Password Reset Server

PRS 2.2.000014 Release Notes

Bug Fixes and Usability Enhancements

• Added searching and paging to the Excluded Users and the Exclude By Group pages.
• Added performance enhancements for very large environments and also diagnostic pages.
• Fixed issue where expired users could no longer use Change Password.
• Fixed Logon Integration issue with Microsoft Windows Server 2012 Domains.
• Fixed issue where disabled users could reset their passwords if they were enrolled.

PRS 2.2.000013 Release Notes

Usability Issues and Bug Fixes

• Added options on the Windows Logon Integration to display and change the URL that the client will connect to.
• Fixed issue where if a user used the Change Password option and the password did not meet domain requirements the user got locked out.
• The Change Password button is no longer visible if the user is not a member of a Security Policy.
• Error messages on Change User Password now include just the error message and diagnostic information is written to the System Log
• Fixed issues where users would see a reset session expired error if they clicked the Reset Password button multiple times.
• Fixed bug where only 15 Security Questions could be displayed.
• Fixed IE7 and Chrome display issues for the user home page.
• Fixed incorrect warning on the Dashboard if Telesign was not selected as the multifactor phone provider.

PRS 2.2.000012 Release Notes

Main Focus: Features and Enhancements

• Added new Security Policy option for forcing users to change their password after enrolling.
• Role Assignment Administration and Audits now include the user’s domain username in addition to their display name for greater detail.

Bug Fixes:

• Fixed error on the Change Password page when the domain selector is disabled.

PRS 2.2.000012 Release Notes

Main Focus: Features and Enhancements

• Added new Security Policy option for forcing users to change their password after enrolling.
• Role Assignment Administration and Audits now include the user’s domain username in addition to their display name for greater detail.

Bug Fixes:

• Fixed error on the Change Password page when the domain selector is disabled.

PRS 2.2.000009 Release Notes

Main Focus: Localization Enhancements

• End users can choose an available language during the reset process from the Windows Logon client.
• Administrators can set a default language for the Windows Logon client.
• Users are automatically redirected to the Change Password page if they fail to login due to an expired password.

Bug Fixes:

• Fixed error that could occur during the reset process when the friendly domain name was not resolvable.

PRS 2.2.000008 Release Notes

Features and Enhancements:

• Admins can create scripts or applications to automatically import users' answers or keep them up to date through a new API.
• Users can now change their password if they know their current password, instead of having to answer all the reset questions or go through a password reset in Windows.

Bug Fixes:

• Fixed bug where if a user resets their password, they could still receive an expiration email alert if the Active Directory synchronization had not yet run.
• Fixed issue where a validation message warning that no OUs were selected could show incorrectly when selecting OUs in a Security Policy.
• Fixed issue where the Fully Qualified Domain Name showed instead of the friendly name in the Reset Password initial dialog.
• Fixed bug where exceptions could be thrown during enrollment, test runs, or resets if the security policy is altered while a user is confirming their identity.

PRS 2.2.000002 Release Notes

Features and Enhancements:

• Added versioning to Windows Logon integration client (future releases will allow a direct upgrade through the MSI without requiring uninstall and reinstall).

Bug Fixes:

• Fixed security issue where certificate problems could allow the user to use the Windows Logon integration client to get to Internet sites.
• Fixed security issue where the user could get to Windows Explorer (only if using special inputs) through the Windows Logon integration screen.
• Fixed issue where the Windows Logon integration screen could hang if the user closed the Password Reset Server browser too quickly.
• Fixed issue where recreating Windows Logon integration configuration files failed on new installations (caused error in log).

PRS 2.2.000001 Release Notes

Main Focus : Security Fixes

• Fixed issue where a user could access the explorer menu through the Reset Password process on the Login Integration screen. (Reported by customer and fixed within 24 hours)
• Fixed issue where if the connection from the web server to the database was lost, a user could access the explorer menu through the Reset Password process on the Login Integration screen.
• Fixed issue where machines with the Login Integration installed could lock up when logging out multiple times through Remote Desktop.

2.2.000000

Features and Enhancements:

• Added Secure LDAP support for Active Directory.
• Added support for Authenticated SMTP.
• Improved performance of User Administration screen when displaying a large number of users.
• Improved password reset logging.

Bug Fixes:

• Fixed display issues in IE7.
• Fixed issue where disabled users might not be re-enabled upon synchronization.
• Fixed issue in Security Policy where a child OU might become unselected upon re-saving.
• Improved email address validation.

2.1.000019

Features and Enhancements:

• Added option to separately backup the application and database.
• Added User Password Expiration Report.
• Moved the Organization Unit Synchronization log into the Domain Synchronization log.
• Removed the Remote Installation feature. Existing users will still be able to access this feature through the Legacy Remote Installation link under Windows Login Integration.

Bug Fixes:

• Fixed bug where email validation did not allow a hyphen in the domain.

2.1.000015

Features and Enhancements:

• Allowed users to select their own images for image questions.
• Made determining the locked out status more fault tolerant.
• Allowed admins to install licenses with a future start date.
• Added AppSetting that allows users to log the IP Address of users when they are accessing through an internal proxy.
• Added context based help links throughout the application.

Bug Fixes:

• Fixed bug where the password expiration date could not be determined on some domains.
• Fixed bug on diagnostics page where the page would timeout when the server uses a proxy.

2.1.000013

Bug Fixes:

• Fixed bug where accounts in certain domains could not be unlocked.
• Fixed bug where expiration notifications were sent to users in inactive security policies.
• Fixed bug where if the application pool was recycled during a password reset, the user would get an error.
• Fixed bug where pressing enter in Internet Explorer during reset steps could sometimes cause an exception.
• Fixed bug where duplicate answers could sometimes be inserted.
• Fixed bug where styling would be incorrect on some pages when using an SSL load balancer.

2.1.000010

Main Focus - Answer Import

Features and Enhancements:

• Added bulk import for answers.
• Admins can now upload a spreadsheet or XML file to pre-populate user's answers.
• Created new "Clear Answer" permission to allow Admins to clear all answers for a question.

Bug Fixes:

• Fixed bug where users weren't put into OU's during the first synchronization run.

2.1.000001

Main Focus - Ease of Use

Features and Enhancements:

• Added MSI installer for the initial install.
• Added instructional video for getting started with Password Reset Server to the Dashboard.
• Added the configuration setting to force HTTPS.
• Updated licensing to allow one free User if there is no installed license for testing purposes.
• Improved the Windows Login Integration to first load a temporary page and allow HTTP if HTTPS is not enabled.
• Added the ability to manually set an AppSetting to only synchronize certain OUs.

Bug Fixes:

• Fixed display issue where Minimum Correct Answers would display 'All' even when another number was sent.

2.1.000000

Main Focus - Reporting and Question Thresholds

Features and Enhancements:

• Reporting
  • Reports page allows administrators to view standard reports, or to create reports with SQL and charting options. Reports can use a variety of 2D or 3D charts.
  • Reports can be displayed with all their associated data points (grid).
  • Reports can be placed into categories, and these categories and their reports can be organized using drag and drop.
  • Reports can have rows with different colors based on data values.
  • Reports can be created using parameters such as start date, end date, and user ID.
• Question Thresholds on Security Policies
  • Ability to lower the Question threshold on enrollment so users are able to skip questions and answer the ones pertinent to them.
  • Ability to allow the user to get only a percentage of questions correct for confirming their identity during a reset.
• Bulk Exclusion can be done based on the Active Directory group.
• Added the ability to change the local administrator's email address.

Bug Fixes:

• Fixed issue with manual and scheduled Backups.

2.0.00007

Main Focus: Domain Synchronization Performance

Bug Fixes and Enhancements:

• Fixed memory issue and increased efficiency for synchronizing larger domains.
• Updated progress bars to better show synchronization details.
• Added Admin Notification for when the application is running in 32-bit mode.
• Added offline upgrade option to the installer.

2.0.00001

Bug Fixes:

• Updated the Unlock Account button to validate if the privileged domain credentials does not have permission to unlock the account.
• Fixed issue with retrieving the Expiration Date from AD if a user has never had that value set.

2.0.000000

Main Focus - SMS and ProxStop™

Features and Enhancements:

• Added multi-factor SMS question.
• Added support for ProxStop™ as an alternative phone and SMS service provider.
• Added configuration setting to allow logging in using Domain\User without showing the available domains in a drop down list.
• Added a second image set of landmarks for the image question.
• Added ability to Clear Answers on a question to force users to re-enroll for that question.
• Improved the UI on selecting users for Security policies.
• Ability to change the Local Administrator’s password.

Bug Fixes:

• Improved validation message for certain domain policy errors when attempting a password reset.
• Active Directory synchronization supports non-standard characters in Organization Unit name.

1.1.000016

1.1.000015

1.1.000012

1.1.000011

Main Focus: Responding to customer requests to make GINA extension deployable through Group Policy and to provide password expiration notifications

1.1.000002

1.1.000001

1.1.000000

1.0.000000