Random verification codes can be sent to users by e-mail and SMS. Users must enter the code to
reset their password or unlock their account. Verification codes can be used for two-factor
authentication, or to authenticate users that have not enrolled (automatic enrollment). See the
Verification Tab
topic for more information.
The database can be moved to SQL Server for better security, fault tolerance, and accessibility.
See the
Moving to SQL Server
topic for more information.
Users are automatically deleted from the database approximately one week after they are deleted
from Active Directory. See the
Deleting Users
topic for more information.
Can enforce the Active Directory password history and minimum age policies for password resets.
See the
Reset Policies
topic for more information.
Improved handling of password changes across domains and forests.
More secure enrollment record format. APR V2 records are upgraded to the new format when the
system maintenance task runs at 1:00 AM.
More secure communication protocol. The updated protocol uses 2048-bit RSA keys, has better error
detection, and uses fewer CPU cycles.
E-mail alerts are sent in the user's preferred language if possible. The preferred language is set
after a successful enroll, reset, unlock, or change. See the
Triggers
topic for more information.
Can send all Password Policy Enforcer queries to a specific Password Policy Server. See the
Netwrix Password Policy Enforcer
topic for more information.
Default database updated to SQL Server Compact 4.0 SP1. See the
Working with the Database
topic for more information.
Improved multithreading performance when querying the database.
Replaced the 32-bit Password Reset Server service with a 64-bit version.
REST API to remind (or require) users to enroll. See the
Persuading Users to Enroll
topic for more information.
Page content and layout changes for small mobile phone screens. See the
Responsive Content
topic for more information.
Icons are in Scalable Vector Graphics (SVG) format. These look sharper when resized, and make it
easy to change the color scheme. See the
Change Icon Colors
topic for more information.
Improved encryption of temporary data.
Improved handling of e-mail addresses with unusual characters.
Updated response headers to improve compatibility with some browsers, and to reduce the likelihood
of user-submitted information being cached.
Answer fields are masked during Reset and Unlock.
Performance improvements to the page generator and request parser.