ADHQ Enterprise Version History

4/23 version 9.0.5.0

ADHQ Enterprise v9.0.5.0 addresses the following issues:

Modify Computers

• Fixed an issue where the Local Password Reset operation would incorrectly warn you that the password field was empty immediately upon loading

Reports

• Fixed an issue where changes made to filters containing dates would not save correctly
• Fixed an issue where not ending the destination path for report or screen output files with a slash could cause an error
• Fixed an issue returning mailbox folder sizes in reports on users with Exchange Online mailboxes
• Fixed an issue where using the To: button to browse for recipients when sending a report via email would not show all users with email addresses

2/23 version 9.0.4.0

ADHQ Enterprise v9.0.4.0 addresses the following issues:

General

• Fixed an issue loading the JSO365 dll when attempting to use Office 365 features in the Enterprise Client.
• Fixed an issue loading the JSPowerShell3 dll when attempting to use Exchange Online features in the Enterprise Client.
• Fixed an issue in the Client and Admin App where server names could appear multiple times when selecting a server to connect to.

2/23 version 9.0.3.2

ADHQ Enterprise v9.0.3.2 adds the following enhancements:

General

• Modified program to exclusively use an app registration to interface with Azure or Microsoft 365
• Removed requirement of using an Office 365 account without multi-factor authentication to configure app registration
• Added option to send emails using an Office 365 Exchange mailbox

Profiles

• Added the ability to show/hide Office 365 report categories
• Added the ability to control use of Office 365 reports

ADHQ Enterprise v9.0.3.2 addresses the following issues:

General

• Fixed an issue in the Share Browser, which prevented users from manually entering a share location
• Fixed several visual issues with the dark theme
• Fixed a crash when using Export to File button to save home screen contents to an XLSX document

Reports

• Fixed a crash when saving reports containing foreign characters in XLSX format

12/22 version 9.0.2.1

ADHQ Enterprise v9.0.2.1 addresses the following issues:

General

• Fixed copy/paste not working properly from tool and report output windows.

365 Reports

• Fixed an issue where reporting on attributes with many values would fail to return the entire set of values.

Add Users

• Fixed an issue where program would incorrectly prompt for smart card login when creating a user account.

Modify Users

• Fixed an issue where modifying a user's 365 license assignement would incorrectly assign multiple licenses to the user.
• Fixed an issue where program would incorrectly prompt for smart card login when resetting a user password.

11/22 version 9.0.1.0

ADHQ Enterprise v9.0.1.0 adds the following enhancements:

General

• Added 3 new report categories that pull information directly from your 365 tenant: 365 User Reports, 365 Group Reports, and 365 Contact Reports
• Converted the program to a 64-bit application
• Added the ability to hide the administrator password for Office 365 settings
• Added the ability to set a different workspace to open by default
• Added the ability to add random characters to templates, with options to include letters, numbers, and special characters
• Added new Office 2019 inspired visual themes
• Added a setup wizard to import settings, reports, collections, tasks, and custom tools from previous major versions
• Added the ability to run an Exchange script with saved credentials
• Added the ability to set options for all ADHQ users globally
• Added the following Common Properties for reporting and filtering:

  User Properties
  Manager Email	The email address of the user's manager.
  Mailbox Type	The type of the user's Exchange mailbox.
  Send As Users	For users with shared mailboxes, this property returns a list of users with the "Send As" permission.
  Full Access Users	For users with shared mailboxes, this property returns a list of users with the "Full Access" permission.
  Litigation Hold Enabled	Does the user have a litigation hold in effect on their Exchange mailbox?
  Litigation Hold Duration	For users with a litigation hold in effect on their mailbox, how long will messages be held?
  Local Archive Enabled	Does the user have an archive enabled on their local Exchange mailbox?
  Cloud Archive Enabled	Does the user have an archive enabled on their cloud Exchange mailbox?
  Group Properties
  Manager Email	The email address of the group's manager.
  Computer Properties
  Manager Email	The email address of the computer's manager.
  Reboot Pending	Does this computer have a reboot pending?
  Server Uptime	How long has it been since this computer was rebooted?
  System Manufacturer	The manufacturer of the system, as returned by Windows Management Instrumentation (WMI).
  System Model	The model of the system, as returned by Windows Management Instrumentation (WMI).

Add/Modify Users

• Added the ability to set account expiration as a number of days instead of a specific date
• Added the ability to enable litigation holds for on-premises Exchange mailboxes
• Added the ability to enable a mail archive for on-premises Exchange mailboxes

Import Users

• Added the ability to update the Manager field with netBIOS or userPrincipalName format in addition to distinguishedName format

Modify Users

• Added the ability to modify drive and path without changing security

Password Output File

• Added the ability to include more fields in the password output file, including EmployeeID
• Added the ability to specify the order of columns in the password output file

Modify Groups

• Added the ability to set "Manager can update membership list" flag without changing the current manager

Collections

• Added the ability to exclude OUs from the collection scope

Reports

• Added the ability to save reports in XLSX format
• Added the ability to exclude OUs from the report scope
• Added the ability to sort by a second column

User Reports

• Added new formatting options for Password Age attribute (value only)
• Added the following folders of new reports:

  Report Location	Description
  User Reports\Exchange Mail\Mailbox Information\Mailbox Features\Litigation Hold	Show which users have active litigation holds on their on-premises Exchange mailboxes.
  User Reports\Exchange Mail\Mailbox Information\Mailbox Features\Archive	Show the users with a mail archive enabled for their cloud-based mailbox.
  User Reports\Exchange Mail\Mailbox Type	Reports showing the Mailbox Type property for users with Exchange mailboxes. Mailbox types include "Shared mailbox", "Room mailbox", "Equipment mailbox" among others.

Computer Reports

• Added the ability to report Server Uptime (time since last reboot)
• Added the ability to report if computer has a pending reboot
• Added the ability to report hardware manufacturer and model
• Added the following folders of new reports:

  Report Location	Description
  Computer Reports\Activity\Reboot Pending	Show the computers with (or without) pending reboots.
  Computer Reports\Hardware	Added a new System Information report to reflect the new System Manufacturer and System Model common properties.

File Security Reports

• Added the ability to exclude folders in report scope

Scheduled Tasks

• Added the ability to backup and restore scheduled tasks
• Added the ability to transfer scheduled tasks from one computer to another

ADHQ Enterprise v9.0.1.0 addresses the following issues:

General

• Fixed an issue where using %password% in a template for another attribute in Modify tools would not resolve correctly
• Added a scroll bar to the Comment field of the Send an Email operation
• Added a warning when saving a collection that includes all objects in the entire domain
• Fixed an issue during install where program would not be able to locate installed Azure PowerShell module
• Fixed an issue creating password files with %time% in the filename
• Fixed an issue where templates whose parameter options contained unexpected characters (%,) would not resolve properly
• Fixed many issues with controls not following the selected visual theme, especially in dark themes

Add/Modify Users

• Disabling the listbox showing Office 365 service plans will no longer take away the ability to scroll the box and read its content

Deprovision Users

• Added the Set Attributes operation to the Deprovision Users tool
• same as below with profile folder
• same as below with remote profile folder
• Fixed an issue where the Home Folder attribute was not cleared if the folder was being removed
• Fixed an issue where the Remote Desktop Home Folder attribute was not cleared if the folder was being removed

Modify Groups

• Fixed an issue where setting mail alias to %Full Name% would result in a blank value

Import Computers

• Fixed an issue where Netbios Name would be set to "$" if the template specified %cn%

Reports

• Fixed an issue where the scroll bar in the Report Preview was improperly sized at different zoom levels
• Fixed an issue where child attributes columns could show incorrect values if Common Properties were mixed with AD attributes ("Member Names" and "member", for example)

User Reports

• Fixed an issue where fine-grained lockout policy was not being considered when reporting on Lockout Time

Group Reports

• Fixed an issue where the Member Count could be incorrect for the Domain Users group in reports that do not contain a Group Members column

OU Reports

• Fixed an issue where the Protect From Deletion property could sometimes return the wrong value

Scheduled Tasks

• Fixed an issue where output files from tools run during scheduled tasks would incorrectly be named "Tool Engine"
• Added a warning when creating a "Run a Tool" action that includes all objects in the entire domain

Custom Tools

• Added support for previously illegal characters in names of custom tools (:?*<>\/|)

4/21 version 8.4.0.2

ADHQ Enterprise v8.4.0.2 addresses the following issues:

General

• Fixed an issue where some Microsoft DLLs were not being properly installed. This would result in a missing DLL error message.

4/21 version 8.4.0.1

ADHQ Enterprise v8.4.0.1 addresses the following issues:

General

• Fixed an issue introduced in version 8.4.0.0 where importing a Unicode file would trigger an out of memory error.

4/21 version 8.4.0.0

ADHQ Enterprise v8.4.0.0 adds the following enhancements:

Reports

• Added the ability to display msDS-UserPasswordExpiryTimeComputed attribute in date format
• Added the ability to display ms-Mcs-AdmPwdExpirationTime attribute in date format

ADHQ Enterprise v8.4.0.0 addresses the following issues:

General

• Fixed an issue where including %time% parameter in output file names could cause DOS error 22

Add/Modify Users

• Fixed an issue where logon hours were being set an hour earlier than specified

Modify Users/Groups

• Improved the behavior for the "Remove from all groups" checkbox in the "Remove from Groups" operation. Objects are now removed from groups individually, so an error removing the object from one group does not prevent it from being removed from others.

Modify Groups

• Fixed an issue removing members from a group when the members belong to a foreign domain.

Reports

• Fixed multiple issues causing group members from foreign domains to fail to appear in reports
• Fixed an issue causing an Access Violation error when filtering on specific attributes, especially in security reports

Scheduled Tasks

• Fixed an issue where %toolname% in the name of output files was resolving to TaskEngine instead of the name of the tool being run

4/20 version 8.3.0.0

ADHQ Enterprise v8.3.0.0 adds the following enhancements:

General

• Added support for creating Exchange 2019 mailboxes, and reporting on Exchange 2019 attributes.

Office 365 Licensing Operations

• Expanded License and Service Plan grids to show more items
• Implemented right-click menu in the Service Plan grid with commands to improve usability, such as: Assign all plans, Unassign all plans, Clear checks, Expand, Collapse, Expand All Licenses, Collapse All Licenses
• Reordered the columns in the License grid to match the titles in the Service Plan grid
• In Add tools, licenses are no longer displayed in the Service plans grid unless they have been assigned in the License grid

Scheduled Tasks

• Implemented the %taskname% parameter for output file names in scheduled tasks

ADHQ Enterprise v8.3.0.0 addresses the following issues:

General

• Fixed an issue causing tools and reports to run slowly when working in multiple domains
• Modified filter processing to improve the performance of reports and tools with complex filters

Import New Users

• Fixed an issue where users could be created with passwords that do not meet organization's complexity requirements
• Fixed an issue where attributes could return the wrong value when used in templates. This occurred when the referenced attribute needed to be modified by adding digits to make it unique. This issue affected templates containing %username%, %name%, %FullName%, %sAMAccountName%, and %userPrincipalName%.

Import User Changes

• Fixed an issue where imported passwords could be ignored if the users were being moved to another location
• Fixed an issue where updating a user's Office 365 licenses would fail for plans containing certain non-alphanumeric characters

Reports

• Fixed an issue where reports saved in Excel format would not be readable when opened using Excel Online.
• Fixed an issue causing reports to crash when attempting to contact unreachable domain controllers in foreign domains, especially when enumerating cross-domain group membership

Scheduled Tasks

• Fixed an issue where changes to the Active Directory schema were causing reports to be created entirely empty, or with only a header line
• Fixed an issue causing scheduled tasks to hang after executing, especially when run against empty import files

9/19 version 8.2.0.0

ADHQ Enterprise v8.2.0.0 adds the following enhancements:

General

• Modified internal storage of program option passwords to meet or exceed industry standards (e.g. password for Exchange 2016)

Import New Users

• Added the ability to ignore objects in import file that already exist based on any unique identifying field(s)

Import New Users / Import User Changes

• Added the ability to set the msExchArchiveGUID attribute
• Added support for importing UTC time attributes like expirationTime in the short time format defined by the operating system

Reports

• Added the ability to report on the msExchArchiveGUID attribute
• Implemented detection of cross-domain group membership in Nested Members and Groups report
• Improved the speed and memory usage for reports containing Exchange attributes

ADHQ Enterprise v8.2.0.0 addresses the following issues:

General

• Fixed an issue that occurred while saving output from tools with slashes or backslashes in their name
• Fixed an issue causing newly created custom tools to not appear until the Home view was refreshed

Import New Users

• Fixed an issue where program was resolving Middle Name from imported Full Name even when data for "Middle Name" was also imported
• Made several changes to improve error handling for issues occuring during Office 365 account creation

User Properties

• Fixed an issue where the Remote Desktop properties for a foreign account could not be viewed from a computer in a trusted domain.
• Fixed an issue causing the "Must change password" property to return the wrong value.

Reports

• Fixed an issue where group members from foreign domains would display as foreign security principles.
• Fixed an issue where ACEs from foreign domains would appear as SIDs rather than being resolved to the name format specified.
• Fixed an issue in GPO Delegation reports where objects were incorrectly reported as having permission to Link GPOs
• Fixed an issue where the Remote Desktop properties for a foreign account could not be viewed from a computer in a trusted domain.
• Fixed an issue causing the "Must change password" property to return the wrong value.

Tool Editor

• Fixed an issue where the options for formatting text were not displaying in Auto-generate templates after typing a colon
• Fixed an issue where disabling the service plans grid in the Office 365 Licenses would incorrectly prevent the grid from showing the plans for the selected licenses

12/18 version 8.1.0.7

ADHQ Enterprise v8.1.0.7 addresses the following issues:

General

• Fixed an issue scanning root and child domains together as part of the same collection or report.

12/18 version 8.1.0.6

ADHQ Enterprise v8.1.0.6 addresses the following issues:

General

• Fixed an issue causing the program name and description to appear incorrectly.
• Fixed a crash relating to invalid scope items defined in reports or tools.
• Fixed an issue causing values stored in combobox controls to unexpectedly reset when editing tools.

Import Users

• Fixed an issue where importing the thumbnailPhoto attribute would fail to set the attribute without giving an error.

Scheduled Tasks

• Fixed an issue where tools that could be run against multiple object types would only allow users to pick from User Collections.
• Fixed a display glitch where the task time would appear one day different from its true scheduled time.
• Fixed an issue causing the Set Import File option to be unavailable sometimes when setting a task scope.

Security Reports

• Fixed reports failing to retrieve security descriptor even when the account has the required access rights.
• Fixed an issue preventing program from resolving SIDs in trusted domains.
• Fixed well-known security groups appearing with incorrect domain name in reports.
• Fixed not being able to select mailboxes from the browser's tree view when configuring report scope.

8/18 version 8.1.0.1

ADHQ Enterprise v8.1.0.1 adds the following enhancements:

General

• Added support for importing UNC path names into the File and Share Scope dialog.
• Added support for manually entering UNC path names into the File and Share Scope dialog.
• Added support for creating Office 365 users with non-complex passwords.
• Added the following Common Properties for security reporting and filtering:

  AD Security Reports
  Common Permissions	This property contains a list of common permissions that can be granted on Active Directory objects. This list is similar to the list that appears on the Security tab (Advanced view) of property sheets from within Active Directory Users and Computers.
  Is High Risk Trustee	Does this ACE apply to many or all users? This property returns TRUE if the Trustee is equal to "Anonymous Logon", "Authenticated Users", "Domain Guests", "Domain Users", "Everyone", "Guests", "IUSR", or "Users".
  Change Password	Does this ACE contain the 'Change Password' right? Users with the Change Password permission are allowed to change the password, if they supply the current one.
  Reset Password	Does this ACE contain the 'Reset Password' permission? Users with the Reset Password permission can change the object's password, without knowing the current one.
  Send As	Does this ACE contain the 'Send As' permission? This permission allows users to send an email as the object.
  Receive As	Does this ACE contain the 'Receive As' permission? This permission allows users to access the object's incoming mail.
  Send To	Does this ACE contain the 'Send To' permission? This permission allows users to send emails to this object.
  Allowed to Authenticate	Does this ACE contain the "Allowed to Authenticate" permission? This permission is used to allow users to authenticate themselves to resources in trusted domains that have selective authentication enabled.
  Add/Remove Self as Member	Does this ACE contain a 'Add/Remove Self as Member' permission? This permission is granted to objects on group ACLs to allow the objects to add themselves to the group's membership list.
  Generate RSOP (logging)	Does this ACE contain a 'Generate RSOP (logging)' permission? This permission is granted on OU objects and allows users to generate Resultant Set of Policy logging reports.
  Generate RSOP (planning)	Does this ACE contain a 'Generate RSOP (planning)' permission? This permission is granted on OU objects and allows users to generate Resultant Set of Policy planning reports.
  Create User	Does this ACE contain a 'Create User' permission?
  Delete User	Does this ACE contain a 'Delete User' permission?
  Create Group	Does this ACE contain a 'Create Group' permission?
  Delete Group	Does this ACE contain a 'Delete Group' permission?
  Create Contact	Does this ACE contain a 'Create Contact' permission?
  Delete Contact	Does this ACE contain a 'Delete Contact' permission?
  Create Computer	Does this ACE contain a 'Create Computer' permission?
  Delete Computer	Does this ACE contain a 'Delete Computer' permission?
  Create OU	Does this ACE contain a 'Create OU' permission?
  Delete OU	Does this ACE contain a 'Delete OU' permission?
  Full Control	Does this ACE contain a 'Full Control' permission?
  File Security Reports
  Common Permissions	This property contains a list of common permissions that can be granted on file system objects. This list is similar to the list that appears on the Security tab (Advanced view) of property sheets from within Windows Explorer.
  Is High Risk Trustee	Does this ACE apply to many or all users? This property returns TRUE if the Trustee is equal to "Anonymous Logon", "Authenticated Users", "Domain Guests", "Domain Users", "Everyone", "Guests", "IUSR", or "Users".
  Full Control	Does this ACE contain a 'Full Control' permission?
  Mailbox Security Reports
  Common Permissions	This property contains a list of common permissions that can be granted on file system objects. This list is similar to the list that appears on the Security tab (Advanced view) of property sheets from within Windows Explorer.
  Is High Risk Trustee	Does this ACE apply to many or all users? This property returns TRUE if the Trustee is equal to "Anonymous Logon", "Authenticated Users", "Domain Guests", "Domain Users", "Everyone", "Guests", "IUSR", or "Users".
  Full Control	Does this ACE contain a 'Full Control' permission?
  Ace Source	Is this ACE inherited from the mailbox database, or explicitly defined on the specific mailbox?
  Printer Security Reports
  Common Permissions	This property contains a list of common permissions that can be granted on printer objects. This list is similar to the list that appears on the Security tab (Advanced view) of property sheets from within the Print Management administrative tool.
  Is High Risk Trustee	Does this ACE apply to many or all users? This property returns TRUE if the Trustee is equal to "Anonymous Logon", "Authenticated Users", "Domain Guests", "Domain Users", "Everyone", "Guests", "IUSR", or "Users".
  Full Control	Does this ACE contain a 'Full Control' permission?
  Manage this Printer	Does this ACE contain a 'Manage this Printer' permission? This permission allows users to perform administrative tasks, such as starting, pausing and stopping the printer, change spooler settings, share the printer, modify permissions and changing properties.
  Manage Documents	Does this ACE contain a 'Manage Documents' permission? This permission allows users to perform administrative tasks relating to documents being printed, such as starting, pausing, resuming, reordering, and cancelling documents.
  Print Permission	Does this ACE contain a 'Print' permission? This permission lets users print documents.

Reports

• Added a new view for when folders are selected in the Report Tree. The descriptions in this view can be read to discover the purpose of built-in reports, or modified to add usage notes for your own folders. Right-click on a folder in the tree and select "Properties" to modify the description text.
• Added over 200 new security reports including: High-Risk Trustees, Unusual Owners, Non-default Security Rights, Auditing Rights, and scores of reports detailing all instances of specific permissions granted on AD objects and file shares throughout your network.
• Added four new contact reports including: Mail-Disabled Contacts, Mail-Enabled Contacts, Managers and their Direct Reports, and Contacts That Are Not Managers.

ADHQ Enterprise v8.1.0.1 addresses the following issues:

General

• Creating scheduled tasks and then running the program as a different user would cause the scheduled tasks to be incorrectly removed.
• Dummy users created in simulation mode were not always being removed.
• Fixed an issue where Search & Replace tool would not correctly find specified objects in AD.

Reports

• Modified the built-in report Printer Shares Owned by SYSTEM to correctly identify all printer shares owned by SYSTEM.
• The child attribute 'Member Of's Group Type' would display as a number rather than 'Security' or 'Distribution'.
• Having the three columns 'Nested Member Of', 'Nested Member Of Count', and 'Member Names' all in the same report in a particular order would cause the 'Nested Member Of' column to report incorrect info.

2/18 version 8.0.1.7

ADHQ Enterprise v8.0.1.7 adds the following enhancements:

Reports

• Improvements to report engine to speed up processing and reduce memory footprint.

Scheduled Tasks

• Added an Import Tasks feature to the Scheduled Tasks right click menu for importing 7.0 scheduled tasks

Admin Console

• Added the ability to configure Office 365 and Exchange 2016 connection settings for all users of a profile.

ADHQ Enterprise v8.0.1.7 addresses the following issues:

Office 365

• Fixed an issue where newly created Office 365 users were always forced to change passwords regardless of the 'Must Change Password' setting
• Fixed an issue where some Office 365 reports would not work correctly when using credentials from a non-"onmicrosoft.com" domain.

Filtering

• Fixed an issue where filters were working incorrectly when matching "Is empty", "Is not empty", "Is unique", or "Is not unique" on child attributes. These filters were incorrectly matching against the value of the parent attribute.

Scheduled Tasks

• Fixed an issue where the tool would crash in the Add a Tool Action wizard if no tool was selected prior to clicking Next on the first wizard page.

Reports

• Fixed an issue causing cells containing child attributes to to display incorrectly if the cell had more than 15 rows of data.
• Modified the Office 365 Inactive Mailboxes report to correctly return users who had never logged on to their mailboxes.

Templates

• Fixed an issue causing imported values to not appear when referenced with template parameters.
• Fixed an issue preventing users from using %password% in templates.
• %DistinguishedName% is now a valid template parameter for Add and Import tools.
• Fixed an issue where additional characters were incorrectly being removed from templates when following a blank parameter.

Admin Console

• Options for Add Digits and Password Generation specified in the profile can no longer be overridden by profile users in the ADHQ Client.
• Fixed an issue where previously-deleted Custom Tools would reappear in the Profile Editor after restarting the Admin Console.

12/17 version 8.0.0.3

ADHQ Enterprise v8.0.0.3 addresses the following issues:

ADHQ Client

• On some machines, saving a report with photos to a PDF file would resize the photos incorrectly.
• Renaming a custom tool in the Custom Tool Editor would fail. The old name would re-appear after restarting the application.
• Using the 'Create Home Folder Share' option in any of the User tools would create the share, but would not reset the user's home folder path to point to the new share.
• In the Advanced Security Settings of the Modify User tool, the 'Account may be delegated' and the 'Do Not Allow Account to be Delegated' options were switched.
• Using the right click menu to copy reports contained in a sub-folder, would cause a copy of the sub-folder to be created in the root of the report tree.

Admin Console

• Renaming a custom tool in the Profile Editor would fail. The old name would re-appear after restarting the console.
• Deleting a custom tool in the Profile Editor would fail. The deleted custom tool would re-appear after restarting the console.

11/17 version 8.0.0.0

ADHQ Enterprise v8.0.0.0 contains the following features:

Active Directory Object Management

• Tools for creating and provisioning AD users, computers, contacts, groups, and OUs
• Tools for modifying AD users, computers, contacts, groups, and OUs
• Tools for importing AD users, computers, contacts, groups, and OUs
• Tools for deleting and deprovisioning AD users, computers, contacts, groups, and OUs
• Tools for moving AD users, computers, contacts, groups, and OUs
• Search and Replace AD object attributes and common properties
• Use any tool on a single object or a selected group of objects
• Use custom or pre-defined filtered collections to define which objects to modify, e.g. users with soon to expire passwords

Reports

• Report on users, groups, computers, contacts, OUs, printers, shares and GPOs
• Over 500 standard reports included
• Create custom reports without scripting
• Complex filtering for targeting the precise information you need
• Export report output to CSV, text, PDF, XLS, or HTML format
• Easily import report data for quickly modifying AD objects

Scheduled Tasks

• Create scheduled tasks to run any tool or report at a later time and date using built-in wizards
• All tools and reports have a Run-Later feature to quickly create a scheduled task rather than running the tool or report immediately
• Tasks may be run daily, weekly, monthly, one-time only, at logon or when the computer starts.
• Tasks can be scheduled to re-occur as often as needed (e.g. every five minutes).

Security

• Report on AD, File & Share, Mailbox, and Printer ACLs and Permissions
• Dozens of standard reports included
• Tools to Search & Replace File, Share, and Active Directory ACLs
• Tools to Analyze & Clean File, Share, and Active Directory ACLs
• Ability to Undo changes made with the Search & Replace or Clean tools

Profile-Based Delegation

• The Admin Console allows ADHQ admins to create and manage profiles.
• Profiles define what tools and reports are accessible to profile members.
• Profiles also limit what portion of AD their members may access.
• Complete customization of the user interface is possible including limiting which tools are available, what operations the tools contain, and default values for specific controls.
• Ability to Undo changes made with the Search & Replace or Clean tools

ADHQ Enterprise v8.0.0.0 adds the following enhancements:

General

• Added a new Undelete tool for restoring deleted objects
• Added a new tool for modifying Office 365 licenses and service plans
• Added ability to open multiple tool windows at the same time. For example, you may now open the properties from two different users at the same time.
• Added auto-update feature to automatically download and install updates
• Added ability to create remote mailboxes in Office 365 hybrid environments
• Added support for Exchange 2016
• Added the following Common Properties for reporting and filtering:

  Logon Hours Properties
  Allow Logon Always	No logon hours have been restricted
  Allow Logon Never	All logon hours have been restricted
  Exchange Version Properties
  Exchange Version	Exchange version in text form
  Exchange Version Year	Exchange version year as an integer
  Account Properties
  When Deleted	The date and time when this object was deleted
  Is Expired	Is the user's account expired?
  Is Password Expired	Is the user's password expired?
  Mail Properties
  Mail Deleted Items Period	How long to keep deleted items in a user's mailbox
  Mail Deleted Items Flag	Do not permanently delete items from a mailbox until it's been backed up
  Mail Enabled	Is user mail-enabled (i.e. they have an external mailbox that mail is forwarded to)?
  Mail Storage Quota	Send a warning message when mailbox exceeds this size
  Mail Over Quota Limit	Disable sending messages when mailbox exceeds this size
  Mail Over Hard Quota Limit	Disable sending and receiving messages when mailbox exceeds this size
  Mail Send Max Size	Maximum outgoing message size
  Mail Receive Max Size	Maximum incoming message size
  Mail Recipient Limit	Maximum number of message recipients
  OWA Enabled	Is OWA (Outlook Web Access) enabled?
  MAPI Enabled	Is MAPI enabled?
  POP3 Enabled	Is POP3 enabled?
  IMAP4 Enabled	Is IMAP4 enabled?
  MAPI Cached Enabled	Is MAPI Cached enabled?
  Mailbox Enabled	Does the user have an Exchange Mailbox?
  Remote Mailbox Enabled	Does the user have a Remote Exchange Mailbox (i.e. manageable via a local Exchange 2016 Management console)?
  Office 365 Properties
  Office 365 Is Licensed	Does the user have an Office 365 license?
  Office 365 Licenses	List of all Office 365 licenses and the user's assigned status
  Office 365 Plans	List of all Office 365 service plans and the user's assigned status
  Office 365 Logon Name	Office 365 logon name
  Office 365 Last Sync Time	Last date and time the Office account was synched to Active Directory via the AD Connector
  Office 365 Mailbox Enabled	Does the user have an Office 365 mailbox?
  Office 365 Object ID	Globally unique Office 365 object ID
  Office 365 Account Blocked	Is the Office 365 account blocked?
  Office 365 Usage Location	Office 365 usage location (i.e. the country the license is being used in)?
  Security Properties
  Is Password Empty	Is the user's password empty?
  MNS Logon Account	An MNS account is required for the operation of cluster nodes for Windows Server 2003 (and newer). This flag should never be set for a user account.
  Inter Domain Trust Account	Account is a special hidden account to facilitate trusts between two domains
  Trusted For Delegation	Is this service account trusted for delegation (i.e. can it temporarily use the identity of a user of the service)?
  Computer Properties
  Read Only Domain Controller	Is computer a read-only domain controller?
  Group Properties
  Nested Groups	a list of only the nested groups contained within a parent group (i.e. not the users)
  Nested Groups Count	the count of only the nested groups contained within a parent group (i.e. not the users)
  GPO Properties
  GPO Comment	Comment for the GPO object

Reports

• Added support for reporting on Exchange 2016 mailboxes.
• Added support for reporting on Office 365 accounts.
• Added a list of Well known Locations to the Report Scope items, including: <My OU>, <My Domain>, <Users OU>, <Deleted Objects OU>, and several more
• Added over 320 new reports including: User With Blank Passwords, Users with Photos, Passwords That Will Never Expire, Users Not Protected From Accidental Deletion, plus dozens of Office 365 reports and scores of Exchange Reports.

Add/Modify/Import User

• Added the ability create a synched Office 365 account when adding or importing a user.
• Added the ability to set the user's Office 365 Usage Location, assign licenses, and enable specific service plans.
• Added the ability to create a remote Exchange mailbox for hybrid Office 365 environments

Scheduled Tasks

• Added optional expiration date and time for scheduled tasks and ability to delete the task after it expires
• Added ability to repeat tasks (e.g. run the task every half hour)

Previous Versions

ADHQ Enterprise v8.0.0.0 was built on the foundation of ADtoolkit version 7. The complete version history for ADtoolkit can be found at:
http://www.javelinasoftware.com/support/ADtoolkitVersionHistory.pdf

Future Versions

Many of the new features we add to our software come directly to us as requests from our users. If you have a feature suggestion for future versions of ADHQ Enterprise, please tell us about it with our Feature Request Form.