Release Notes
The Release Notes provide a summary of new features and changes since the last release. The Release Notes can help you evaluate whether an upgrade is necessary. Also refer to Specops Client Release Notes.
Current Release
6.9.23313.2
Other changes
- Installation was not working on Windows Server 2022.
Released November 28, 2023
Previous Releases
6.9.22286.1
Fixed issues
- Account unlocks from Helpdesk were incorrectly shown as password resets in reporting (in version 6.9.22042.1 there was a similar fix in Helpdesk user history).
Released November 08, 2022
6.9.22179.1
Changes
- Creating self-signed certificate for SPR server improved. Key size is 2048 bits, signature is SHA-384, the certificate gets a Subject Alternative Name and a friendly name in the certificate store.
Fixed issues
- Fixed misleading text for Italian when setting new password.
Released June 29, 2022
6.9.22102.1
Fixed issues
- Client installation step was not working.
Released April 20, 2022
6.9.22042.1
Fixed issues
- Account unlocks from Helpdesk were incorrectly shown as password resets.
New functionality
- Support to send notifications when Helpdesk does account unlocks.
Released February 14, 2021
6.9.21291.1
Changes
- Made compatible with Specops Client 7.16, to use WebView2 based Secured Browser on Windows 10 x64 and newer.
Released November 02, 2021
6.9.21105.4
New functionality
- Added support for the “category to show first” setting if used together with Specops Password Policy 7.6 and newer.
Fixed issues
- Improved compatibility with TLS 1.2.
- Sending mobile verification code could result in an error message “Object reference not set to an instance of an object.”
Other changes
- Password Reset web.config had debug compilation enabled.
Released May 27, 2021
6.9.20314.1
New functionality
- Added support to send email notification after user has changed password.
Released November 10, 2020
6.9.20281.1
Fixed Issues
- The “Generate password” button was visible from HelpDesk, but failed if a regular expression was present in the password policy. That button is now removed if a regular expression is present.
Released October 20, 2020
6.9.20252.1
Improvements/Fixed Issues
- Made SPR honor minimum age, for users affected by Specops Password Policy. Old behavior can be enforced using registry setting.
- Fixed inconsistent icon on wizard buttons.
- Hid Generate password button from Helpdesk if rules are disabled.
- Exporting to CSV did not escape properly, causing problems if name contained comma character.
Released September 22, 2020
6.9.20134.1
Fixed Issues
- Users locked out from SPR could get “An Error occurred when serving the request” instead of a message saying the user is locked out.
- Close button from secured browser could fail to close the window.
- Localization tool could get error message “Recursive call to Automation peer API is not valid.”
- From reporting, an error message “Maximum Message Size Quota has been exceeded” could unexpectedly occur.
Released May 18, 2020
6.9.20070.1
Fixed Issues
- Password resets could be handled incorrectly for users affected by password policy containing minimum password age setting, depending on time zone.
Released March 19, 2020
6.9.19283.1
Fixed Issues
- Operations could fail for users running the latest version of Specops Password Policy settings due to incompatibility with latest policy setting files. This could result in the following error message: “An item with the same key has already been added.“
- Message about disallowed reset because of unfulfilled password age requirement could show negative time (“Must not change in -x minutes.“)
New Features
- Added audit event to user history when helpdesk verifies user.
Released October 10, 2019
6.9.19045.2
New Features
- Added support for Captcha to prevent username harvesting. For more information, see Configure Captcha.
- Added support for sending a Mobile Code (SMS) using Twilio’s text message sender service.
-
Added support for sending a Mobile Code (SMS) using GOV.UK’s text message sender service (UK only).
Note: For more information on how to configure text message senders, see Configure text message senders.
Released February 18, 2019
6.8.18298.2
Fixed Issues:
-
Windows update (KB4462928), in environments where deprecated versions of TLS/SSL (such as SSL and TLS 1.0) are disabled, resulted in the following error on the Specops Password Reset web, and administration tool: “The client and server cannot communicate, because they do not possess a common algorithm.”
- Note: Before updating Specops Password Reset, ensure that you running Microsoft .Net framework version 4.7.2 or later.
Released October 31, 2018
6.8.18242.1
Fixed Issues:
- Added missing audit log when a helpdesk user unlocks an account.
- If password dictionaries were disabled during a password reset, the server side rule validation could result in an error message.
Released September 6, 2018
6.8.18106.1
Other
- Support for the renamed Specops Client (formerly known as the uReset Client). See Client release notes for updates to the Specops Client.
Released April 19, 2018
6.6.18094.1
Fixed Issues
- Server and Web: In scenarios where the user had more than one custom question defined, their answers to Secret Questions during helpdesk verification were not validated against the correct question.
Released April 4, 2018
6.6.18067.1
Fixed Issues
- Policies using Mobile Code (SMS) (only) did not display the password rules in the user’s selected language.
Released March 13, 2018
6.6.17034.1
Fixed Issues
- Fix issue where locked out users could not unlock their account if the minimum password age rule was defined.
Released February 7, 2017
6.4.61221.1
Fixed issues
- Improved handling and logging for “helpdesk password reset” email notifications, when the target user had no e-mail address defined.
- Importing license failed in some scenarios.
Other changes
- Specops Password Reset now acknowledges the ”minimum password age” password policy rule (if defined). While this may be a drawback for users attempting password resets, it was a necessary change to comply with changes in Microsoft’s password APIs. For a better user experience, it is recommended to use Specops Password Policy, which permits password resets, but restricts password changes when the “minimum password age” is defined.
Released January 3, 2017
6.4.60914.1
Fixed issues
- When used in delegated security mode, helpdesk initiated password resets could result in access denied message
- Resetting failed attempts with QandA could fail if HelpDesk was configured to use delegated security
- Custom translation to English based languages, such as en-GB was not working
Released September 22, 2016
6.4.60823.1
Fixed issues
- Security updates from Microsoft (described in Microsoft Security Bulletin MS16-101) introduced a regression in the way password changes take place in Windows. As a result, password resets and changes in Specops Password Reset started to fail. To solve this, the Specops Password Reset Server has been changed to use LDAP for password resets, as opposed to the traditional Win32 API.
Released August 31, 2016
6.4.60516.1
Fixes issues
- The event id used during user unlock was incorrect.
- Toggling between password rules and phrases could fail (If Specops Password Policy and Specops Password Reset were used together).
Other changes
- New step in the Setup Assistant for downloading the client installation files.
- New step in the Setup Assistant for installing the client ADMX file.
Released May 26, 2016
Version 6.4.60308.1
Released March 10, 2016
Version 6.4.60303.1
Released March 3, 2016
Version 6.4
New Features
- The installation for Specops Password Policy, Specops Password Sync, and Specops Password Reset is now separated to 3 different Setup Assistants.
- Changed helpdesk search using Ambiguous Name Resolution.
- Customizable attributes to search the helpdesk.
Fixed Issues
- Fixed an issue where the delegate security button in admin tool did not grant access for the SPR service account to read value of attribute msDS-User-Account-Control-Computed. During reset password, this could result in failure to detect if user was locked out or if the password had expired.
- The send SMS button, in the enroll and reset wizard, can only be clicked once before entering a code to prevent spam clicking.
- If the useonlydefaultlanguage registry key was used, the enrollment reminder page was displayed in Czech when English was specified as the default language.
- Autoenrollment did not work when QA and SMS was enabled in the policy.
Released February 24, 2016 | 6.4.60217.2
Version 6.3 Maintenance Release 4
New Feature
- Full Windows 10 support.
Fixed Issues
- If a user was moved in Active Directory during User Count, the Password Reset Server crashed.
- The Specops ADUC menu extensions failed to load in certain environments.
Released August 18, 2015 | Build number: 6.3.50813
Version 6.3 Maintenance Release 3
New Feature
- Added an option to use LDAP APIs to reset passwords, rather than Win32. In most cases, this should not be used. If for some reason this is required, Specops Product Support can assist you.
Fixed Issue
- Web: The Password Reset web page displayed the yellow Dictionary rule, when it should have been hidden.
Released May 11, 2015 | Build number: 6.3.50506
Version 6.3 Maintenance Release 2
New Feature
- Windows 10 support for the Specops Password Client and the Administration Tools.
Fixed Issues
- When an administrator, in a multi-domain environment attempted reporting from all domains, they received an error that the domain configuration from the registry cannot load.
- A “failed to send enrollment” event was wrongfully logged for users with no configured enrollment reminder.
- If more than one domain was configured, license counting could fail for domains other than where the Specops Password Reset server was installed.
Released April 17, 2015 | Build number: 6.3.50414
Version 6.3 Maintenance Release 1
Fixed Issue
- Setup Assistant: When an administrator started the Specops Setup Assistant on a server outside of the domain, the Setup Assistant failed to initialize.
Released August 6, 2014 | Build number: 6.3.40731
Version 6.3
New Features
- Passphrase policy support when used in conjunction with Specops Password Policy 6.3.
- New setting that allows you to send the mobile verification code to a email address instead of a phone number.
- Separate event log messages are now generated for unlock account and password reset.
- Traditional and Simplified Chinese language support.
- Improved search performance when processing users in Active Directory.
Fixed Issues
- Helpdesk Portal: When an administrator reset a user’s password, the confirmation message was not displayed.
- Helpdesk Portal: If the delegated security model was used, members of the helpdesk admin group were able to force users to re-enroll, even if the active directory permission was set to prohibit that.
Released June 17, 2014 | Build number: 6.3.40617
Version 6.2 Maintenance Release 1
New Features
- Korean and Romanian language support.
- Specops Password Reset server installation compatibility with Windows Server 2012 R2.
- Better search logic in the helpdesk yielding faster and more precise results.
Fixed Issues
- Configuration Tool: When an administrator edited the domain configuration, the Configuration Tool would crash if they closed and reopened the window.
- Configuration Tool: When an administrator selected Email Settings in the navigation pane, the “License reminder recipient” was not fully visible in the SMTP settings.
Released December 5, 2013 | Build number: 6.2.31205
Version 6.2
New Features
- Improved stability in the mobile apps.
- Improved error messages in the Specops Password Reset web pages.
- Small improvements in the Setup Assistant.
Fixed Issues
- Fixed a problem with changing the password for user accounts required to “change password on next logon.”
- Fixed a problem with editing the event notification email templates in the Group Policy settings.
Released June 25, 2013
Version 6.1
New Features
- Support for running the Specops Password Reset components on Windows Server 2012 and Windows 8.
- Mobile apps for Android, iPhone and Windows Phone makes it possible to reset your Active Directory password from your smartphone.
Fixed Issues
- Fixed a problem when using Specops Password Reset over multiple domains.
- Fixed a problem where it would sometimes take a long time to display the Windows logon prompt in Windows 7 if there were no contact with the domain.
Released November 27, 2012
Version 6.0
New Features
- Improved reporting capabilities.
- Support for co-existence with other software which doesn’t play nice with the Windows credential provider architecture.
Fixed Issues
- Fixed a problem where the reporting component would get confused about GPOs with the same name from different domains.
- Fixed some minor issues with the Specops Password Reset Server Service.
Released June 4, 2012
Version 5.0
New Features
- New architecture based on Windows Identity Foundation permits using Specops Password Reset across multiple domains.
- Added support for enrolling users with Specops Password Reset from outside the internal network.
Fixed Issues
- Several fixes to the error handling in various components.
- Help desk tool should no longer generate an error if used with a user account for which no Password Reset policy has been configured.
Released June 30, 2011
Version 4.1
New Features
- New option in the registry allows the Helpdesk to answer a user secret question for manual authentication of users who call in.
- The server can now be configured to use a custom attribute as the source of a user’s email address rather than using the default attribute.
Fixed Issues
- Overriding the SMTP settings in a GPO now has an effect in the product.
- Leaving the “Confirm password” text box empty when resetting a password is no longer allowed.
Released November 18, 2010
Version 4.0
New Features
- Rewritten setup for an easier, intuitive installation The Setup Assistant has been rewritten to make the installation even easier and intuitive.
- Reporting A reporting web page has been added that can be used to see enrollment, reset and license statistics in the system.
Fixed Issues
- Helpdesk stopped responding when searching for all users In an environment with a lot of user accounts the Helpdesk stopped responding if the result was too large.
- Alt-Gr now works in the secured browser The Alt-Gr button didn’t work in the secured browser, making it impossible to type some kind of characters.
Released May 5, 2010
Version 3.2.92
New Features
- Support for installing the client component on a Citrix server [Client].
Fixed Issues
- Trying to “Unlock account and reset password” for a user affected by the Default Domain Policy (or a fine-grained password policy) would generate the error “The referenced account is currently locked out” [Server].
Released September 9, 2009
Version 3.2.915
Fixed Issues
- The “Show characters” option in the Enrollment and Reset web pages doesn’t work when using Firefox.
- If the “Passwords must meet complexity requirements” option is enabled in the Default Domain Policy, the “Disallow user name in password” rule doesn’t work as expected.
Released June 16, 2009
Version 3.2.912
New Features
- Autoenrollment of users.
- Helpdesk can now be configured to use a delegated security model.
Released May 5, 2009
Version 3.1
New Features
- Improved Setup Assistant to simplify the installation process.
- The “Reset password…” link in the login dialog box can be configured to be available when the computer has no contact with the domain.
Fixed Issues
- Long timeout (10–15 seconds) when entering a wrong answer during password reset. This only happened when DNS reverse lookup (IP address to DNS name) wasn’t configured in the DNS.
Released December 18, 2008