Automatic Rollback for Change Alerts
Custom Change Alerts can now be created to notify admins when critical changes are detected. Creating an alert begins on the Change History page where the admin can easily add a Alert Job to any saved query. An Alert Job is a workflow with predefined configurable actions and an execution schedule. If data is returned data matching the query's settings when the query is run by the Alert Job the selected actions workflow items are then performed. The action(s) in the Alerting Job workflow can raise real-time alerts for each change detected, send notifications through Microsoft Teams and/or by email, and optionally automatically rollback the detected change(s). Alerts can be added to any query across any connected Azure AD tenants or Active Directory forests.
Custom Reports delivered by email or Microsoft Teams
Custom Reports can now be created and sent to admins when an important change(s) has been detected. Creating a report begins on the Change History page where the admin can easily add a Report Job to any saved query. An Report Job is a workflow with predefined configurable actions and an execution schedule. If data is returned data matching the query's settings when the query is run by the Report Job the selected actions workflow items are then performed. The action(s) in the Report Job workflow can create a report file to export in HTML or CSV formats and send a notification through Microsoft Teams and/or by email. Exported reports can be delivered as link to the Guardian Web Portal where they can be displayed or as an attachment to a notification message. Reports can be added to any query across any connected Azure AD tenants or Active Directory forests. In addition to Change Reporting Cayosoft Guardian now has the ability to export change history records to a file in either HTML or CSV format.
Change History now includes object recreation details
Cayosoft Guardian Change History was reorganized adding the ability to show a unified Change History with change records of a hard-deleted object and the new re-created object added after the delete is rolled-back.
More Protection for legacy Active Directory
Cayosoft Guardian now provides monitoring and protection for On-premises AD Schema, Configuration, and Application partitions. With the new version, change records contain security descriptors in a human-readable format.
More Protection for Microsoft Exchange Mailboxes
A new built-in alerting rule notifies an administrator about mailbox permissions and forwarding rules changes.
Delegation Over Native Recycle Bins
Delegation over on-premises and cloud Microsoft Recycle Bin has added through integration with Cayosoft Administrator. In the Cayosoft Administrator Configuration Console under the Connected Systems configuration, Cayosoft Guardian Integration extension now appears. When this extension is enabled, new Recycle Bin Web Queries are displayed in Active Directory and Microsoft Office 365 Admin Units. Using these Web Queries, you can Undelete deleted objects. With Cayosoft Guardian Integration, administrators can quickly see, understand, and rollback mistakes or malicious changes across the hybrid Active Directory environment within their scope of delegation. Cayosoft Guardian Integration extension provides Recycle Bin web queries and Undelete web action to undelete Active Directory objects and Office 365 users and groups.
An issue has been resolved when a Cayosoft Guardian user signed with an Microsoft 365 account no longer could access Cayosoft Guardian Web Portal after a 24-hour inactivity period.
An issue has been resolved when a backup job might fail with error after upgrade from Cayosoft Guardian version 1.4 or previous version in case this job targets an Active Directory domain in a forest with Exchange extended schema.
An issue has been resolved when a job with modified schedule settings could not be saved.
An issue has been resolved when Cayosoft Guardian might not correctly collect and display changes of the Exchange Online mailbox permissions and Azure Resource Administrators role assignments.
Important: The existing records containing above mentioned changes should not be used for restore.
Cayosoft Guardian now allows all applied filter conditions in the Change History section of the Cayosoft Guardian Web Portal to be preserved as a saved query. Saved Queries provide quick access to a filtered list of changes. A saved query is used in alerting rules and scheduled reports.
|2.1||4989, 7319, 7643||A new Alerting Rule now can be created from a user-defined saved query. A new Change History Record matching the Saved query raises an alert in almost real-time. Raised alert initiates a workflow that might include sending notification messages and even automatic rollback. Alert notifications via email and Teams can be customized and include important details about changes in your environment.||Alerting|
|2.1||7279, 7391,7326||A new scheduled report now can be created from a user-defined saved query. The scheduled report can be sent via email or Teams in HTML or CSV format. A report can be delivered in a message as a link to Cayosoft Guardian Web Portal or as a file attachment to a message.||Reporting|
|2.1||7473, 7315||Instant export of data is now available in the Change History section of the Cayosoft Guardian Web Portal. Data can be exported in HTML, CSV, or JSON format.||Reporting|
|2.1||5367||Now Cayosoft Guardian preserves change history records of an original hard-deleted object and shows them as part of the change history of a new object. This allows to see uninterrupted history of changes in Cayosoft Guardian even original object and re-created object have different unique identifiers within the management system and native auditing tools.||Usability|
|2.1||7002||Recent changes dashboard now shows a graph with a number of alerts.||Usability|
|2.1||7480||Built-in alerts for mailbox permission changes in Exchange Online have been added.||Alerting/Exchange online|
|2.1||7444||Advanced filter supporting OData query language is added on the filters panel in the Change History section of the Cayosoft Guardian Web Portal.||Usability|
|2.1||7508||Changes of AD security descriptors are now presented in a user-friendly format. A built-in alert has been added for DACL changes of an AdminSDHolder object to prevent attack based on a modification of this object.||Active Directory|
|2.1||7408||Support for backup and restore of Schema, Configuration, and Application partitions in the Active Directory forest has been added.
|2.1||6505||Support for backup and restore of booking options for Resource Mailbox has been added.
|2.1||7668||An article describing the permissions requirements for the Cayosoft Guardian service account to collect and restore changes in the Active Directory is now available.||Documentation|
|2.1||4738||Cayosoft Guardian Web Portal now provides enhanced reporting for scenarios where the service encountered errors on start.||Usability|
|2.1||6505||Cayosoft now supports monitoring and restoration of Booking options for Resource Mailboxes.||Exchange Online|
|2.1||7884||Change History records from the Active Directory now include information about an originating domain controller.||Active Directory|
|2.1||7885||Cayosoft Guardian now provides additional information for troubleshooting unexpected account lockout issues. Cayosoft Guardian collects events 4625, 4740, 4767 from the logs on a domain controller and attaches these events data to the related change history records.||Active Directory|
|2.1||5927||During installation Cayosoft Guardian now provides an option to specify installation folder.||Installation|
|2.1||7415||Cayosoft Guardian now provides a user interface to manage Remote PowerShell settings.||Service|
|2.1||4989, 5717, 6384, 7070, 7073, 7219, 7313,7316, 7317, 7320, 7544, 7545, 7556, 7643, 7697||Cayosoft Guardian's user experience improved in several different areas.||Usability|