Change log

v3.0.1270 13th November 2024

[FIX] Fixes an issue where the Request.Target parameter was null on a PowerShell audit request
[FIX] Modifies log files to be in UTC time
[FIX] Fixes an issue where the button to select the custom logo displayed by the web app could not be clicked with the mouse
[FIX] Fixes an issue where changing settings on AD JIT Group creation rule doesn't trigger a re-sync
[FEATURE] Adds a new -ForceFullSync parameter to the Set-AmsActiveDirectoryJitGroupCreationRule cmdlet
[FEATURE] Adds support for automatically mapping OpenID Connect and WS-Federation claims for sid and onprem_sid, in addition to the default value of upn. SID claims will take precedence over UPN claims due to their immutability.
[FEATURE] Adds new cmdlets for modifying OpenID Connect and WS-Federation claim mappings. You can now use custom attributes instead of upn for mapping to Active Directory users
[FEATURE] Adds event logging for the use of the Get-AmsLocalAdminPassword cmdlets

[FIX] Fixes an issue where RapidLAPS may not working after performing an in-place agent upgrade to v3.0.1257
[FIX] Fixes an issue where the Access Manager agent can cause high CPU consumption on the logon screen on Windows 24H2 builds
[FIX] Modifies log files to be in UTC time

[FIX] Fixes an issue where an error occurs in the web app when approving a RapidLAPS request without providing a mandatory reason
[FIX] Fixes an issue with the Get-AmsFveRecoveryKey cmdlet
[FIX] Fixes an issue where a PowerShell authorization rule could crash the Access Manager service
[FIX] Fixes an issue where agents < v3.0.1229 with server version v3.0.1229 may change their passwords too frequently
[FEATURE] Adds an option to the Get-AmsLocalAdminPassword cmdlet to get all active passwords from all providers
[FEATURE] Adds support for hiding the various tabs in the web app (Enterprise edition feature)
[FEATURE] Adds new cmdlets for adding JIT group creation rules via PowerShell

[FIX] Fixes an issue where RapidLAPS elevation requests on the RTM version of Windows 11 24H2 would fail to launch the elevated process
[FEATURE] Adds support for macOS 15-based agents
[FEATURE] Adds support for specifying the HTTPS port on the agent configuration command line

[FEATURE] Adds support for Windows 11 24H2 based agents
[FEATURE] Adds support for offering both negotiate and NTLM authenticate to web clients
[FEATURE] Adds support for detecting rollback events on clients and initiating a password re-sync operation
[FEATURE] Adds support for loading licenses from files
[FIX] Fixes an issue where RapidLAPS elevation requests coming from Windows 11 24H2 builds could not be approved
[FIX] Fixes an issue where the installer would fail when a protected connection string was in use
[FIX] Fixes an issue where Negotiate authentication was used even when basic or NTLM authentication was selected
[FIX] Fixes an issue where the 'specific site' or 'specific DC' options on a JIT computer authorization rule were not respected
[FIX] Fixes an issue where a computer JIT fulfillment operation would target a DC in the AMS server's site, rather that the target computer's site
[FIX] Fixes an issue where an agent installed on the same machine as the AMS server could not register with Windows authentication
[FIX] Fixes an issue where DC check in details are not processed for hybrid-joined devices

[FEATURE] Adds support for detecting rollback events on clients and initiating a password re-sync operation
[FEATURE] Adds support for Windows 11 24H2 based agents
[FIX] Fixes an issue where RapidLAPS elevation details from Windows 11 24H2 clients was incomplete
[FIX] Fixes an issue where agent-side issues such as untrusted server certificate or incorrect hostname were missing from the logs and misinterpreted as an 'API not reachable' error

[FIX] Fixes an issue where community edition users may receive and error when trying to use RapidLAPS

[FIX] Fixes an issue where users could not authenticate with WS-Federation
[FIX] Fixes an issue where RapidLAPS UI prompts set in the default policy would duplicate
[FEATURE] Adds support for showing LAPS passwords and BitLocker recovery keys as QR codes that can be scanned with a 2D barcode scanner. (Enterprise edition feature)

[FIX] Fixes an issue where agents using windows auth couldn't authenticate if only windows authentication was enabled in the agent registration config

Review the what's new in v3 article to learn about the major changes since Access Manager v2.

Last updated 8 days ago