Release Notes for Universal Policy Administrator CE 24.3(v3.5)

1.1 Support for Dark Theme UI

The UPA user interface now features a dark theme.

1.2 Support for Windows Server 2022

UPA now supports Windows Server 2022.

1.3 Support for SAML\OIDC Authentication

UPA now supports SAML\OIDC authentication integration.

1.4 Support for Native GPO Preferences

UPA now allows you to configure and manage various Preference settings for Windows operating systems. For more information, see Managing Windows Preferences.

1.5 Support for Importing ADMX Templates

UPA now allows you to set Group Policy settings for applications using 3rd party ADM files. Administrators can import ADMX/ADML files from a Central Store on the DC or Gateway machine server into the UPA Web console. For more information, see Support for ADMX Templates.

1.6 Support for Basic Migration from GPA to UPA

UPA now allows you to seamlessly transition Group Policy Objects (GPOs) from the Group Policy Administrator (GPA) platform to the Universal Policy Administrator (UPA) environment. For more information, see Migrating from GPA to UPA.

1.7 Support for Gold Standard Universal Policy

UPA now allows you to create a Gold Universal Policy that serves as a template for other universal policies. For more information, see Managing Gold Universal Policy.

1.8 Support for RSoP Analysis and Planning Reports

UPA now allows you to view RSoP Analysis and Planning Reports for both Cloud and Domain OUs. For more information, see Viewing RSoP Analysis Reports and Adding and Viewing RSoP Planning Reports.

1.9 Support for Conflict Analysis Report

UPA now allows you to view a Conflict Analysis Report that shows any other Universal Policies that have the same settings as the selected Universal Policy, but have one or more values on that setting that differ. For more information, see Conflict Analysis Report.

1.10 Support for Universal Policy Differences Report

 UPA now allows you to view the Universal Policy Differences report between the current version of a specific universal policy and the last checked-in version, the last approved version, any two versions, and the version present in the GPO in AD. For more information, see Universal Policy Differences Report.

1.11 Support for Universal Policy Settings Report

UPA now allows you to view the Settings Report of the universal policies. For more information, see Universal Policy Settings Report.

1.12 Support for Security Filtering to an Universal Policy

UPA now allows you to manage the scope of policy application to selected users or groups with Security Filtering. For more information, see Managing Security Filtering.

5.1 Importing Recent GPO Setting Changes Fails

Issue: When importing AD GPOs into UPA, changes made to a GPO may not replicate if AD replication has not completed when the domain has multiple DCs.(Defect #604352)

Workaround: Add ‘<add key="preferredDC" value="Machine Name"/>’ in the Gateway web.config file in the appsettings section.

5.2 UPA Experiences Delayed Operations

Issue: When adding more than 100 ADMX policies to a single Universal Policy in UPA, the operation time significantly increases. This delay affects various actions such as saving, checking in, and submitting policies for approval, making these operations noticeably slower.(Defect #602400) (Defect #603389)

Workaround: Consider adding fewer (no more than 50) ADMX policies to a single Universal Policy.

5.3 Root Delegation OU Creation Conflict

Issue:A root-level Delegation OU cannot be created if a root-level Cloud OU with the same name already exists. (Defect #533856)

Workaround:Ensure that no duplicate names exist by renaming the existing root-level Cloud OU to a unique name before creating the root-level Delegation OU.

5.4 Domain Management Limitation

Issue:Unable to manage child, trusted, and untrusted domains. (Defect #534641)

Workaround:Configure the domains that cannot be managed in the Hardened UNC Paths Setting. For more information, see Troubleshooting.

5.5 Gateway/Gatekeeper Deletes All Universal Policies

Issue:When UPA 3.5 is uninstalled, the Gateway/Gatekeeper deletes all the Universal Policies. (Defect #586089)

Workaround:Back up the Universal Policies, before uninstalling UPA 3.5 Gateway/Gatekeeper. This product stores the Universal Policies in a git repository on the Gateway machine.

5.6 Custom Configuration File Settings Override Existing Settings Incorrectly

Issue:Custom configuration file settings, particularly those related to yes/no and true/false options, are overriding other existing settings even when the overwrite field is not checked, leading to incorrect application of configurations. (Defect #602085)

Workaround: When adding custom configuration files, it is recommended to use the 'Deploy File Policy' or create a DIA command policy.

5.7 Linked Universal Policies Display Blank Name After New OU Creation

Issue:When you re-import an OU hierarchy, new UPs imported and linked to an OU in that hierarchy may show as a linked UP with no name. (Defect #603170)

Workaround:Wait for the import process to finish, then refresh the OU view. The name should be displayed correctly.

5.8 Unable to Save Planning Policies Configurations in UPA Web Console

Issue: Unable to save added planning policies configurations to the OUs in the UPA web console as UPA admin, when attempting to generate RSoP analysis and planning reports for OU level. (Defect #611020)

Workaround: Ensure required policies are added when generating the report.

5.9 Unable to remove the domain from the UPA web console

Issue:When logged into the UPA web console as a UPA Admin and attempting to remove a domain after successfully setting it up, there is no option available in the web console to remove the domain. (Defect #533855)

Workaround:Ensure not to add the domain twice.

5.10 Display video and animation setting missing the word "not"

Issue: In the Internet Settings preference, under the Security tab in Custom Level settings, the option "Display video and animation on a webpage that does not use external media player" is missing the word "not." (Defect #607152)

Workaround:No workaround.

5.11 Recent Documents Settings not Pre-Selected

Issue:All the settings (check boxes) under Universal Policies tab > Selected UP > Windows Group Policy > Windows Preferences > User Preference > Control Panel Settings > Start Menu > General > Recent Documents for Start Menu (At least Windows Vista) are not pre-selected. (Defect #552156)

Workaround: Manually select the Settings.

5.12 Removing Target UP from Gold UP Does Not Update Source UP Name in UI

Issue:When a UP is removed as a synchronization target from its Gold UP, the target UP does not update in the user interface to reflect that it is no longer a target of the Gold UP. (Defect #608297)

Workaround:To update the old target Universal Policy, check out the UP, then revert the checkout.

5.13 The Hapi Auth Login Group Mappings Issue

Issue: The Hapi Auth login group mappings do not update the local groups. (Defect #611278)

Workaround: Use new ADMX files, with replacement instructions.

5.14 Unable to Save Immediate Task Actions

Issue: The action added to an Immediate Task (At least Windows 7) preference setting is not saved in the computer preference > Control Panel Settings > Scheduled tasks->Immediate Task (At least Windows 7) wizard. (Defect #617021)

Workaround:Use a Scheduled Task (At least Windows 7) setting with the required action.

5.15 Icon File Path Tab Exits on Single Character Input

Issue: In User Preferences under Windows Settings > Shortcuts, the Icon File Path tab exits unexpectedly when a single character is entered. (Defect #617022)

Workaround: Copy the complete icon path and paste it in one action, or place the cursor in the text box every time you type the text.

5.16 Adding Folder Option Preference with Create or Replace Actions Fail

Issue: When you attempt to add a folder option preference with the create or replace action under Computer Preferences >Control Panel Settings > Folder Options, the Web Console displays an invalid warning and does not allow it. (Defect #617020)

Workaround: Using GPMC, create an unlinked GPO in Active Directory with the desired Computer Preferences > Control Panel Settings > Folder Options setting. Then, import that GPO into a new Universal Policy. You can modify the Universal Policy with other settings as needed.

5.17 Least Privilege Accounts Cannot Install Agents in Hybrid Mode

Issue: The runtime LPA account cannot be used to add an agent in hybrid mode. Only a domain admin account can add such a computer in Active Directory. (Defect #620051)

Workaround:To add one or more agents in hybrid mode, change the domain runtime credentials to a Domain Admin user. Add the agent(s), then revert the credentials back to a Least Privileged Account. To set the credentials, go to the Organization view in the Web console, select the domain you are adding the agent into, and set the read and write credentials.

5.18 Loss of Organizational Unit Links When Importing or Exporting a Group Policy Object

Issue:When a Group Policy Object (GPO1), is linked to an Organizational Unit (OU1) in Active Directory, importing the GPO into Universal Policy Administrator as a Universal Policy (UP1) and subsequently exporting UP1 to a new GPO (GPO2) results in GPO2 being linked to OU1. However, the original link between GPO1 and OU1 is removed. (#671121)

Workaround:

5.19 Error Logging In to Linux Agent with Active Directory Accounts in BUILTIN Groups

Issue:When you attempt to log in to a Linux agent using an Active Directory account that is a member of a BUILTIN group, an error message appears. This issue occurs if the domain users group includes members with special characters. (#634129)

Workaround: No Workaround.

5.20 Missing ADMX Template Notification

Issue:When you import a Universal Policy with unsupported Windows security settings, some Universal Policies do not display the "Your system is missing some ADMX policy templates" message. (#675015)

Workaround: No Workaround.