Directory and Resource Administrator and Exchange Administrator 9.0.0 includes new features, improves usability, and resolves several previous issues.
Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the Directory and Resource Administrator and Exchange Administrator forum on NetIQ Communities, our online community that also includes product information, blogs, and links to helpful resources.
The documentation for this product is available on the NetIQ website in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Directory and Resource Administrator and Exchange Administrator (DRA) NetIQ Documentation page. To download this product, see the Directory and Resource Administrator and Exchange Administrator Product Upgrade website.
The following outline the key features and functions provided by this version, as well as issues resolved in this release:
Directory and Resource Administrator and Exchange Administrator now supports managing Microsoft Office 365 licenses and Exchange Online mailboxes. For detailed information, see the Directory and Resource Administrator and Exchange Administrator Administrator Guide and the Directory and Resource Administrator and Exchange Administrator User Guide.
Directory and Resource Administrator and Exchange Administrator includes the following enhancements:
A Set Group Membership Approval Search Returns Incorrect Results
DRA Admin Service Stops Unexpectedly When Executing a Custom PowerShell Script
Incorrect Results When Using the Exchange Administrator Command Line Tool
Cannot View Mailbox Rights After Converting from Exchange 2003 to Exchange 2007
Assistant Administrator Activity Detail Report Doesn't Include Timestamp
The traceService Log Path in the Configuration File Restores Itself
Attempting to Create an Assistant Administrator Group Using Wildcard Rules Triggers an Error
Setting DC Preferred to an Invalid DC Causes the DRA Cache Process to Fail
DRA now supports the following Exchange Online features:
Enable Exchange Online archive mailbox
Disable Exchange Online archive mailbox
Manage Exchange Online mailbox delegation
Manage Exchange Online mail flow
Manage Exchange Online Litigation Holds
This version also adds new DRA policies to manage Office 365 licenses via group membership.
This version adds two new services, NetIQ DRA Host Service and NetIQ DRA Rest Service, to support a new set of RESTful interfaces. For more information see the NetIQ Directory and Resource Administrator REST Services release notes that is packaged with the REST services installer.
This utility allows you to monitor the health of your Directory and Resource Administrator environment and can be installed or uninstalled irrespective of your DRA installation. You can also use this utility to check the health of older versions of DRA that you have currently installed—especially DRA 8.6 SP2—before upgrading to DRA 9.0.
The AD Collector no longer completes with a dynamic group warning. (ENG338342)
Advanced queries not return complete results. (ENG337394)
The file transfer folder is no longer deleted from the primary DRA server after an upgrade. (ENG335738)
The Set Group Membership Approval Search now filters the results properly. (ENG338069 and ENG338367)
There is no longer a memory leak from DRAExchShell.exe or MCSAdminSvc.exe. (ENG335025)
DRA now displays the correct warning when an LDS is not available on a secondary DRA server. (ENG337467)
The UserCopy operation now performs correctly when used in a pre-task trigger script. (ENG321832)
The DRA admin service no longer stops unexpectedly when running a custom powershell script. (ENG337319)
DRA sets the incorrect rule when using the Exchange Administrator command line tool to add a group to an ActiveView. (ENG339128)
Assistant Administrators in nested groups from trusted domains no longer lack the appropriate powers. (ENG335887)
You can now view Mailbox Rights through DRA after converting your Exchange 2003 mailboxes to Exchange 2007. (ENG243637)
The domain cache no longer fails when the NetBIOS name differs from the domain name. (ENG335994)
The Date column on the AA Activity Details report now displays a timestamp along with the date. (ENG301894)
Using a password that contains a space or a semi-colon no longer causes an upgrade failure. (ENG336212)
DRA no longer incorrectly modifies a search string when running an advanced search with a VA filter. (ENG338701)
The REST API no longer fails to retrieve the MemberOfAttribute for UserGetInfo. (ENG337969)
A mail-enabled contact that has been deleted can no longer be sent email if the deleted contact is still in the sender’s local address book. (ENG338751)
The traceService Log path within the REST API configuration file no longer gets reset each time the service is restarted. (ENG337970)
DRA can now create mail-enabled objects after the service is restarted. (ENG338113)
You can now create an Assistant Administrator Group in the Win32 console using any wildcard rule. (ENG336736)
The DRA FACR/IACR will no longer fail if you set an invalid value for DC Preferred in the registry. (ENG338815)
For detailed information on hardware requirements and supported operating systems and browsers, see the NetIQ Directory and Resource Administrator and Exchange Administrator Installation Guide.
To install Directory and Resource Administrator and Exchange Administrator, see the NetIQ Directory and Resource Administrator and Exchange Administrator Installation Guide.
The following considerations apply when you install this version:
To manage Exchange Online mailboxes you must install DRA on Microsoft Windows 2008 R2 or above.
You must also install Windows Azure Active Directory Module for Windows PowerShell as well as Microsoft Online Services Sign-in Assistant. For more information, refer to the NetIQ Knowledge Base article 7016493 or contact Technical Support.
DRA no longer requires installation of Exchange Server 2010 or 2013 management tools on the Administration server computer. To remotely manage an Exchange Server 2010 or 2013 server, DRA now requires only Powershell 2.0 and Windows Remote Management (WinRM) 2.0 to be installed on the Administration server.
This is not true of Exchange Server 2007 objects. You must install the Exchange 2007 management tool onto the respective DRA server and that DRA server must be installed in the same domain as the Exchange Server 2007 server in order to manage Exchange Server 2007 objects.
The following considerations apply after you install this version:
You must apply a license using the Health Check utility or the Delegation and Configuration console. If you use the Delegation and Configuration console, you must log on as the DRA service account to apply the license.
To add the first managed domain in the Delegation and Configuration console, you must log on as the DRA service account. After the full accounts cache refresh completes, all DRA Admins have their assigned powers.
NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.
Section 4.1, Exchange Online Policy Enabled but No Office 365 Tasks Tab for Objects
Section 4.3, The DRA 9.0 Health Check Standalone Utility Returns an Error
Section 4.6, A DRA Installation Cannot Be Repaired If the Services Are Stopped
Section 4.7, User Cannot Clone Another User from the Web Console
Section 4.9, Office 365 License Update Job Not Performing Properly
After enabling the Exchange Online policy, you must restart the DRA service to manage Office 365 mailbox properties in DRA or to manage Office 365 in DRA. (ENG337700)
When upgrading from DRA 8.7.x to 9.0, the DRA server does not get upgraded because the user lacks the permissions needed to modify a cached MSI file. (ENG338327)
Workaround: Go to %windir%\installer and right-click the MSI file. Select Properties from the menu and go to the Security tab. Give the Modify permission to the System and the logged-in user.
The DRA 9.0 Health Check standalone utility returns an error for the AD LDS instance when run against DRA 8.6.x server and the schema check when the registry entries for the port contains junk values. (ENG338558)
Workaround: Open the registry key at HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Mission Critical Software\OnePoint\Administration\Modules\ServerConfiguration\ADAMConfiguration\LDAPPort and re-enter the actual LDAPPort key value.
If, after upgrading to DRA 9.0, the AD collector is configured or any new domain is configured for data collection, the AD collector fails. (ENG338934)
Workaround: Selecting too many attributes across all the configured classes may cause DRA to exceed the maximum SQL row size. Remove some of your attribute selections to address this problem.
It is possible to install DRA onto a machine when logged in as someone other than the machine's domain Administrator; however, you cannot unistall DRA under the same scenario. (ENG338581)
Workaround: To uninstall DRA, launch the .msi file from the setup.exe file.
If all services—DRA, IIS, WWW—are stopped, an attempt to repair the DRA installation will fail. (ENG339202)
Workaround: Start a service before attempting to repair the installation.
A user cannot clone another user from the web console if that user has an Exchange 2010 Mailbox with only "Exchange Online Administration support" enabled. (ENG339423)
Workaround: Enable the Exchange 2010 policy on the domain’s Exchange server.
All of your changes might not be applied if you click the Apply button multiple times without closing the Mailbox Delegation tab for an Office 365 mailbox. (ENG339367)
Workaround: Close and re-open the dialog to apply additional changes.
The Office 365 license update job on the Tenant properties page does not assign licenses to all users in the policy group. This can be the result of reaching your Exchange Online license limit. (ENG339333)
Workaround: If you have reached your license limit, either purchase more licenses or remove users from the policy groups. If you have sufficient licenses, run the license update job manually or wait for it to run at its next scheduled time.
Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.
For detailed contact information, see the Support Contact Information website.
For general corporate and product information, see the NetIQ Corporate website.
For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.
NetIQ Directory and Resource Administrator is protected by United States Patent No(s): 6,792,462.
THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE SUBJECT TO THE TERMS OF A LICENSE AGREEMENT OR A NON-DISCLOSURE AGREEMENT. EXCEPT AS EXPRESSLY SET FORTH IN SUCH LICENSE AGREEMENT OR NON-DISCLOSURE AGREEMENT, NETIQ CORPORATION PROVIDES THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SOME STATES DO NOT ALLOW DISCLAIMERS OF EXPRESS OR IMPLIED WARRANTIES IN CERTAIN TRANSACTIONS; THEREFORE, THIS STATEMENT MAY NOT APPLY TO YOU.
For purposes of clarity, any module, adapter or other similar material (“Module”) is licensed under the terms and conditions of the End User License Agreement for the applicable version of the NetIQ product or software to which it relates or interoperates with, and by accessing, copying or using a Module you agree to be bound by such terms. If you do not agree to the terms of the End User License Agreement you are not authorized to use, access or copy a Module and you must destroy all copies of the Module and contact NetIQ for further instructions.
This document and the software described in this document may not be lent, sold, or given away without the prior written permission of NetIQ Corporation, except as otherwise permitted by law. Except as expressly set forth in such license agreement or non-disclosure agreement, no part of this document or the software described in this document may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, or otherwise, without the prior written consent of NetIQ Corporation. Some companies, names, and data in this document are used for illustration purposes and may not represent real companies, individuals, or data.
This document could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein. These changes may be incorporated in new editions of this document. NetIQ Corporation may make improvements in or changes to the software described in this document at any time.
U.S. Government Restricted Rights: If the software and documentation are being acquired by or on behalf of the U.S. Government or by a U.S. Government prime contractor or subcontractor (at any tier), in accordance with 48 C.F.R. 227.7202-4 (for Department of Defense (DOD) acquisitions) and 48 C.F.R. 2.101 and 12.212 (for non-DOD acquisitions), the government's rights in the software and documentation, including its rights to use, modify, reproduce, release, perform, display or disclose the software or documentation, will be subject in all respects to the commercial license rights and restrictions provided in the license agreement.
© 2015 NetIQ Corporation. All Rights Reserved.
For information about NetIQ trademarks, see http://www.netiq.com/company/legal/.