Category
Product Version
Topic
Subtopic
How to turn on and view logging within the Active Administrator console (4317243)
How to turn on and view logging within the Active Administrator. ... <ol><li>Select Settings | User Options.</li><li>Click Advanced.</li><li>By default, console logging is disabled. ... <p>Once logging is enabled, the log file can be viewed anywhere within the console by pressing the F8 key on the keyboard.</p>
How to create custom user account locked out email alert. (4225559)
How to create a custom user account locked out email alert.
some email notifications cannot be disabled (4378226)
We have found that if we had a trial license these features would be enabled as part of the trial, and then when choosing for instance the AD Health-only license there is no way to disable these features later.
Missing User and Domain Controller information in the GPO History module (4378187)
Some GPOs do not display the correct information in the User and Domain Controller columns of the GPO History module. ... None ... Defect ID - 537530 has been created to consider including a fix in a future release of the product.
Does Active Administrator Supports gMSA Service Accounts? (4369393)
Active Administrator does not support gMSA and MSA accounts to be used as a service account to run Active Administrator services and agents.
Error: CActiveAdministratorAgent::DoAgentWork - Unable to open the database. Provider cannot be found. It may not be properly installed. (4316583)
After Domain Controllers are patched and rebooted, they stop writing to the database. ... It may not be properly installed. ... Connection String: Provider=SQL01;Server=Quest01;Database=ActiveAdministrator;Trusted_Connection=yes;
Audit Agents keep disconnecting and connecting (4369737)
After upgrading to AA 8.6.2, audit agents keep disconnecting/connecting (disconnect for about 10 to 30 minutes) and these notifications, "The SLAgentSvc is experiencing problems writing data to the database/ The SLAgentSvc has restored its connection to the database" are being generated.
Changes to Azure AD Connect / Entra Connect Monitored Services (4378137)
Previously in Active Administrator, the service names used for Azure AD Connect for that Active Administrator to monitor were hardcoded into the product. ... We have updated this to use a configuration file to allow the change/addition of other Azure AD / Entra services in the future as we expect Microsoft may rebrand these services again in the future.
Failed to backup Group Policy object error. (4375191)
The following error is seen when attempting to create GPO backups:<br> ... <p><img src="https://prod-support-images-cfm.s3.amazonaws.com/KB_kA06R000000HNhbSAG_4375191a.jpeg"></img></p> ... <br><br><strong>Critical Error: An error occurred while attempting to Backup GPO [NAME].<br><br>Unable to find ldifde.exe, which is a required file. ldifde.exe can be installed by adding the "AD DS Snap-Ins and Command-Line Tools" feature or by running the following PowerShell command from an elevated console: Get-WindowsCapability -Name RSAT.ActiveDirectory.DS-LDS.* -Online | Add-WindowsCapability -Online<br> at Quest.AA.AFS.ASM.GroupPolicy.LdifdeFinder.GetLdifdePath()<br> at Quest.AA.AFS.ASM.GroupPolicy.GroupPolicyProviderBase.RunLdifdeCommand(ICollection`1 arguments)<br> at Quest.AA.AFS.ASM.GroupPolicy.BackupGPOProvider.ExportDE(String domainName, String dcName, String cn, Uri backupFolder, String backupFolderName, String distinguishedName)<br> at Quest.AA.AFS.ASM.GroupPolicy.BackupGPOProvider.Backup(String domainName, Guid gpoId, BackupGpoBehavior behavior, Uri backupFolder, String gpoContainerPath)<br> at Quest.AA.AFS.ASM.GroupPolicy.GpoHistoryWatcher.ProcessGroupPolicy(Uri gpoHistoryPath, Guid gpoId, Int32 versionNumber, String domainName)<br> at Quest.AA.AFS.ASM.GroupPolicy.GpoHistoryWatcher.ProcessGroupPolicy(Guid gpoId, Int32 versionNumber, String domainName)<br> at Quest.AA.AFS.ASM.GroupPolicy.GpoHistoryWatcher.CheckForGPOChanges()</strong> Try installing the <strong>"AD DS Snap-Ins and Command-Line Tools" </strong>feature by running the following PowerShell command from an elevated console:<br><br><strong>Get-WindowsCapability -Name RSAT.ActiveDirectory.DS-LDS.* -Online | Add-WindowsCapability -Online</strong><br><br>Or, you may install it by opening Server Manager in the Active Administrator server and add the role from there.<br>
How to Disable DFSRS collectors from AD health? (4378110)
5) In the settings uncheck "Enabled" ... 6) Click "Apply to All" and "Yes" in the confirmation dialogue. ... 7) Repeat steps 4 - 6 for the other DFSRS collectors. ... There are 6 in total. ... Once this is complete the AD Health agents will no longer communicate with the replication systems on the DCs.
Blank Message Body for Password Reminder emails to some admin email addresses (4378082)
When using Email Settings with Exchange Online, the administrator at the top of the recipient list receives the notification correctly, while the remaining recipients configured to receive password expiration reminders receive messages with an empty email body.
Can changes to the Password Reminder module be audited? (4377989)
Is it possible to audit changes to the Password Reminder module, so that alerts can be raised on any changes to this module and have access to a history showing before and after values when an option is changed?
Unable to remove Certificates from Certificate Repository module (4378071)
When computers are removed from the Certificate Management module, the certificates associated with those computers cannot be deleted from the Certificate Repository module. ... None ... Defect ID - 534119 has been created to consider including a fix in a future release of the product.
Email notification subject line for AD health (4378009)
Can we customize the email notification from AD Health? ... Like subject line by including %DomainControllerName% or the object name as mentioned within the email notification. ... No, Currently the subject and body templates for Active Directory Health are not modifiable.
How is Active Administrator licensed? (4255772)
Active Administrator is licensed by the total number of enabled user objects in the licensee’s Active Directory. ... Can I use my license for a selected group of users, or for just part of the domain, or just one of my domains?
How to restore AD objects? (4237611)
How to restore AD objects such as users, computers and groups? <ol><li>Open the Active Administrator console</li><li>Expand Recovery and select Object Recovery</li><li>Select the backup you want to recover from and click Restore</li><li>Click Next</li><li>Click Find or Browse to select the objects you want to restore</li><li>Optionally click Compare to see the differences between the object in the backup and in AD</li><li>Click Next</li><li>Select to restore all of the attributes or select the attributes you want to restore and click Next</li><li>Select the DC you want to restore to</li><li>If any of the objects selected to recover contain child objects (such as an OU) you can select to only the object, the object and everything it contains, or objects of a specific type</li><li>Click Next</li><li>Select how you want to handle passwords for any objects recovered that have passwords and click Next</li><li>Click Preview to show what attributes will be restored</li><li>Click Next to begin the Recovery operation</li></ol>
Unable to remove certificates from the Certificate Repository module (4377897)
When trying to remove a certificate from the Certificate Repository module, a 'NOT eligible for deletion' warning message appears: ... To remove a certificate from the Certificate Repository module, the certificate must first be removed from all the computers registered in the Certificate Management module where the certificate is present.
How to change the login and password for the Active Administrator service account (4360935)
How to change the login and/or password for the Active Administrator services. ... Due to changes in security policies, it may become necessary to change the credential and/or the password that runs the Active Administrator services on the server where the application is installed.
Does AA 8.7 support windows 2025 (4377893)
<p>Can AA 8.7 support windows server 2025?</p> <p>No, AA 8.7 supports till windows server 2022. </p>
How to purge stale inactive accounts (4316178)
How to purge stale inactive accounts. ... By default, inactive accounts are purged after 30 days of inactivity. ... You can set up a schedule, send notifications, and prevent specific users from being deleted.
When restoring user objects, mailbox attributes are missing (4360981)
Make sure the AFS Foundation Server service account is a domain admin account that also has the Exchange Organization Management privilege.
DACache folder has become corrupted, leading to an xml read failure. (4377091)
executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)<br> at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)<br> at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()<br> at System.Threading.ThreadPoolWorkQueue.Dispatch()<br>End Dump<br><br> <p>The following steps should fix this behavior:</p>
Archive databases not available after update (4377824)
After the update to version 8.7.1.22, the archive databases are no longer available. ... If these are subsequently inserted into the InstanceConfiguration.xml, they are displayed again but the content is empty.
AA Password Reminder is excluding an OU that was not excluded (4377778)
AA Password Reminder exclusion is not working correctly. ... On the exclusions, a parent OU was excluded... but not the Child OU, looking for to have the users of the Child OU processed for them to receive the reminder.
GPO Setting Search is not returning values when trying to search User Rights Assignment (4377786)
In the GPO Search Settings module, under the User Rights Assignment category, trying to search part or the entire settings name doesn't provide any results. ... A defect has been identified in the GPO Search for User Right Assignments where results will be returned only if the searched text appears in all the User Right Assignments in all selected GPOs.
New Product Association
- Self Service Tools
- Knowledge Base
- Notifications & Alerts
- Product Support
- Software Downloads
- Technical Documentation
- User Forums
- Video Tutorials
- RSS Feed
- Contact Us
- Technical Support
- View All