NetIQ Directory and Resource Administrator and Exchange Administrator |
Version 8.7 |
Release Notes |
Date Published: September 2013 |
|
NetIQ Directory and Resource Administrator and NetIQ Exchange Administrator includes new features, improves usability, and resolves several previous issues. Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure our products meet all your needs. You can post feedback in the Directory and Resource Administrator forum on Qmunity, our community Web site that also includes product notifications, blogs, and product user groups. For more information about this release and for the latest release notes, see the NetIQ Directory and Resource Administrator Documentation Web site. To download this product, see the NetIQ Directory and Resource Administrator Product Upgrade Web site. What's New?The following outline the key features and functions provided by this version, as well as issues resolved in this release:
Operating System SupportDirectory and Resource Administrator and Exchange Administrator include support for the following operating system and Microsoft Exchange Server versions:
Performance ImprovementsDirectory and Resource Administrator and Exchange Administrator include the following performance improvements:
Enhanced Active Directory Data CacheThe cache has been rearchitected to reduce the time needed for DRA to display changes made outside of DRA. Because of the enhanced cache, DRA users will experience the following improvements:
The full accounts cache refresh that in previous releases was scheduled for regular refreshes now runs when you add new managed domains in DRA. The incremental accounts cache refreshes run every 5 minutes by default and are designed to keep your DRA cache fully updated. DRA Web Console Performance ImprovementsMultiple code changes improve the performance of Web Console startup and during use. Improved Reporting Performance and Additional Language SupportDRA Reporting now contains the following improvements:
Limitations to the Supported Operating Systems and Microsoft Exchange Server VersionsNetIQ is removing support for managing Microsoft Exchange Server 2003 objects. If you still need to manage Exchange Server 2003 objects, you can leave a secondary Administration server running DRA 8.6 in your DRA 8.7 environment. NetIQ is removing support for installing the Administration server component on 32-bit operating systems. Now, you must install the Administration server component on a computer running a 64-bit operating system. NetIQ has removed support for using NetIQ Reporting Center versions 1.0 and 1.5. The minimum suported version is now NetIQ Reporting Center 2.0. Enhancements and Software FixesDirectory and Resource Administrator and Exchange Administrator include enhancements and software fixes that resolve several previous issues.
New Installation Program Simplifies Installation ExperienceThe installation program has been rewritten to streamline and simplify Directory and Resource Administrator installation. New Health Check Utility Eases Initial Configuration and Issue DiagnosisA new Health Check utility makes first-time configuration simpler and allows you to monitor the health of your Directory and Resource Administrator environment. Integration with NetIQ Aegis 3.0DRA supports the following workflows for Aegis 3.0:
Support for NetIQ Reporting Center 2.0DRA now supports using NetIQ Reporting Center 2.0 for creating the optional DRA Management reports. PowerShell Support for Triggers and PoliciesDRA now supports using Windows PowerShell (x86) commands in triggers and policies. Updated Documentation and New Documentation Support PageThis release contains an updated Installation Guide. The Installation Guide and the release notes are installed with the product, and the rest of the documentation is no longer installed with the product. All of the documentation for this product is now available on the NetIQ Web site in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click Add Comment at the bottom of any page in the HTML versions of the documentation posted at www.netiq.com/documentation. Power Names UpdatedSeveral power names were updated for the DRA 8.6 SP 1 release. If you have any custom scripts in use in your environment, you should check to see if they use these powers:
Additional Resource Types Available to Manage in Web ConsoleUsing the Web console, you can now perform DRA operations on the following resource types:
For each of these resource types, you can perform management and configuration tasks, such as creating a resource or viewing resource properties. Tree Element Added to Web Console Allows Selecting AD ContainersWhen searching for or creating items in a container, you can now select the container from a tree in the Web console instead of typing it in a text box. When you select a folder in the tree, the Web console sets the folder container as the default target for the operation. For example, when creating new user accounts, you can select the target OU in the tree to designate where DRA should create the user account. Ability to Search Using LDAP Query in Web ConsoleWhen searching for items to display in the task pages, you can now select the option to specify an LDAP query from the Name list. The results of the query are listed in the Web console. You can run saved queries or select the Custom option to specify an ad hoc query. Search results are filtered by the selected container in the navigation tree. Ability to Manage Group Membership Security in Web ConsoleUsing the new Membership security link, you can now delegate group membership management to members of the domain. To delegate group membership management in the Web console:
Removal of NetBIOS Requirement for DRA Collector and AD CollectorAfter applying this release, you can disable the NetBIOS over TCP/IP protocol on all Administration servers. To disable NetBIOS over TCP/IP:
Ability to Specify Different Exchange Access Accounts on Secondary Administration ServersWhen you specify Exchange 2010 management in Exchange Administrator, the Exchange access tab on the Domain Properties window allows you to specify whether to use the domain access account or another access account for all Exchange servers in your environment. DRA now allows you to specify the Exchange access account from secondary Administration servers in the Multi-Master Set (MMS). Before installing this release, you could enter the Exchange access account only on the primary Administration server in the MMS. New Options for Collecting Last Logon Statistics and Removal of DRA AgentYou can now choose whether to use the lastLogonTimestamp attribute on your domain controllers (updated every 14 days) or have DRA collect the lastLogon attribute for each user account in your managed domains (collected according to your schedule). DRA no longer uses an agent to gather last logon statistics. When you install this release, DRA unregisters and uninstalls the DRA Agent from your domain controllers when the NetIQ Administration service restarts. To configure collection of last logon statistics:
Additional Options for Setting Home Directory PoliciesThe Home Share/Directory Policies window has been updated to allow you to specify creating and moving home directories for existing users. Additional text has been added to the window to better explain the available options. To configure home directory policies:
Support for Additional Microsoft Exchange Server FeaturesThis version provides additional support for the following Exchange Server features not previously managed by DRA:
New Access Account Setting for Exchange Server 2010 Allows DRA to Manage Exchange Server 2010 Servers in Untrusted DomainsWhen you specify Exchange 2010 management in Exchange Administrator, the new Exchange access tab on the Domain Properties window allows you to specify whether to use the Domain access account or another access account for all Exchange servers in your environment. This gives you the ability to configure DRA to manage Exchange Server 2010 servers in untrusted domains. DRA now stores the credentials for the domain access account and the Exchange access account in AD LDS, so that once you specify these accounts on the primary Administration server, the information is available to all secondary Administration servers in the MMS after replication. Before installing this release, you had to specify the domain access account on each Administration server in the MMS. License ChangesThis version contains the following licensing changes:
Resolves Issues With the AD CollectorThis release resolves the following issues with the Active Directory Collector:
Resolves Issues With DRA Management ReportsThis release resolves the following issues with DRA Management reports:
Resolves Issues With DRA Activity ReportsThis release resolves the following issues with DRA activity reports:
Resolves User, Computer, and Group Account Administration IssuesThis release resolves the following user, computer, and group account administration issues:
Resolves Administration Server IssuesThis release resolves the following Administration server issues:
Resolves Account and Resource Management Console IssuesThis release resolves the following Account and Resource Management console issues:
Resolves Exchange Administrator IssuesThis release resolves the following Exchange Administrator issues:
Resolves DRA Reporting IssuesThis release resolves the following DRA reporting issues:
Resolves Policy and Automation IssuesThis release resolves the following policy and automation issues:
Resolves Web Console IssuesThis release resolves the following Web console issues:
Installing Directory and Resource Administrator and Exchange AdministratorTo install or upgrade Directory and Resource Administrator and Exchange Administrator to the latest version, see the Installation Guide. The latest version is available on the NetIQ Directory and Resource Administrator Documentation Web site. Installation ConsiderationsNote the following items when installing this version:
Post-Installation ConsiderationsNote the following items after installing this version:
Upgrade ConsiderationsNote the following items when upgrading from a previous version of DRA:
Known IssuesNetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.
Installation Does Not Complete Successfully if the DRA Service Account Password Contains a Space or SemicolonBefore attempting to install or upgrade to DRA 8.7 in your environment, you must ensure that the DRA Service Account password does not contain a space or semicolon. If you attempt to install and the password contains a semicolon or space, the DRA 8.7 installation will fail and roll back. If this is an upgrade from DRA 8.6.x, the installation program will remove DRA 8.6.x from the Windows Add / Remove Programs list. For more information, see the Knowledge Base article. If you need further assistance with this issue, contact Technical Support. OU Changes Made on Secondary Server Not Reflected on Primary Server Console TreeIf you rename an OU from a secondary Administration server, DRA does not display the new name on the primary Administration server console tree. (ENG330837) Unable to Restore Omitted Trusted Domain on Secondary Administration ServerIf you have omitted some trusted domains, DRA does not allow you to restore these domains from a secondary Administration server. (ENG330589) NQ1 Association Is Made on First Double-Click of Log File
Users Cannot Manage Computers When DRA Manages Only Subtrees of Untrusted Domains
Installation Program Cannot Validate DRA Service Account with Slash Character in Name
Reporting Service Configuration Requires Retyping Override Account Credentials After UpgradeIf you use an override account for the reporting collectors and upgrade to DRA 8.7, you must retype the password for the override account credentials in the Reporting Service Configuration window. The collectors will not collect data until you retype the password. (ENG330187) NetIQ Reporting Center Requires ASP.NET 3.5The NetIQ Reporting Center prerequisite checker does not correctly determine the version of ASP.NET running on Windows Server 2012 computers. To work around this issue, install ASP.NET 3.5 even if a later version of ASP.NET is installed. (ENG321993) Exchange Tasks Not Available When Managed Domain Added to DRAWhen a new domain is added to an existing DRA environment that is already configured for Exchange administration, Exchange Administrator does not display Exchange tasks for objects in the new domain because the Exchange provider is not aware of the newly added domain. (ENG305226) To see Exchange tasks for objects in newly added domains, restart the Administration server computer or follow these steps:
DRA Displays Error Message When Checking Exchange Server 2003 CredentialsWhen the Administration server encounters any problem in checking service account credentials for Exchange Server 2003, DRA displays the following error message: DRA may not have access to hidden groups in domains supporting Exchange 2003 or later. If accountName is not a member of the group, unexpected results can occur. If you use group memberships to delegate administration of this domain, ensure your access account is a member of the Exchange Domain Servers or Account Operators group. This error message may be inaccurate. (ENG304359) DRA May Not Create Home Directories Correctly for User Accounts Created Using the CLIWhen you create a user account using the CLI, the home directory may not be created. (ENG307267) If you encounter this problem, use the Delegation and Configuration console to create a new user account with a home directory. Exchange Option Unavailable when Assistant Admin has Appropriate PowersOn the Delivery restrictions tab for mailboxes, distribution lists, and contacts, the option Require that all senders are authenticated is disabled even when the Assistant Admin has the appropriate powers to modify this option. (ENG317291) To work around this issue:
Contact InformationOur goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you. For detailed contact information, see the Support Contact Information Web site. For general corporate and product information, see the NetIQ Corporate Web site. For interactive conversations with your peers and NetIQ experts, become an active member of Qmunity, our community Web site that offers product forums, product notifications, blogs, and product user groups. Legal NoticeNetIQ Directory Resource Administrator and Exchange Administrator are protected by United States Patent No: 6,792,462. THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE SUBJECT TO THE TERMS OF A LICENSE AGREEMENT OR A NON-DISCLOSURE AGREEMENT. EXCEPT AS EXPRESSLY SET FORTH IN SUCH LICENSE AGREEMENT OR NON-DISCLOSURE AGREEMENT, NETIQ CORPORATION PROVIDES THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SOME STATES DO NOT ALLOW DISCLAIMERS OF EXPRESS OR IMPLIED WARRANTIES IN CERTAIN TRANSACTIONS; THEREFORE, THIS STATEMENT MAY NOT APPLY TO YOU. For purposes of clarity, any module, adapter or other similar material ("Module") is licensed under the terms and conditions of the End User License Agreement for the applicable version of the NetIQ product or software to which it relates or interoperates with, and by accessing, copying or using a Module you agree to be bound by such terms. If you do not agree to the terms of the End User License Agreement you are not authorized to use, access or copy a Module and you must destroy all copies of the Module and contact NetIQ for further instructions. This document and the software described in this document may not be lent, sold, or given away without the prior written permission of NetIQ Corporation, except as otherwise permitted by law. Except as expressly set forth in such license agreement or non-disclosure agreement, no part of this document or the software described in this document may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, or otherwise, without the prior written consent of NetIQ Corporation. Some companies, names, and data in this document are used for illustration purposes and may not represent real companies, individuals, or data. This document could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein. These changes may be incorporated in new editions of this document. NetIQ Corporation may make improvements in or changes to the software described in this document at any time. U.S. Government Restricted Rights: If the software and documentation are being acquired by or on behalf of the U.S. Government or by a U.S. Government prime contractor or subcontractor (at any tier), in accordance with 48 C.F.R. 227.7202-4 (for Department of Defense (DOD) acquisitions) and 48 C.F.R. 2.101 and 12.212 (for non-DOD acquisitions), the government's rights in the software and documentation, including its rights to use, modify, reproduce, release, perform, display or disclose the software or documentation, will be subject in all respects to the commercial license rights and restrictions provided in the license agreement. © 2013 NetIQ Corporation and its affiliates. All Rights Reserved. For information about NetIQ trademarks, see http://www.netiq.com/company/legal/. | ||||||||||||||||||||||||||||||||||||||||||||||||||||