Release Notes
Version 4.8
08 November 2024, 12:26
These release notes provide information about the Safeguard Privilege Manager for Windows release. For the most recent documents and product information, see Online product documentation.
Giving users administrator rights creates security risks but must be weighed against constant help desk calls for basic operations like updating Adobe Reader, Java, or simply changing the time zone on desktops.
Safeguard Privileged Manager for Windows lets you grant selected privileges to users so they can update their own computers, reducing help desk calls while maintaining a secure network. By automating user privilege settings, Safeguard Privileged Manager for Windows keeps users working. This allows you to focus on higher priority tasks, for exceptional resource and time savings.
As a system administrator, you can use Safeguard Privileged Manager for Windows to elevate and manage user rights quickly and precisely with validation logic targeting technology. This provides administrators the ability to create rules that allow administrator-level access to specific applications for specifics users. You can also enable your end users to request elevated privileges for specific applications through Self-Service and Instant Elevation.
NOTE: Customers upgrading from previous versions of Safeguard Privilege Manager for Windows (such as 3.x and earlier) are required to obtain a new license file. For additional information, see Product licensing.
NOTE: The security status of the installation file can become "blocked" after download, inhibiting the ability of the product to be properly installed. For information on detecting and resolving this issue, see KB4268094.
The following is a list of enhancements implemented in Safeguard Privilege Manager for Windows 4.8.
| Enhancement | Issue ID |
|---|---|
|
General security improvements. |
459211 |
The following is a list of issues, including those attributed to third-party products, known to exist at the time of release.
| Known Issue | Issue ID |
|---|---|
|
Some log files are still being created and maintained on the system drive even when Safeguard Privilege Manager for Windows has been installed to a non-system drive. |
618 |
|
Some duplicate records exist in the database and could be optimized. |
624 |
|
Error 1920 encountered during a PM Client installation repair (initiated from Add/Remove Programs), if the PM Client was manually installed. Workaround: Instead of performing a repair, manually uninstall, then reinstall the Client. |
721 |
|
CSEHostEngine.log grows quickly. |
824 |
| Known Issue | Issue ID |
|---|---|
|
There is an issue with sending data from clients to the database installed with the Safeguard Privilege Manager for Windows Console if there is an older Privilege Authority or Safeguard Privilege Manager for Windows Client running on the network. Workaround: Ensure the following:
|
1568 |
|
Some files may still exist on your computer even after the Console or Client are uninstalled. |
1837 |
|
After uninstalling the Safeguard Privilege Manager for Windows Console from a computer that also has the Safeguard Privilege Manager for Windows Client installed, the Start menu shortcut to the Safeguard Privilege Manager for Windows User Guide will fail to open the guide. Instead, the shortcut prompts the user for the location of the PAClient.msi file. Workaround: Uninstall and re-install the Client. Alternatively, reinstall the Console. |
1960 |
| Known Issue | Issue ID |
|---|---|
|
Applying a Professional license fails to prevent a rule with an expiration date from expiring. Workaround: After you apply the license, open a rule that is going to expire, make your changes, and save the rule. |
932 |
|
Applying a Professional license to an installation with an expired trial license can result in the loss of previously saved policies. |
535 |
| Known Issue | Issue ID |
|---|---|
|
Sometimes when configuring the reporting feature, the connection to the web service fails on the last step of the wizard. Workaround Try again by clicking Previous, then Next again. |
834 |
|
If you select a remote Safeguard Privilege Manager for Windows Server on a computer with a firewall enabled, you may encounter a Database Connection error when using the Reporting or Discovery and Remediation functions. Workaround: Add the following firewall exceptions to the remote Safeguard Privilege Manager for Windows Server:
|
1105 |
|
If Windows Firewall is configured to deny connections (the Don’t allow exceptions and Block all connections options are chosen in all other operating systems), Safeguard Privilege Manager for Windows does not automatically override the settings when configuring firewall exceptions during the Safeguard Privilege Manager for Windows Server setup. Workaround: Add an exception to the firewall manually for %ProgramFiles(x86)%\One Identity\Safeguard Privilege Manager for Windows\Console\Data Collection Service\PADataCollectionWinSvc.exe. |
1657 |
|
If the administrator is prompted to reboot the computer after installing a prerequisite while using the Privilege Manager Server Setup wizard: Once the computer is rebooted and setup wizard continues, the administrator must click the Back button to reenter any of the Server Email Notification Configuration settings they entered prior to the reboot. |
1980 |
|
If the administrator is changing the selected Safeguard Privilege Manager for Windows Server that the Console points to by setting up a Server on the local computer: After the wizard and Safeguard Privilege Manager for Windows Server Configuration are closed, the administrator may have to reopen the dialog. If the reporting screens still appear to be pulling data from the previously selected server, the administrator has to make sure the newly configured Safeguard Privilege Manager for Windows Server is the currently selected server. |
1981 |
| Known Issue | Issue ID |
|---|---|
|
The Self-Service Elevation Request Prompt does not appear for an MSI Windows installer file. Workaround: Launch the Self-Service Elevation Request Form via the Elevate! button. You must configure the corresponding Self-Service Elevation Request settings. |
1311 |
|
Some processes do not trigger the Self-Service Elevation Request Prompt even though they trigger User Account Control (UAC). |
1674 |
|
On Windows Server 2012 R2, if your client is running on a system with UAC turned off: When you right-click the Safeguard Privilege Manager for Windows icon in the Windows system tray and select the View status of advanced features dialog, the Self-Service Elevation Request and Self-Service Elevation Request (ActiveX installations) options should display as N/A (Not Applicable). Instead, it will incorrectly display an Enabled status. |
1865 |
| Known Issue | Issue ID |
|---|---|
|
A login failure occurs when connecting to the database and web service if you are using a SQL Server from an untrusted domain. Workaround: Use the database server on the same trusted domain network environment. |
698 |
|
When configuring reporting to use an existing SQL Server, clicking Previous in the Configure Database and Services step navigates you to an incorrect wizard step. Workaround To navigate to the Select an Existing SQL Server step, click Next. |
832 |
|
Sometimes changing settings on the Advanced Policy Settings tab of a Group Policy Settings page results in the Network path was not found error once you save the changes to the Group Policy Object (GPO). Workarounds:
|
1671 |
|
Currently, Safeguard Privilege Manager for Windows displays no feedback message when a user is denied run privileges due to a Blacklist setting. |
124 |
| Known Issue | Issue ID |
|---|---|
|
The Elevation Activity Report does not display correctly when exported to an .rtf file. Workaround: Export your Elevation Activity Reports to different file formats. |
728 |
| The Console report shows the event time according to the current local time zone. | 948 |
|
Some reports exported in Excel contain columns that do not display on the generated report page in the Safeguard Privilege Manager for Windows Console. |
1738 |
|
Resultant Set of Policy (RSoP) output is empty or blank. For a workaround if the client is installed on your computer and RSoP is failing
|
1881 |
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center
