changes in Active Directory.
• Remove Send As and Send on Behalf permissions in Exchange Online for multiple mailboxes.

  Help desk role:

  • Delegation of NTFS and share permissions modification rights to technicians is now granular and includes options such as include inheritable permissions from this object's parent and more.
  • While assigning permissions to generate reports to the technicians, you can allow or deny the permission to use report scheduler.

  Workflow:

  • Option to resend a failed user or contact creation request or rejected request by the requester for processing it again.
  • Super admin can assign unassigned requests to any specific technician.

The following issues have been fixed in this release:

• Path traversal and DoS attack vulnerabilities.
• Unable to view archived audit reports.
• Unable to update primary email address for mail enabled users and contacts.
• Email notifications are not sent after performing bulk management actions using CSV file.
• Unable to set mailbox delegation properties such as full access rights, send as and send on behalf for Office 365 shared mailboxes.
• Unable to save HTTP Request Headers while configuring custom SMS provider settings.
• Unable to enable hide from Exchange address list in group modification.

Fixes

• Error in exporting reports if the attribute values begin with +, -, =, or @.
• SIP URI field in Skype for Business/Lync Server settings is set as a mandatory field in system template even though it is not mandatory.
• Error while modifying previously configured delete/disable policy.

• File server permissions management: Managing NTFS permissions becomes even simpler and easier with the capability to:
  • Copy the permissions assigned on any shared folder and use it for configuring the permissions on another shared folder.
  • View all the existing permissions on the desired shared folder.
  • View a summary of the permissions that were assigned on any shared folder or file server, after updating or modifying the permissions on them.
  • Preview the new permissions that will be updated on the specified shared folder.

  The permission management window has also been revamped with a more intuitive UI for quicker, and easier management of permissions.

• Exchange Server management:
  
  • For Exchange Server 2010 and later versions, the address book and managed folder mailbox policies can also be assigned to the mailboxes of the user accounts right while creating the user accounts.
  • Enable or disable outlook web access for devices for users' mailboxes, in Exchange Server 2013 and later versions, using the user creation and modification features.
• New options in Delegation:
  • File server permissions management has been added to the delegation module; you can now delegate the rights to manage the permissions of any shared folder or filer server to any user.
  • Track the share or NTFS permission changes of shared folders and file servers with the built-in audit reports. - Export the technician and admin audit reports in CSV, PDF, HTML or Excel format, as needed.
• Specifying a custom naming format for email addresses in the single user modification feature.
• Support for V5 and V6 profile folders management (create, move, and delete).
• In custom naming formats, it is now possible to add random numbers and also remove specific characters.

The following issues have been fixed in this release:

• Help desk audit report returning multiple objects in the search result, even if only a specific object name is mentioned in the search.
• 'Copy user attributes' option not being visible to the requesters.
• Issues affecting the performance of Office 365 inactive users report.
• While modifying objects using CSV, the existing values of attributes in AD are not cleared, even if the CSV file contains empty values for those attributes, and 'clear the attribute's value in AD if its value in CSV is empty' option is also selected.

• Scheduled generation and email delivery of reports is now available for Password Policy, Account Lockout Policy, and Printer Reports also.
• Help desk technician audit report can now be exported to CSV, PDF, XLSX, and HTML formats.
• AD objects (users, groups, etc.) in the member and memberOf attributes will now be displayed in alphabetical order, during management operations.

• In modification templates, issues while applying modification rules when OU is specified in the conditions field.
• Inability to assign templates to workflow requesters by help desk technicians.
• OU selection pop-up taking a long time to load child OUs.
• In help desk technician audit report, passwords of the user accounts created by the technician not being displayed in the 'details' of the action performed.
• Inability to add proxyAddresses as custom attribute during group creation.
• In help desk reset password console, need of an 'all domains' option in the domain search field to list users from all the domains configured.
• In help desk password reset console, the option 'user must change password at next logon' not being a default selection.
• In bulk user modification, error while importing a CSV file with employeeID attribute.