What are the issues corrected in Directory and Resource Administrator 8.1 SP2? (NETIQKB71270)

What are the issues corrected in Directory and Resource Administrator 8.1 SP2?

Why should I install/upgrade to Directory and Resource Administrator 8.1 SP2?

Why Install This Service Pack?

This section outlines the new key features and functions included in service pack 2. Service pack 2 also includes all the features and functions that were delivered in DRA 8.1 SP1.

DRA Provides Advanced Queries Using Virtual Attributes

DRA now allows you to use advanced queries to perform searches on virtual attributes that are not available through regular DRA search functionality. Previously, you could not perform any search on virtual attributes using advanced queries.

DRA Enables 3 GB Switch in the Administration Server

DRA has enabled the 3 GB switch in the Administration server.

Operating systems using Microsoft Windows NT technology provide applications with a 32-bit virtual address space comprising 4 GB of virtual memory. The address space is split so that the application can access 2 GB of address space and the Microsoft Windows operating system accesses the remaining 2 GB .

By enabling the 3 GB switch, 3 GB of virtual address space is available to an application that uses IMAGE_FILE_LARGE_ADDRESS_AWARE in the process header. To enable the 3 GB switch in the Administration server, you need to include the 3 GB switch in the Boot.ini file.

By enabling the 3 GB switch in 32-bit versions of Microsoft Windows, DRA now uses a 3 GB virtual address space, with the kernel components using only 1 GB.

By enabling the 3 GB switch in 64-bit versions of Microsoft Windows, DRA now uses a 4 GB virtual address space, with the kernel components using an infinite amount of virtual address space.

Note: For information about setting the 3 GB switch in the Administration server, see the Installing This Service Pack section of the Release Notes.

Issues Addressed in This Service Pack

The following section outlines some issues that this service pack corrects:

DRA Displays an Error Message When Setting DRA Recycle Bin Properties of a Subtree of a Domain

This service pack resolves an issue where DRA was displaying an error message when setting the DRA Recycle Bin properties of a subtree of a domain. DRA now correctly sets the DRA Recycle Bin properties of a subtree of a domain. (ENG244935)

DRA Does Not Remove Objects from Groups on Secondary DRA Servers

This service pack resolves an issue where DRA was unable to delete objects from groups when connected to any secondary Administration server. DRA now correctly deletes the objects from groups on secondary Administration servers. (ENG244468)

DRA Displays an Error Message When Setting the Send on Behalf Permissions for a User Account Using the Web Console

This service pack resolves an issue where DRA was displaying an error message when you set the Send on Behalf permissions for a user account using the Web Console. DRA now correctly sets the Send on Behalf permissions for a user account using the Web Console. (ENG243787)

DRA Does Not Allow You to Select the Enable and Disable Options for Computer Objects

This service pack resolves an issue where DRA was not allowing you to select the Enable and Disable options on the Action menu for computer objects unless you were a DRA administrator. DRA now allows you to select the Enable and Disable options on the Action menu for computer objects if you have the necessary powers. (ENG243308)

DRA Sometimes Generates an Incorrect SMTP Address

This service pack resolves an issue where DRA was sometimes creating the SMTP address based on the user's domain instead of the Exchange recipient policy. DRA now always generates the SMTP address of the user based on the Exchange recipient policy. (ENG2306090)

DRA Does Not Adhere to the Exchange Server Policy When Enabling the Exchange Mailbox for a New User

This service pack resolves an issue where DRA was not adhering to the Exchange Server policy and was setting the email address to username@company when you enabled the Exchange mailbox for a new user. DRA now creates the email address based on the Exchange Server policy when you enable the Exchange mailbox for a new user. (ENG240812)

The NetIQ Administration Service Terminates Unexpectedly on Administration Servers

This service pack resolves an issue where the NetIQ Administration service was terminating unexpectedly on Administration servers. The NetIQ Administration service is now working correctly on Administration servers. (ENG241386)

DRA Changes the Dial-in Property after You Update the Terminal Service Profile

This service pack resolves an issue with DRA where the Dial-in property changed from "Control access through remote access policy" to "Deny access" after you updated the Terminal Service (TS) profile. DRA now maintains the Dial-in property settings after you update the TS profile. (ENG 242447)

DRA Disables the Properties Option When You Right-Click Any Administration Server

This service pack resolves an issue where DRA disabled the Properties option when you right-clicked any Administration server. The Properties option is now available if you right-click any Administration server. (ENG243013)

DRA Does Not Allow Selection of Multi-Valued Fields When Creating a Custom User Interface

This service pack resolves an issue where DRA was not allowing selection of multi-valued fields when you were creating a custom user interface (UI). DRA now allows you to select multi-valued fields when you create a custom UI. (ENG243156)

DRA Displays Trusted Domains Not Managed by DRA in the Web Console

This service pack resolves an issue where the Web Console was displaying the trusted domains that were not managed by DRA. The Web Console now only displays the domains DRA manages. (ENG242793)

DRA Does Not Connect You to the Best Available Administration Server

This service pack resolves an issue where DRA was not connecting you to the best available Administration server. DRA now connects you to the best available Administration server. (ENG241335)

DRA Does Not Mimic Active Directory User and Computer properties for Distribution List Groups

This service pack resolves an issue where the DRA Exchange Advanced properties were different from the Exchange Advanced properties for Distribution List (DL) groups in Active Directory User and Computer (ADUC). DRA now mimics the ADUC properties for DL groups. (ENG244573)

DRA Does Not Manage Custom Attributes and Exchange Advanced Options in the Web Console

This service pack resolves an issue where DRA was unable to manage custom attributes and Exchange advanced options using the Web Console. DRA now manages custom attributes and Exchange advanced options in the Web Console. (ENG243975)

DRA Displays a Constraint Violation Error Message When You Delete a User using DRA

This service pack resolves an issue where DRA was displaying a constraint violation error message when you deleted a user using DRA. DRA now allows you to delete a user. (ENG248295)

DRA Displays an Operation Failure Message When You Modify the Full Name of Microsoft Exchange 2007 Mailbox-Enabled Users

This service pack resolves an issue where DRA was displaying an operation failure message when you modified the full name of a Microsoft Exchange 2007 mailbox-enabled user. DRA now correctly modifies the full name of a Microsoft Exchange 2007 mailbox-enabled user. (ENG247415)

The NetIQ Administration Service Crashes During Cache Refresh

This service pack resolves an issue where the NetIQ Administration service was crashing during Incremental Account Cache Refresh (IACR) and Full Account Cache Refresh (FACR). The NetIQ Administration service is now working correctly during cache refresh (IACR/FACR). (ENG243088)

DRA Displays Microsoft Visual C++ Runtime Errors in All Administration Servers

This service pack resolves an issue where all Administration servers were displaying Microsoft Visual C++ runtime errors. DRA now does not display Microsoft Visual C++ runtime errors in Administration servers. (ENG248290)

DRA Does Not Enable the POP3 and IMAP4 Mailbox Features For Users With Their Microsoft Exchange 2007 Mailboxes Enabled

This service pack resolves an issue where you were unable to enable the POP3 and IMAP4 mailbox features for users with their Microsoft Exchange 2007 mailboxes enabled. You can now enable the POP3 and IMAP4 mailbox features for users with their Microsoft Exchange 2007 mailboxes enabled. (ENG251695)

Formerly known as NETIQKB71270

Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support (www.netiq.com/support).

Adding Invalid Email Address to Mail-Enabled Contacts using DRA

Using DRA, you can add a new invalid email address for a mail-enabled contact. There is no known workaround for this issue. (ENG247122)

DRA Sometimes Displays an Unhandled Exception Error Message When Assistant Admins View the DRA Recycle Bin Properties

If you are running DRA on Microsoft Windows Vista, DRA displays an unhandled exception error message when AAs with the necessary powers view the DRA Recycle Bin properties. (ENG251361)

For more information, see NetIQ Knowledge Base Article NETIQKB71238, available at https://support.netiq.com/dra, or contact Technical Support at www.netiq.com/support.

The Properties Option is Disabled for a Selected Virtual Attribute When You Are Connected to the Secondary Administration Server

The properties option is disabled on the context menu, toolbar, and task menu for a selected virtual attribute when you are connected to the secondary Administration server as a DRA Administrator or Assistant Admin. To view the properties of the selected virtual attribute, double-click the virtual attribute or view the properties in the details pane. (ENG 252031)

Installing This Service Pack

To benefit from the new features and fixes provided in this service pack, install it on each Administration server computer and on each computer where you installed an Account and Resource Management console or Delegation and Configuration console.

You should have DRA and ExA 8.1 or DRA and ExA 8.1 Service Pack 1 already installed on your computer. To upgrade to DRA and ExA version 8.1 Service Pack 2, install the new version over your existing version. Do not uninstall your existing version.

To install this service pack:

1. Download the NetIQ Directory and Resource Administrator and Exchange Administrator 8.1 Service Pack 2 installation program.
2. Double-click the DRA810_SP2.msi file.
3. Follow the on-screen instructions to complete the installation.

To set the 3 GB switch in the Administration server:

1. Right-click My Computer and select Properties. The System Properties dialog box displays.
2. Click the Advanced tab.
3. In the Startup and Recovery area, click Settings. The Startup and Recovery dialog box displays.
4. In the System startup area, click Edit. This opens the Windows boot.ini file in Notepad.
5. In the [Operating Systems] section, add the following switches to the end of the startup line that includes the /fastdetect switch: /3GB
6. Save the changes and close Notepad.
7. Click OK two times to close the open dialog boxes, and then restart the computer for the change to take effect.

Additional Notes:

DRA 8.1 Service Pack 2 includes all the hotfixes and features introduced in DRA 8.1 Service Pack 1.

To enable support for Microsoft Exchange Server 2007, install Microsoft Exchange Server 2007 Management Tools with Service Pack 1 on computers running Microsoft Exchange Server 2007 and on computers running DRA and ExA 8.1.

DRA performs a full account cache refresh after you install DRA and ExA 8.1 Service Pack 2.

In a scenario where DRA and ExA 8.1 Service Pack 2 is installed on a primary Administration server and DRA and ExA 8.1 or DRA and ExA 8.1 Service Pack 1 is installed on a secondary Administration server, restoration of objects from the DRA Recycle Bin does not function properly. You should also install DRA and ExA 8.1 Service Pack 2 in all secondary Administration servers for the DRA Recycle Bin to function correctly.

You cannot install DRA and ExA 8.1 on a computer running Microsoft Windows Server 2008, but you can install DRA and ExA 8.1 on a computer running Microsoft Windows Server 2003 that is part of a Microsoft Windows Server 2008 domain.

You cannot install the DRA agent on a read-only domain controller or a server core installation of Microsoft Windows Server 2008.

To increase the scalability and improve the performance of DRA and ExA in very large environments, perform the following steps in each Administration server:

• In the left pane, click Configuration Management.
• On the Tasks Menu, click Update Administration Server Options.
• Click Client Options.
• Disable both the Search Options, Allow users to search on all object types and Allow users to search on all columns.

You cannot uninstall DRA 8.1 Service Pack 2.

For more information on the features and fixes in DRA 8.1 SP1, please see the following knowledge base articles:

NETIQKB70989   What are the issues corrected in Directory and Resource Administrator 8.1 SP1?

NETIQKB70990   What are the new features and functions in Directory and Resource Administrator 8.1 SP1?