Recovery Manager for Active Directory 10.2.1 - What is new and resolved (4219435)

10.2.1 Enhancements:

• Usability improvements to the Computer Collections Properties dialog including removal of Logging tab and introduction of new tab for Secondary Storage - ADO-283362
• Creation of Management Shell Guide which lists all available PowerShell cmdlets, with examples. Appendix removed from User Guide - ADO-275100
• Support Microsoft Edge browser in the Web Portal - RMADFE-1372, ADO-220837
• Add option to skip replication after recovery on RMAD portal UI - RMADFE-815, ADO-220726
• New portal settings and improvements for Web Portal configuration - RMADFE-1182, ADO-220796

10.2 Enhancements:

• Rename system state backups to Active Directory backups - RMADFE-3009  ADO-218405
• Hide the "Components" tab in computer collection settings - RMADFE-3042  ADO-218415
• SCOM 2019 support - ADO-219783
• Pass through Synchronize across time zones from windows task scheduler to RMAD - RMADFE-952  ADO-220703
• Create Logs Daily to be on by default - ADO-223980
• Display operating system version for all backups - ADO-228741

10.1.1 Enhancements:

• Support LDAP over SSL (LDAPS) to encrypt Active Directory connection for online restore of backups. This includes full support for both agent-based and agentless online restores of Active Directory objects and a new global option to specify SSL connection (select the Use Secure Socket Layer (SSL) to encrypt the connection check box in the Recovery Manager for Active Directory Settings dialog) - RMADFE-823  ADO-222475
• Run PowerShell scripts before and after creating a backup. This option allows you to customize your environment by running PowerShell scripts before and/or after creating a backup. Custom scripts can be launched either on the Recovery Manager for Active Directory Console machine or on the domain controller side - RMADFE-2281  ADO-218304

10.2.1 Resolved Issues:

• Allow to unselect Console storage immediately as alternative has been configured - ADO-220573
• Large number of scheduled tasks can cause Console, Replication and PowerShell cmdlets to be extremely slow - RMADFE-1837, ADO-242166
• RMAD Portal does not show proper backups - ADO-256164
• Remove a BOM prefix from the script file - ADO-257798
• Error in the web portal logs 'Cannot init EP configuration section' - ADO-273469
• Unpacking the backup and the retention policy may fail if the DC cannot be accessed via LDAP from the RMAD console machine - ADO-279431
• RPC calls to Backup Agent are not retried on RPC_S_SERVER_TOO_BUSY error - ADO-314812
• Misleading 'Unable to map the network share IPC$ on the computer' error message on attempt to map UNC share - ADO-316902
• Installation fails with an invalid error message when using a local windows credential to connect to the remote SQL server - ADO-317818
• 'Insufficient rights' error in the web portal fixed. Addition of a domain is now changed to allow all domain admins by default - RMADFE-2437, ADO-319010
• Online Restore Wizard cannot undelete an object using a non-administrative account. Restoring an object in Online Restore Wizard using a non-administrative account may result in the following error for NT-Security-Descriptor attribute: "Cannot retrieve attribute value(s) from Active Directory. Possible reason: Insufficient access rights." To ignore this error, the NT-Security-Descriptor attribute can be excluded from the list of restored attributes - ADO-293311

10.2 Hotfix 1 Resolved Issues:

• Installation of Quest personal certificates to the local certificate store failed. Receive error message to install Quest certificates later. This should not be required - ADO-274643
• Computer Collection scheduled tasks removed after upgrade to 10.2 if gMSA used as the scheduled task account - ADO-280854
• rmad.db3 file gets overwritten during an uninstall -> install of version 10.2 - ADO-283069
• Cannot retain the uncheck "Global Catalog Servers" option in the Advanced tab of the Computer Collection properties window - ADO-230397
• It will display 'Network access is denied' error in Win2016/2019 if specify account to restore GPO with "domain\username" format - ADO-233623
• Cannot see some advanced objects in the object picker in Online Restore Wizard - ADO-275027

10.2 Resolved issues:

• Security Vulnerability - Sensitive comments embedded within client-side code sent to an end user machine - RMADFE-3244  ADO-218142
• Security Vulnerability - Runtime hardening (SEP, ASLR and other) - RMADFE-3248  ADO-218146
• Full replication fails when a DC is selected for the option 'Unpack each backup upon its creation' in the master console - RMADFE-1858  ADO-218500
• Storage agent settings are not applied on install - ADO-219910
• No progress/wait indication after clicking 'OK' on the 'Add Console…' dialog - ADO-224321
• Backup fails if the Domain Controllers OU has a AzureADKerberos computer object in it as part of Azure AD FIDO deployment - ADO-227903
• Improve documentation with information on number of scheduled computer collections for optimal performance - ADO-232614

Access Violation in the ProcessRequest function and crashes service - ADO-232682

• Remove mutual exclusion mechanism between replication process and restore process - RMADFE-1575  ADO-237972
• Display correct backup info and support restore for Collections with containers (not DCs) - ADO-240580
• Retriable VSS error causes undefined behavior in Backup Agent on retry - ADO-241825
• Modify the configuration to remove collision problems with SHA1, moved to SHA256 - ADO-253913
• Retention policy ignores collection and consider backups of all collections - ADO-259645

10.1.1 HF1 Resolved Issues:

• RMAD console crashes while building comparison report - ADO-240300

10.1.1 Resolved Issues:

• Agent-based online restore can result in lsass process crash - RMADFE-3233  ADO-218222
• Unable to restore AD object when user provides smart card PIN and username hint - RMADFE-3132  ADO-218574
• Configuring a backup schedule is disabled when creating a backup from Recover Manager for Active Directory > Create Backup - RMADFE-3260  ADO-219136
• SCOM pack Get Collections call results in Access denied errors - RMADFE-3025  ADO-220574
• Increasing number of scheduled tasks makes Console, Replication, and Cmdlets extremely slow - RMADFE-1837  ADO-223040
• RMAD console crashed due to missing DLL Microsoft.Xaml.Behaviors.dll - ADO-226682
• After restore a User Object Member Of is different than in Active Directory - ADO-230090

10.2.1 Security Information:

• Do not use SHA1 for key derivation function to generate hash for creation of AES-256 key for backup encryption

10.2 Security Information:

• Eliminate SHA1 signing certificates and only accept SHA256 certificates - RMADFE-2896  ADO-218357
• FIPS: Encrypt credentials stored in Forest Recovery project using AESCryptoServiceProvider instead of TripleDESCryptoServiceProvider - RMADFE-2199  ADO-220948