ARS 7.4.1 public hotfix - multiple fixes (4319854)

This hotfix resolves the following issues.

Please note that if you are not severely affected by the issues that this hotfix addresses, it is recommended that you install the next full release of One Identity Active Roles that will include these fixes.

91848

In an ERFM environment, when a Master user object is enabled for Skype for Business, the MSRTC-OriginatorSID property of the shadow user account, is populated with the Shadow account SID instead of Master account SID.

128052

An Unknown error (0x80005000) is logged when a shadow account is either deleted or does not exist and you try to modify the Exchange and extension attributes of the Master user account.

167953

A quota exceeded error is displayed when a policy object is exported with large change history data.

200308

Approval on temporal membership setting to remove a user from a group on the Web Interface strips the ScheduledOperation-SetTime control so that the member is removed on approval.

200325 

In Active Roles Web Interface, when the language selected is other than English, then the Exchange Online Properties buttons are not available when the Federated and Synchronization Identity tenant type is configured for Azure.

135231, 172667

In Active Roles Management shell, during Get-QADUser or GetQADObject command execution for Azure Exchange online mailbox user, the exchange online attributes are displayed though DontUseDefaultIncludedProperties parameter is specified. 

Defects:

91848

128052

167953

200308

200325 

135231, 172667

Please download the hotfix here.

IMPORTANT NOTE

• After applying the hotfix l It is mandatory to clear the Active Roles service Schema cache. To clear the cache, follow Solution 3 in the Resolution section of the KB article https://support.oneidentity.com/active-roles/kb/100421.
• While executing GetQADObject cmdlet for Azure Exchange online mailbox user, to retrieve exchange online attributes with -IncludeAllProperties flag, add the heavy attributes control in Get-Request command as shown below. function

onPreGet($Request)

{ $Request.PutInControl("43",0,0) }

For more information, refer Active Roles SDK document.

• While executing Get-QADUser cmdlt, to fetch the exchange online heavy attributes, set -IncludedProperties or -IncludeAllProperties flags with control "43".

Example 1

Get-QADUser -Control @{"43"=1} -IncludeAllProperties | select * | fl

Example 2

Get-QADUser -Control @{"43"=1} -IncludedProperties ExchOlsubmissionContLength,ExchOlmDBUseDefaults | select * | fl

Example 3

Get-QADObject -IncludedProperties ExchOldelivContLength,ExchOldeliverAndRedirect,ExchOlmDBOverHardQuotaLimit - Control @{"43"=1} | select ExchOldelivContLength,ExchOldeliverAndRedirect,ExchOlmDBOverHardQuotaLimit 

Installing this hotfix

To install the hotfix

1. Copy the supplied file Active_Roles-7.4.1-SOL312652.exe.rename to the One Identity Active Roles 7.4.1 computer.
2. Remove the .rename file name extension.
3. Run the file Active_Roles-7.4.1-SOL312652.exe and follow the on-screen instructions to complete the hotfix installation.