ADHQ Professional Version History

4/23 version 9.0.5.0

ADHQ Professional v9.0.5.0 addresses the following issues:

Modify Computers

• Fixed an issue where the Local Password Reset operation would incorrectly warn you that the password field was empty immediately upon loading

Reports

• Fixed an issue where changes made to filters containing dates would not save correctly
• Fixed an issue where not ending the destination path for report or screen output files with a slash could cause an error
• Fixed an issue returning mailbox folder sizes in reports on users with Exchange Online mailboxes
• Fixed an issue where using the To: button to browse for recipients when sending a report via email would not show all users with email addresses

2/23 version 9.0.3.2

ADHQ Professional v9.0.3.2 adds the following enhancements:

General

• Modified program to exclusively use an app registration to interface with Azure or Microsoft 365
• Removed requirement of using an Office 365 account without multi-factor authentication to configure app registration
• Added option to send emails using an Office 365 Exchange mailbox

ADHQ Professional v9.0.3.2 addresses the following issues:

General

• Fixed an issue in the Share Browser, which prevented users from manually entering a share location
• Fixed several visual issues with the dark theme
• Fixed a crash when using Export to File button to save home screen contents to an XLSX document

Reports

• Fixed a crash when saving reports containing foreign characters in XLSX format

12/22 version 9.0.2.1

ADHQ Professional v9.0.2.1 addresses the following issues:

General

• Fixed copy/paste not working properly from tool and report output windows.

365 Reports

• Fixed an issue where reporting on attributes with many values would fail to return the entire set of values.

Add Users

• Fixed an issue where program would incorrectly prompt for smart card login when creating a user account.

Modify Users

• Fixed an issue where modifying a user's 365 license assignement would incorrectly assign multiple licenses to the user.
• Fixed an issue where program would incorrectly prompt for smart card login when resetting a user password.

11/22 version 9.0.1.0

ADHQ Professional v9.0.1.0 adds the following enhancements:

General

• Added 3 new report categories that pull information directly from your 365 tenant: 365 User Reports, 365 Group Reports, and 365 Contact Reports
• Converted the program to a 64-bit application
• Added the ability to hide the administrator password for Office 365 settings
• Added the ability to set a different workspace to open by default
• Added the ability to add random characters to templates, with options to include letters, numbers, and special characters
• Added new Office 2019 inspired visual themes
• Added a setup wizard to import settings, reports, collections, tasks, and custom tools from previous major versions
• Added the ability to run an Exchange script with saved credentials
• Added the following Common Properties for reporting and filtering:

  User Properties
  Manager Email	The email address of the user's manager.
  Mailbox Type	The type of the user's Exchange mailbox.
  Send As Users	For users with shared mailboxes, this property returns a list of users with the "Send As" permission.
  Full Access Users	For users with shared mailboxes, this property returns a list of users with the "Full Access" permission.
  Litigation Hold Enabled	Does the user have a litigation hold in effect on their Exchange mailbox?
  Litigation Hold Duration	For users with a litigation hold in effect on their mailbox, how long will messages be held?
  Local Archive Enabled	Does the user have an archive enabled on their local Exchange mailbox?
  Cloud Archive Enabled	Does the user have an archive enabled on their cloud Exchange mailbox?
  Group Properties
  Manager Email	The email address of the group's manager.
  Computer Properties
  Manager Email	The email address of the computer's manager.
  Reboot Pending	Does this computer have a reboot pending?
  Server Uptime	How long has it been since this computer was rebooted?
  System Manufacturer	The manufacturer of the system, as returned by Windows Management Instrumentation (WMI).
  System Model	The model of the system, as returned by Windows Management Instrumentation (WMI).
  Contact Properties
  Manager Email	The email address of the contact's manager.
  365 User Properties
  AboutMe	A short description of the user.
  AccountEnabled	Is this user allowed to log on to 365?
  AgeGroup	Is this user a minor?
  AssignedLicenses	A multi-valued list of licenses assigned to the user.
  AssignedPlans	A multi-valued list of service plans assigned to the user.
  EnabledPlans	A multi-valued list of the user's service plans in the Enabled state.
  WarningPlans	A multi-valued list of the user's service plans in the Warning state.
  SuspendedPlans	A multi-valued list of the user's service plans in the Suspended state.
  DeletedPlans	A multi-valued list of the user's service plans in the Deleted state.
  LockedOutPlans	A multi-valued list of the user's service plans in the Locked Out state.
  Authentication	A multi-valued list of the user's authentication methods.
  Birthday
  BusinessPhones
  City
  CompanyName
  ConsentProvidedForMinor	Has consent been obtained for this minor account?
  Country
  CreatedDateTime
  CreationType	How was the account created? Possible values: <null>, Invitation, LocalAccount, EmailVerified, SelfServiceSignUp
  DeletedDateTime
  Department
  DeviceEnrollmentLimit	The limit on the number of devices the user is permitted to enroll.
  DirectReports	A list of users with this user as their manager.
  DisplayName
  EmployeeHireDate
  EmployeeId
  EmployeeType
  ExternalUserState	Has this external user accepted their invitation to the tenant? Possible values: <null>, PendingAcceptance, Accepted
  ExternalUserStateChangeDateTime	When was the ExternalUserState property last modified?
  FaxNumber
  FirstName	An alias for GivenName
  GivenName
  HireDate
  Id
  ImAddresses	The instant message VOIP SIP addresses for the user.
  Interests	A multi-valued list of the user's interests.
  JobTitle
  LastName	An alias for Surname
  LastPasswordChangeDateTime
  LegalAgeGroupClassification	Calculated based on ageGroup and consentProvidedForMinor properties. Possible values: <null>, MinorWithoutParentalConsent, MinorWithParentalConsent, MinorNoParentalConsentRequired, NotAdult, and Adult.
  Mail	A list of SMTP addresses for the user.
  MailNickname	The mail alias for the user.
  Manager
  MemberOf
  MobilePhone
  MySite	A URL for the user's personal website.
  OfficeLocation
  OnPremisesDistinguishedName
  OnPremisesDomainName
  OnPremisesImmutableId
  OnPremisesLastSyncDateTime
  OnPremisesProvisioningErrors
  OnPremisesSamAccountName
  OnPremisesSecurityIdentifier
  OnPremisesSyncEnabled
  OnPremisesUserPrincipalName
  OtherMails	A list of additional email addresses for the user.
  PasswordPolicies	A list of password policies for the user. Possible values: DisableStrongPassword, DisablePasswordExpiration.
  PasswordProfile.ForceChangePasswordNextSignIn
  PasswordProfile.ForceChangePasswordNextSignInWithMfa
  PastProjects	A list of of the user's past projects.
  PostalCode	The postal code or zip code for the user.
  PreferredDataLocation	The preferred storage location for Sharepoint and OneDrive data.
  PreferredLanguage
  ProvisionedPlans	The service plans that are provisioned to the user.
  ProxyAddresses	A list of addresses for the user. Changes to the mail property will also update this property.
  Responsibilities	A list of the user's responsibilities.
  Schools	A list of schools the user has attended.
  ShowInAddressList
  SignInSessionsValidFromDateTime
  Skills	A list of the user's skills.
  State
  StreetAddress
  Surname
  UsageLocation	A two letter country code required for users that will be assigned licenses.
  UserPrincipalName
  UserType	The type of user account. Possible values: Member or Guest.
  365 Group Properties
  AllowExternalSenders	Can people external to the organization send messages to the group?
  AssignedLicenses	A list of licenses assigned to the group.
  AutoSubscribeNewMembers	Will new group members be auto-subscribed to receive email notifications?
  Classification	A classification for the group such as low, medium, or high business impact.
  CreatedDateTime	When was the group created?
  Description
  DisplayName
  ExpirationDateTime	When will the group expire?
  GroupTypes	A collection of types for the group. Possible values include <null>, Unified, and DynamicMembership.
  HasMembersWithLicenseErrors	Are there group members with license errors from the group-based license assignment?
  HideFromAddressLists	Is the group displayed in the Address Book and Browser within Outlook?
  HideFromOutlookClients	Is the group hidden in Outlook clients, such as Outlook for Windows?
  Id	A unique identifier for the group.
  IsArchived	Is the team this group is associated with read-only?
  IsAssignableToRole	Can this group be assigned to an Azure AD role?
  Mail	The SMTP address for the group.
  MailEnabled
  MailNickname	The mail alias for the group.
  Member	A list of the members of the group.
  MemberOf	A list of the groups to which this group belongs.
  MembershipRule	For dynamic groups, the rule that determines group membership.
  MembershipRuleProcessingState	Indicates whether the dynamic membership processing is on or paused. Possible values are On, and Paused.
  OnPremisesDomainName
  OnPremisesLastSyncDateTime
  OnPremisesNetBiosName
  OnPremisesProvisioningErrors
  OnPremisesSamAccountName
  OnPremisesSecurityIdentifier
  OnPremisesSyncEnabled
  PreferredDataLocation	The preferred storage location for Sharepoint and OneDrive data.
  PreferredLanguage
  ProxyAddresses	A list of email addresses for the group.
  RenewedDateTime
  SecurityEnabled	Is this a security group?
  SecurityIdentifier
  Theme	The Microsoft 365 group's color theme.
  Visibility	The group's join and visibility policies. Possible values include Private, Public, and HiddenMembership.
  365 Contact Properties
  City
  CompanyName
  Country
  DeletedDateTime
  Department
  DirectReports
  DisplayName
  GivenName	The contact's first name.
  Id	A unique identifier for the contact.
  JobTitle
  Mail
  MailNickname	The contact's email alias.
  Manager
  MemberOf	A list of the groups this contact is a member of.
  OnPremisesLastSyncDateTime	Date and time this contact was last synchronized from on-premises AD.
  OnPremisesProvisioningErrors	A list of any provisioning errors for the contact.
  OnPremisesSyncEnabled
  Phones	A multi-valued list of phone numbers for the contact.
  PostalCode
  ProxyAddresses	A list of email addresses for the contact.
  State
  StreetAddress
  Surname	The contact's last name.

Add/Modify Users

• Added the ability to set account expiration as a number of days instead of a specific date
• Added the ability to enable litigation holds for on-premises Exchange mailboxes
• Added the ability to enable a mail archive for on-premises Exchange mailboxes

Import Users

• Added the ability to update the Manager field with netBIOS or userPrincipalName format in addition to distinguishedName format

Modify Users

• Added the ability to modify drive and path without changing security

Password Output File

• Added the ability to include more fields in the password output file, including EmployeeID
• Added the ability to specify the order of columns in the password output file

Modify Groups

• Added the ability to set "Manager can update membership list" flag without changing the current manager

Collections

• Added the ability to exclude OUs from the collection scope

Reports

• Added the ability to save reports in XLSX format
• Added the ability to exclude OUs from the report scope
• Added the ability to sort by a second column

User Reports

• Added new formatting options for Password Age attribute (value only)
• Added the following folders of new reports:

  Report Location	Description
  User Reports\Exchange Mail\Mailbox Information\Mailbox Features\Litigation Hold	Show which users have active litigation holds on their on-premises Exchange mailboxes.
  User Reports\Exchange Mail\Mailbox Information\Mailbox Features\Archive	Show the users with a mail archive enabled for their cloud-based mailbox.
  User Reports\Exchange Mail\Mailbox Type	Reports showing the Mailbox Type property for users with Exchange mailboxes. Mailbox types include "Shared mailbox", "Room mailbox", "Equipment mailbox" among others.

Computer Reports

• Added the ability to report Server Uptime (time since last reboot)
• Added the ability to report if computer has a pending reboot
• Added the ability to report hardware manufacturer and model
• Added the following folders of new reports:

  Report Location	Description
  Computer Reports\Activity\Reboot Pending	Show the computers with (or without) pending reboots.
  Computer Reports\Hardware	Added a new System Information report to reflect the new System Manufacturer and System Model common properties.

File Security Reports

• Added the ability to exclude folders in report scope

365 User Reports

• Added the following folders of new reports:

  Report Location	Description
  365 User Reports\Authentication	Shows the authentication methods that have been configured for your 365 users.
  365 User Reports\Authentication\Authentication Methods	Shows the users with specific authentication methods enabled.
  365 User Reports\Authentication\Authentication Strength	Shows the users that have been configured to use Strong or Weak authentication methods for MFA.
  365 User Reports\Group Membership	Shows the group membership for your 365 users.
  365 User Reports\Licensing	Shows the software licenses that have been assigned to your 365 users.
  365 User Reports\Licensing\Service Plans	Shows the service plans that have been assigned to your 365 users.
  365 User Reports\Licensing\Service Plans\Specific Plans	Shows your 365 users that have (or do not have) specific service plans (Office, Teams, Exchange, etc).
  365 User Reports\Managers	Shows the Managers and Direct Reports for your 365 users.
  365 User Reports\Password Info	Shows password policy information for your 365 users.
  365 User Reports\Password Info\Must Change Password	Shows your 365 users that require a password change.
  365 User Reports\Password Info\Password Expiration	Shows your 365 users with their password expiration policy.
  365 User Reports\Password Info\Strong Password Required	Shows your 365 users that are required to have strong passwords.
  365 User Reports\Sign-In Status	Shows your 365 users that are allowed or prohibited from signing in to 365.

365 Group Reports

• Added the following folders of new reports:

  Report Location	Description
  365 Group Reports\Group Members	Shows the members of your 365 groups, as well as groups with no members.
  365 Group Reports\Group Membership	Shows the group membership for your 365 groups.
  365 Group Reports\Group Types	Shows your 365 groups by type (Distribution, Security, 365 Groups, Mail-Enabled Security, etc).

365 Contact Reports

• Added the following folders of new reports:

  Report Location	Description
  365 Contact Reports\Group Membership	Shows the group membership for your 365 contacts.
  365 Contact Reports\Managers	Shows the Managers and Direct Reports for your 365 contacts.

Scheduled Tasks

• Added the ability to backup and restore scheduled tasks
• Added the ability to transfer scheduled tasks from one computer to another

ADHQ Professional v9.0.1.0 addresses the following issues:

General

• Fixed an issue where using %password% in a template for another attribute in Modify tools would not resolve correctly
• Added a scroll bar to the Comment field of the Send an Email operation
• Added a warning when saving a collection that includes all objects in the entire domain
• Fixed an issue during install where program would not be able to locate installed Azure PowerShell module
• Fixed an issue creating password files with %time% in the filename
• Fixed an issue where templates whose parameter options contained unexpected characters (%,) would not resolve properly
• Fixed many issues with controls not following the selected visual theme, especially in dark themes

Add/Modify Users

• Disabling the listbox showing Office 365 service plans will no longer take away the ability to scroll the box and read its content

Deprovision Users

• Added the Set Attributes operation to the Deprovision Users tool
• same as below with profile folder
• same as below with remote profile folder
• Fixed an issue where the Home Folder attribute was not cleared if the folder was being removed
• Fixed an issue where the Remote Desktop Home Folder attribute was not cleared if the folder was being removed

Modify Groups

• Fixed an issue where setting mail alias to %Full Name% would result in a blank value

Import Computers

• Fixed an issue where Netbios Name would be set to "$" if the template specified %cn%

Reports

• Fixed an issue where the scroll bar in the Report Preview was improperly sized at different zoom levels
• Fixed an issue where child attributes columns could show incorrect values if Common Properties were mixed with AD attributes ("Member Names" and "member", for example)

User Reports

• Fixed an issue where fine-grained lockout policy was not being considered when reporting on Lockout Time

Group Reports

• Fixed an issue where the Member Count could be incorrect for the Domain Users group in reports that do not contain a Group Members column

OU Reports

• Fixed an issue where the Protect From Deletion property could sometimes return the wrong value

Scheduled Tasks

• Fixed an issue where output files from tools run during scheduled tasks would incorrectly be named "Tool Engine"
• Added a warning when creating a "Run a Tool" action that includes all objects in the entire domain

Custom Tools

• Added support for previously illegal characters in names of custom tools (:?*<>\/|)

4/21 version 8.4.0.1

ADHQ Professional v8.4.0.1 addresses the following issues:

General

• Fixed an issue introduced in version 8.4.0.0 where importing a Unicode file would trigger an out of memory error.

4/21 version 8.4.0.0

ADHQ Professional v8.4.0.0 adds the following enhancements:

Reports

• Added the ability to display msDS-UserPasswordExpiryTimeComputed attribute in date format
• Added the ability to display ms-Mcs-AdmPwdExpirationTime attribute in date format

ADHQ Professional v8.4.0.0 addresses the following issues:

General

• Fixed an issue where including %time% parameter in output file names could cause DOS error 22

Add/Modify Users

• Fixed an issue where logon hours were being set an hour earlier than specified

Modify Users/Groups

• Improved the behavior for the "Remove from all groups" checkbox in the "Remove from Groups" operation. Objects are now removed from groups individually, so an error removing the object from one group does not prevent it from being removed from others.

Modify Groups

• Fixed an issue removing members from a group when the members belong to a foreign domain.

Reports

• Fixed multiple issues causing group members from foreign domains to fail to appear in reports
• Fixed an issue causing an Access Violation error when filtering on specific attributes, especially in security reports

Scheduled Tasks

• Fixed an issue where %toolname% in the name of output files was resolving to TaskEngine instead of the name of the tool being run

4/20 version 8.3.0.0

ADHQ Professional v8.3.0.0 adds the following enhancements:

General

• Added support for creating Exchange 2019 mailboxes, and reporting on Exchange 2019 attributes.

Office 365 Licensing Operations

• Expanded License and Service Plan grids to show more items
• Implemented right-click menu in the Service Plan grid with commands to improve usability, such as: Assign all plans, Unassign all plans, Clear checks, Expand, Collapse, Expand All Licenses, Collapse All Licenses
• Reordered the columns in the License grid to match the titles in the Service Plan grid
• In Add tools, licenses are no longer displayed in the Service plans grid unless they have been assigned in the License grid

Scheduled Tasks

• Implemented the %taskname% parameter for output file names in scheduled tasks

ADHQ Professional v8.3.0.0 addresses the following issues:

General

• Fixed an issue causing tools and reports to run slowly when working in multiple domains
• Modified filter processing to improve the performance of reports and tools with complex filters

Import New Users

• Fixed an issue where users could be created with passwords that do not meet organization's complexity requirements
• Fixed an issue where attributes could return the wrong value when used in templates. This occurred when the referenced attribute needed to be modified by adding digits to make it unique. This issue affected templates containing %username%, %name%, %FullName%, %sAMAccountName%, and %userPrincipalName%.

Import User Changes

• Fixed an issue where imported passwords could be ignored if the users were being moved to another location
• Fixed an issue where updating a user's Office 365 licenses would fail for plans containing certain non-alphanumeric characters

Reports

• Fixed an issue where reports saved in Excel format would not be readable when opened using Excel Online.
• Fixed an issue causing reports to crash when attempting to contact unreachable domain controllers in foreign domains, especially when enumerating cross-domain group membership

Scheduled Tasks

• Fixed an issue where changes to the Active Directory schema were causing reports to be created entirely empty, or with only a header line
• Fixed an issue causing scheduled tasks to hang after executing, especially when run against empty import files

9/19 version 8.2.0.0

ADHQ Professional v8.2.0.0 adds the following enhancements:

General

• Modified internal storage of program option passwords to meet or exceed industry standards (e.g. password for Exchange 2016)

Import New Users

• Added the ability to ignore objects in import file that already exist based on any unique identifying field(s)

Import New Users / Import User Changes

• Added the ability to set the msExchArchiveGUID attribute
• Added support for importing UTC time attributes like expirationTime in the short time format defined by the operating system

Reports

• Added the ability to report on the msExchArchiveGUID attribute
• Implemented detection of cross-domain group membership in Nested Members and Groups report
• Improved the speed and memory usage for reports containing Exchange attributes

ADHQ Professional v8.2.0.0 addresses the following issues:

General

• Fixed an issue that occurred while saving output from tools with slashes or backslashes in their name
• Fixed an issue causing newly created custom tools to not appear until the Home view was refreshed

Import New Users

• Fixed an issue where program was resolving Middle Name from imported Full Name even when data for "Middle Name" was also imported
• Made several changes to improve error handling for issues occuring during Office 365 account creation

User Properties

• Fixed an issue where the Remote Desktop properties for a foreign account could not be viewed from a computer in a trusted domain.
• Fixed an issue causing the "Must change password" property to return the wrong value.

Reports

• Fixed an issue where group members from foreign domains would display as foreign security principles.
• Fixed an issue where ACEs from foreign domains would appear as SIDs rather than being resolved to the name format specified.
• Fixed an issue in GPO Delegation reports where objects were incorrectly reported as having permission to Link GPOs
• Fixed an issue where the Remote Desktop properties for a foreign account could not be viewed from a computer in a trusted domain.
• Fixed an issue causing the "Must change password" property to return the wrong value.

Tool Editor

• Fixed an issue where the options for formatting text were not displaying in Auto-generate templates after typing a colon
• Fixed an issue where disabling the service plans grid in the Office 365 Licenses would incorrectly prevent the grid from showing the plans for the selected licenses

12/18 version 8.1.0.7

ADHQ Professional v8.1.0.7 addresses the following issues:

General

• Fixed an issue scanning root and child domains together as part of the same collection or report.

12/18 version 8.1.0.6

ADHQ Professional v8.1.0.6 addresses the following issues:

General

• Fixed an issue causing the program name and description to appear incorrectly.
• Fixed a crash relating to invalid scope items defined in reports or tools.
• Fixed an issue causing values stored in combobox controls to unexpectedly reset when editing tools.

Import Users

• Fixed an issue where importing the thumbnailPhoto attribute would fail to set the attribute without giving an error.

Scheduled Tasks

• Fixed an issue where tools that could be run against multiple object types would only allow users to pick from User Collections.
• Fixed a display glitch where the task time would appear one day different from its true scheduled time.
• Fixed an issue causing the Set Import File option to be unavailable sometimes when setting a task scope.

Security Reports

• Fixed reports failing to retrieve security descriptor even when the account has the required access rights.
• Fixed an issue preventing program from resolving SIDs in trusted domains.
• Fixed well-known security groups appearing with incorrect domain name in reports.
• Fixed not being able to select mailboxes from the browser's tree view when configuring report scope.

8/18 version 8.1.0.1

ADHQ Professional v8.1.0.1 adds the following enhancements:

General

• Added support for importing UNC path names into the File and Share Scope dialog.
• Added support for manually entering UNC path names into the File and Share Scope dialog.
• Added support for creating Office 365 users with non-complex passwords.
• Added the following Common Properties for security reporting and filtering:

  AD Security Reports
  Common Permissions	This property contains a list of common permissions that can be granted on Active Directory objects. This list is similar to the list that appears on the Security tab (Advanced view) of property sheets from within Active Directory Users and Computers.
  Is High Risk Trustee	Does this ACE apply to many or all users? This property returns TRUE if the Trustee is equal to "Anonymous Logon", "Authenticated Users", "Domain Guests", "Domain Users", "Everyone", "Guests", "IUSR", or "Users".
  Change Password	Does this ACE contain the 'Change Password' right? Users with the Change Password permission are allowed to change the password, if they supply the current one.
  Reset Password	Does this ACE contain the 'Reset Password' permission? Users with the Reset Password permission can change the object's password, without knowing the current one.
  Send As	Does this ACE contain the 'Send As' permission? This permission allows users to send an email as the object.
  Receive As	Does this ACE contain the 'Receive As' permission? This permission allows users to access the object's incoming mail.
  Send To	Does this ACE contain the 'Send To' permission? This permission allows users to send emails to this object.
  Allowed to Authenticate	Does this ACE contain the "Allowed to Authenticate" permission? This permission is used to allow users to authenticate themselves to resources in trusted domains that have selective authentication enabled.
  Add/Remove Self as Member	Does this ACE contain a 'Add/Remove Self as Member' permission? This permission is granted to objects on group ACLs to allow the objects to add themselves to the group's membership list.
  Generate RSOP (logging)	Does this ACE contain a 'Generate RSOP (logging)' permission? This permission is granted on OU objects and allows users to generate Resultant Set of Policy logging reports.
  Generate RSOP (planning)	Does this ACE contain a 'Generate RSOP (planning)' permission? This permission is granted on OU objects and allows users to generate Resultant Set of Policy planning reports.
  Create User	Does this ACE contain a 'Create User' permission?
  Delete User	Does this ACE contain a 'Delete User' permission?
  Create Group	Does this ACE contain a 'Create Group' permission?
  Delete Group	Does this ACE contain a 'Delete Group' permission?
  Create Contact	Does this ACE contain a 'Create Contact' permission?
  Delete Contact	Does this ACE contain a 'Delete Contact' permission?
  Create Computer	Does this ACE contain a 'Create Computer' permission?
  Delete Computer	Does this ACE contain a 'Delete Computer' permission?
  Create OU	Does this ACE contain a 'Create OU' permission?
  Delete OU	Does this ACE contain a 'Delete OU' permission?
  Full Control	Does this ACE contain a 'Full Control' permission?
  File Security Reports
  Common Permissions	This property contains a list of common permissions that can be granted on file system objects. This list is similar to the list that appears on the Security tab (Advanced view) of property sheets from within Windows Explorer.
  Is High Risk Trustee	Does this ACE apply to many or all users? This property returns TRUE if the Trustee is equal to "Anonymous Logon", "Authenticated Users", "Domain Guests", "Domain Users", "Everyone", "Guests", "IUSR", or "Users".
  Full Control	Does this ACE contain a 'Full Control' permission?
  Mailbox Security Reports
  Common Permissions	This property contains a list of common permissions that can be granted on file system objects. This list is similar to the list that appears on the Security tab (Advanced view) of property sheets from within Windows Explorer.
  Is High Risk Trustee	Does this ACE apply to many or all users? This property returns TRUE if the Trustee is equal to "Anonymous Logon", "Authenticated Users", "Domain Guests", "Domain Users", "Everyone", "Guests", "IUSR", or "Users".
  Full Control	Does this ACE contain a 'Full Control' permission?
  Ace Source	Is this ACE inherited from the mailbox database, or explicitly defined on the specific mailbox?
  Printer Security Reports
  Common Permissions	This property contains a list of common permissions that can be granted on printer objects. This list is similar to the list that appears on the Security tab (Advanced view) of property sheets from within the Print Management administrative tool.
  Is High Risk Trustee	Does this ACE apply to many or all users? This property returns TRUE if the Trustee is equal to "Anonymous Logon", "Authenticated Users", "Domain Guests", "Domain Users", "Everyone", "Guests", "IUSR", or "Users".
  Full Control	Does this ACE contain a 'Full Control' permission?
  Manage this Printer	Does this ACE contain a 'Manage this Printer' permission? This permission allows users to perform administrative tasks, such as starting, pausing and stopping the printer, change spooler settings, share the printer, modify permissions and changing properties.
  Manage Documents	Does this ACE contain a 'Manage Documents' permission? This permission allows users to perform administrative tasks relating to documents being printed, such as starting, pausing, resuming, reordering, and cancelling documents.
  Print Permission	Does this ACE contain a 'Print' permission? This permission lets users print documents.

Reports

• Added a new view for when folders are selected in the Report Tree. The descriptions in this view can be read to discover the purpose of built-in reports, or modified to add usage notes for your own folders. Right-click on a folder in the tree and select "Properties" to modify the description text.
• Added over 200 new security reports including: High-Risk Trustees, Unusual Owners, Non-default Security Rights, Auditing Rights, and scores of reports detailing all instances of specific permissions granted on AD objects and file shares throughout your network.
• Added four new contact reports including: Mail-Disabled Contacts, Mail-Enabled Contacts, Managers and their Direct Reports, and Contacts That Are Not Managers.

ADHQ Professional v8.1.0.1 addresses the following issues:

General

• Creating scheduled tasks and then running the program as a different user would cause the scheduled tasks to be incorrectly removed.
• Dummy users created in simulation mode were not always being removed.
• Fixed an issue where Search & Replace tool would not correctly find specified objects in AD.

Reports

• Modified the built-in report Printer Shares Owned by SYSTEM to correctly identify all printer shares owned by SYSTEM.
• The child attribute 'Member Of's Group Type' would display as a number rather than 'Security' or 'Distribution'.
• Having the three columns 'Nested Member Of', 'Nested Member Of Count', and 'Member Names' all in the same report in a particular order would cause the 'Nested Member Of' column to report incorrect info.

2/18 version 8.0.1.7

ADHQ Professional v8.0.1.7 adds the following enhancements:

Reports

• Improvements to report engine to speed up processing and reduce memory footprint.

Scheduled Tasks

• Added an Import Tasks feature to the Scheduled Tasks right click menu for importing 7.0 scheduled tasks

ADHQ Professional v8.0.1.7 addresses the following issues:

Office 365

• Fixed an issue where newly created Office 365 users were always forced to change passwords regardless of the 'Must Change Password' setting
• Fixed an issue where some Office 365 reports would not work correctly when using credentials from a non-"onmicrosoft.com" domain.

Filtering

• Fixed an issue where filters were working incorrectly when matching "Is empty", "Is not empty", "Is unique", or "Is not unique" on child attributes. These filters were incorrectly matching against the value of the parent attribute.

Scheduled Tasks

• Fixed an issue where the tool would crash in the Add a Tool Action wizard if no tool was selected prior to clicking Next on the first wizard page.

Reports

• Fixed an issue causing cells containing child attributes to to display incorrectly if the cell had more than 15 rows of data.
• Modified the Office 365 Inactive Mailboxes report to correctly return users who had never logged on to their mailboxes.

Templates

• Fixed an issue causing imported values to not appear when referenced with template parameters.
• Fixed an issue preventing users from using %password% in templates.
• %DistinguishedName% is now a valid template parameter for Add and Import tools.
• Fixed an issue where additional characters were incorrectly being removed from templates when following a blank parameter.

12/17 version 8.0.0.3

ADHQ Professional v8.0.0.3 addresses the following issues:

General

• On some machines, saving a report with photos to a PDF file would resize the photos incorrectly.
• Renaming a custom tool in the Custom Tool Editor would fail. The old name would re-appear after restarting the application.
• Using the 'Create Home Folder Share' option in any of the User tools would create the share, but would not reset the user's home folder path to point to the new share.
• In the Advanced Security Settings of the Modify User tool, the 'Account may be delegated' and the 'Do Not Allow Account to be Delegated' options were switched.

11/17 version 8.0.0.0

ADHQ Professional v8.0.0.0 contains the following features:

Active Directory Object Management

• Tools for creating and provisioning AD users, computers, contacts, groups, and OUs
• Tools for modifying AD users, computers, contacts, groups, and OUs
• Tools for importing AD users, computers, contacts, groups, and OUs
• Tools for deleting and deprovisioning AD users, computers, contacts, groups, and OUs
• Tools for moving AD users, computers, contacts, groups, and OUs
• Search and Replace AD object attributes and common properties
• Use any tool on a single object or a selected group of objects
• Use custom or pre-defined filtered collections to define which objects to modify, e.g. users with soon to expire passwords

Reports

• Report on users, groups, computers, contacts, OUs, printers, shares and GPOs
• Over 500 standard reports included
• Create custom reports without scripting
• Complex filtering for targeting the precise information you need
• Export report output to CSV, text, PDF, XLS, or HTML format
• Easily import report data for quickly modifying AD objects

Scheduled Tasks

• Create scheduled tasks to run any tool or report at a later time and date using built-in wizards
• All tools and reports have a Run-Later feature to quickly create a scheduled task rather than running the tool or report immediately
• Tasks may be run daily, weekly, monthly, one-time only, at logon or when the computer starts.
• Tasks can be scheduled to re-occur as often as needed (e.g. every five minutes).

Security

• Report on AD, File & Share, Mailbox, and Printer ACLs and Permissions
• Dozens of standard reports included
• Tools to Search & Replace File, Share, and Active Directory ACLs
• Tools to Analyze & Clean File, Share, and Active Directory ACLs
• Ability to Undo changes made with the Search & Replace or Clean tools

ADHQ Professional v8.0.0.0 adds the following enhancements:

General

• Added a new Undelete tool for restoring deleted objects
• Added a new tool for modifying Office 365 licenses and service plans
• Added ability to open multiple tool windows at the same time. For example, you may now open the properties from two different users at the same time.
• Added auto-update feature to automatically download and install updates
• Added ability to create remote mailboxes in Office 365 hybrid environments
• Added support for Exchange 2016
• Added the following Common Properties for reporting and filtering:

  Logon Hours Properties
  Allow Logon Always	No logon hours have been restricted
  Allow Logon Never	All logon hours have been restricted
  Exchange Version Properties
  Exchange Version	Exchange version in text form
  Exchange Version Year	Exchange version year as an integer
  Account Properties
  When Deleted	The date and time when this object was deleted
  Is Expired	Is the user's account expired?
  Is Password Expired	Is the user's password expired?
  Mail Properties
  Mail Deleted Items Period	How long to keep deleted items in a user's mailbox
  Mail Deleted Items Flag	Do not permanently delete items from a mailbox until it's been backed up
  Mail Enabled	Is user mail-enabled (i.e. they have an external mailbox that mail is forwarded to)?
  Mail Storage Quota	Send a warning message when mailbox exceeds this size
  Mail Over Quota Limit	Disable sending messages when mailbox exceeds this size
  Mail Over Hard Quota Limit	Disable sending and receiving messages when mailbox exceeds this size
  Mail Send Max Size	Maximum outgoing message size
  Mail Receive Max Size	Maximum incoming message size
  Mail Recipient Limit	Maximum number of message recipients
  OWA Enabled	Is OWA (Outlook Web Access) enabled?
  MAPI Enabled	Is MAPI enabled?
  POP3 Enabled	Is POP3 enabled?
  IMAP4 Enabled	Is IMAP4 enabled?
  MAPI Cached Enabled	Is MAPI Cached enabled?
  Mailbox Enabled	Does the user have an Exchange Mailbox?
  Remote Mailbox Enabled	Does the user have a Remote Exchange Mailbox (i.e. manageable via a local Exchange 2016 Management console)?
  Office 365 Properties
  Office 365 Is Licensed	Does the user have an Office 365 license?
  Office 365 Licenses	List of all Office 365 licenses and the user's assigned status
  Office 365 Plans	List of all Office 365 service plans and the user's assigned status
  Office 365 Logon Name	Office 365 logon name
  Office 365 Last Sync Time	Last date and time the Office account was synched to Active Directory via the AD Connector
  Office 365 Mailbox Enabled	Does the user have an Office 365 mailbox?
  Office 365 Object ID	Globally unique Office 365 object ID
  Office 365 Account Blocked	Is the Office 365 account blocked?
  Office 365 Usage Location	Office 365 usage location (i.e. the country the license is being used in)?
  Security Properties
  Is Password Empty	Is the user's password empty?
  MNS Logon Account	An MNS account is required for the operation of cluster nodes for Windows Server 2003 (and newer). This flag should never be set for a user account.
  Inter Domain Trust Account	Account is a special hidden account to facilitate trusts between two domains
  Trusted For Delegation	Is this service account trusted for delegation (i.e. can it temporarily use the identity of a user of the service)?
  Computer Properties
  Read Only Domain Controller	Is computer a read-only domain controller?
  Group Properties
  Nested Groups	a list of only the nested groups contained within a parent group (i.e. not the users)
  Nested Groups Count	the count of only the nested groups contained within a parent group (i.e. not the users)
  GPO Properties
  GPO Comment	Comment for the GPO object

Reports

• Added support for reporting on Exchange 2016 mailboxes.
• Added support for reporting on Office 365 accounts.
• Added a list of Well known Locations to the Report Scope items, including: <My OU>, <My Domain>, <Users OU>, <Deleted Objects OU>, and several more
• Added over 320 new reports including: User With Blank Passwords, Users with Photos, Passwords That Will Never Expire, Users Not Protected From Accidental Deletion, plus dozens of Office 365 reports and scores of Exchange Reports.

Add/Modify/Import User

• Added the ability create a synched Office 365 account when adding or importing a user.
• Added the ability to set the user's Office 365 Usage Location, assign licenses, and enable specific service plans.
• Added the ability to create a remote Exchange mailbox for hybrid Office 365 environments

Scheduled Tasks

• Added optional expiration date and time for scheduled tasks and ability to delete the task after it expires
• Added ability to repeat tasks (e.g. run the task every half hour)

Previous Versions

ADHQ Professional v8.0.0.0 was built on the foundation of ADtoolkit version 7. The complete version history for ADtoolkit can be found at:
http://www.javelinasoftware.com/support/ADtoolkitVersionHistory.pdf

Future Versions

Many of the new features we add to our software come directly to us as requests from our users. If you have a feature suggestion for future versions of ADHQ Professional, please tell us about it with our Feature Request Form.