What are the benefits and features of DRA 9.0 SP1?

  • 7017942
  • 11-Aug-2016
  • 12-Aug-2016

Environment

NetIQ Directory & Resource Administrator 9.0 SP1

Situation

What are the benefits and features of DRA 9.0 SP1?
DRA 9.0 SP1 Release Notes

Resolution

This service pack improves usability and resolves several previous issues.

Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the Directory and Resource Administrator and Exchange Administrator forum on NetIQ Communities, our online community that also includes product information, blogs, and links to helpful resources.

The documentation for this product is available on the NetIQ website in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Directory and Resource Administrator and Exchange Administrator (DRA) NetIQ Documentation page. To download this product, see the Directory and Resource Administrator and Exchange Administrator Product Upgrade website.

What’s New?

The following outline the key features and functions provided by this version of Directory and Resource Administrator and Exchange Administrator (DRA), as well as issues resolved in this release:

New Web Console

The DRA web console has been updated with a more user-friendly interface and enhanced functionality including the following:

  • Support for on-premises Exchange.

  • Support for iOS and Android platforms.

  • Support added for the Chrome, Firefox, and Safari browsers.

  • Multi-factor authentication with support for CAC/PIV smart cards, Windows authentication, and integration with NetIQ’s Advanced Authentication Framework.

  • Access to the audit change history with the ability to export to a CSV file.

In.ServerStatisticInfo Property

This version adds a new property that returns the following two items with the ServerGetInfo operation:

  • Out.Server.CurrentConcurrentOperations returns the current number of running operations.

  • Out.Server.MaxConcurrentOperations returns the maximum concurrent operations allowed.

These items are also available via REST services.

IACRDcBindReTryCount Registry Key

This version adds the IACRDcBindReTryCount DWORD registry key to the registry at HKLM\Software\Mission Critical Software\OnePoint\Administration\Data\Modules\Accounts. When DRA is unable to connect to its preferred DC during an incremental account cache refresh (IACR), it will switch to an available DC. The IACRDcBindReTryCount registry key allows you to specify the number of IACRs to attempt before switching to a new DC. If you update the IACRDcBindReTryCount registry key on the primary server, the update will be replicated to all secondary servers.

Ability to Delete Orphan GUIDs

This version adds a job that when run will locate and delete any GUIDs found in the virtual attributes Root container in the AD LDS for objects that have been deleted from Active Directory. By default this job is configured to never run but you can configure it to run weekly by right-clicking the domain and selecting Adlds Cleanup Refresh Schedule.

Support for LDAP Queries to Find Objects in the NetIQ Recycle Bin

This version adds support for LDAP queries to return user, group, contact, computer, dynamic distribution group, and resource mailbox objects from the NetIQ Recycle Bin.

To include objects from the Recycle Bin, your script must include the following line as part of the input varset: vsInput.put "IncludeRecycleBin", true.

System Requirements

This service pack includes a full version of DRA. For detailed information on hardware requirements and supported operating systems and browsers, see the NetIQ Directory and Resource Administrator and Exchange Administrator Installation Guide.

You can use this service pack to upgrade from DRA 9.0 to 9.0.1. To upgrade a version of DRA older than 9.0, you must first upgrade to 9.0, and then upgrade to 9.0.1. See the NetIQ Directory and Resource Administrator and Exchange Administrator Installation Guide to learn which versions of DRA can be upgraded to 9.0.

Installing This Version

This service pack includes a full version of Directory and Resource Administrator and Exchange Administrator. You can install this version in a clean environment or upgrade an existing installation of DRA 9.0.

For more information about version 9.0, see the Release Notes. For detailed information about installing Directory and Resource Administrator and Exchange Administrator components and modules, see the NetIQ Directory and Resource Administrator and Exchange Administrator Installation Guide.

Installation Considerations

The following considerations apply when you install this version:

  • DRA no longer requires installation of Exchange Server management tools on the Administration server computer. To remotely manage an Exchange Server 2010 or 2013 server, DRA now requires only Powershell 2.0 and Windows Remote Management (WinRM) 2.0 to be installed on the Administration server.

Post-Installation Considerations

The following considerations apply after you install this version:

  • You must apply a license using the Health Check utility or the Delegation and Configuration console. If you use the Delegation and Configuration console, you must log on as the DRA service account to apply the license.

  • To add the first managed domain in the Delegation and Configuration console, you must log on as the DRA service account. After the full accounts cache refresh completes, all DRA Admins have their assigned powers.

Addressed Customer Issues

This release includes the following stabilizing fixes:

  • Resolved an issue where DRA installer could not validate the service account. (ENG339686)

  • Resolved an issue on DRA 8.7.2 servers that caused prolonged IACR runs. (ENG340097)

  • Resolved an issue where DRA 8.7 web console links for Users were broken when the language was changed to French. (ENG334513)

  • Resolved an issue that prevented you from using the web console to add groups to the Accept Messages from or Accept from except lists. (ENG339546)

  • Resolved an issue that caused DRA to stop unexpectedly during an IACR run. (ENG339947)

  • Resolved a web console issue where, after upgrading one of two domains that were located on the same forest, you could not add users from the non-upgraded domain to the upgraded domain. (ENG339773)

  • Resolved an issue that prevented you from creating UI extensions based on user attributes. (ENG339569)

  • Resolved an issue that prevented you from referencing a file from the Replicated Files Path on DRA servers running Windows Server 2008 R2. (ENG327452)

  • Resolved an issue where an IACR would not run after you switch to a different domain controller. (ENG340221)

  • Resolved an issue that triggered an error when accessing the Exchange General, Exchange Advanced\Mailbox Security, or Exchange Advanced\Mailbox Rights property pages. (ENG340039)

  • Resolved an issue that triggered an error when attempting to open a resource mailbox. (ENG340316)

  • Resolved an issue that caused a refresh to last for an extremely long period of time and that caused the server to be unavailable during this time. (ENG340570)

  • Resolved an issue that was causing MMS loading on secondary servers to take an exceedingly long time and to lock the servers. (ENG339624)

  • Resolved an issue where running a custom tool against multiple users from an advance query caused the web console to quit unexpectedly. (ENG339718)

  • Resolved an issue that led to slow performance. (ENG340589)

  • Resolved an issue that caused the expiration time on accounts, when set by the PowerShell command, to be off by one hour. (ENG337763)

  • Resolved an issue that led to the slow membership enumeration of an assistant administrator group. (ENG339127)

  • Resolved an issue that caused DRA to stop unexpectedly while assigning rights to an ActiveView. (ENG340729)

  • Resolved an issue that slowed performance in DRA 9.0 while previewing ActiveViews. (ENG340849)

  • Resolved an issue that prevented administrative assistants from displaying members from trusted domains that are managed in a different Multi-Master Set (MMS). (ENG340764)

  • Resolved an issue that prevent the IDRARestServer.LDAPEnum method from returning cached string properties for objects in the Recycle Bin. (ENG340074)

  • Resolved an issue that caused DRA to miscalculate the number of members in a group. (ENG339138)

  • Resolved an issue that would trigger an error if you rename both a parent and a child OU and then run an IACR. (ENG339866)

  • Resolved an issue that caused an IACR failure on a Ping request even though the DC was available. (ENG340137)

  • Resolved an issue that prevent the group wildcard “Ends with” rule from working as it should. (ENG340691)

  • Resolved an issue that slowed performance in DRA 8.7.2.3 while previewing ActiveViews rules. (ENG340449)