Entra Password Protection agent version history

This page's changes and edits · All guidance changes

Microsoft's edit · 18 Sep 2023 16:17 UTC

[BULK] - DocuTune - Rebranding of Azure Active Directory to Microsoft Entra

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 0972f5d · +8 −8 lines · also on GitHub

⋯ 14 unchanged lines

1515

1616 ms.collection: M365-identity-device-management

1717 ---

18 −# Azure AD Password Protection agent version history

18 +# Microsoft Entra Password Protection agent version history

1919

20 −To download the most recent version, see [Azure AD Password Protection for Windows Server Active Directory](https://www.microsoft.com/download/details.aspx?id=57071).

20 +To download the most recent version, see [Microsoft Entra Password Protection for Windows Server Active Directory](https://www.microsoft.com/download/details.aspx?id=57071).

2121

2222 ## 1.2.177.1

2323

⋯ 6 unchanged lines

3030 Release date: March 14, 2022

3131

3232 * Minor bugfixes

33 −* Fixed issue with Azure AD Connect Agent Updater not being updated

33 +* Fixed issue with Microsoft Entra Connect Agent Updater not being updated

3434

3535 ## 1.2.176.0

3636

⋯ 5 unchanged lines

4242

4343 Release date: February 22, 2021

4444

45 −It has been almost two years since the GA versions of the on-premises Azure AD Password Protection agents were released. A new update is now available - see change descriptions below. Thank you to everyone who has given us feedback on the product.

45 +It has been almost two years since the GA versions of the on-premises Microsoft Entra Password Protection agents were released. A new update is now available - see change descriptions below. Thank you to everyone who has given us feedback on the product.

4646

4747 * The DC agent and Proxy agent software both now require .NET 4.7.2 to be installed.

4848 * If .NET 4.7.2 is not already installed, download and run the installer found at [The .NET Framework 4.7.2 offline installer for Windows](https://support.microsoft.com/topic/microsoft-net-framework-4-7-2-offline-installer-for-windows-05a72734-2127-a15d-50cf-daf56d5faec2).

⋯ 28 unchanged lines

7777 * The Proxy service now requires that .NET 4.7 is installed.

7878 * If .NET 4.7 is not already installed, download and run the installer found at [The .NET Framework 4.7 offline installer for Windows](https://support.microsoft.com/help/3186497/the-net-framework-4-7-offline-installer-for-windows).

7979 * On Server Core systems, it may be necessary to pass the /q flag to the .NET 4.7 installer to get it to succeed.

80 −* The Proxy service now supports automatic upgrade. Automatic upgrade uses the Microsoft Azure AD Connect Agent Updater service, which is installed side by side with the Proxy service. Automatic upgrade is on by default.

80 +* The Proxy service now supports automatic upgrade. Automatic upgrade uses the Microsoft Entra Connect Agent Updater service, which is installed side by side with the Proxy service. Automatic upgrade is on by default.

8181 * Automatic upgrade can be enabled or disabled using the Set-AzureADPasswordProtectionProxyConfiguration cmdlet. The current setting can be queried using the Get-AzureADPasswordProtectionProxyConfiguration cmdlet.

8282 * The service binary for the DC agent service has been renamed to AzureADPasswordProtectionDCAgent.exe.

8383 * The service binary for the Proxy service has been renamed to AzureADPasswordProtectionProxy.exe. Firewall rules may need to be modified accordingly if a third-party firewall is in-use.

⋯ 32 unchanged lines

116116 * Each DC agent will periodically delete mangled and stale service connection points in its domain, for both DC agent and proxy service connection points. Both DC agent and proxy service connection points are considered stale if its heartbeat timestamp is older than seven days.

117117 * The DC agent will now renew the forest certificate as needed.

118118 * The Proxy service will now renew the proxy certificate as needed.

119 −* Updates to password validation algorithm: the global banned password list and customer-specific banned password list (if configured) are combined prior to password validations. A given password may now be rejected (fail or audit-only) if it contains tokens from both the global and customer-specific list. The event log documentation has been updated to reflect this; see [Monitor Azure AD Password Protection](howto-password-ban-bad-on-premises-monitor.md).

119 +* Updates to password validation algorithm: the global banned password list and customer-specific banned password list (if configured) are combined prior to password validations. A given password may now be rejected (fail or audit-only) if it contains tokens from both the global and customer-specific list. The event log documentation has been updated to reflect this; see [Monitor Microsoft Entra Password Protection](howto-password-ban-bad-on-premises-monitor.md).

120120 * Performance and robustness fixes

121121 * Improved logging

122122

⋯ 33 unchanged lines

156156 * Both DC agent and proxy installers will now support in-place upgrade when upgrading to future versions.

157157

158158 > [!WARNING]

159 −> In-place upgrade from version 1.1.10.3 is not supported and will result in an installation error. To upgrade to version 1.2.10 or later, you must first completely uninstall the DC agent and proxy service software, then install the new version from scratch. Re-registration of the Azure AD password protection Proxy service is required. It is not required to re-register the forest.

159 +> In-place upgrade from version 1.1.10.3 is not supported and will result in an installation error. To upgrade to version 1.2.10 or later, you must first completely uninstall the DC agent and proxy service software, then install the new version from scratch. Re-registration of the Microsoft Entra password protection Proxy service is required. It is not required to re-register the forest.

160160

161161 > [!NOTE]

162162 > In-place upgrades of the DC agent software will require a reboot.

⋯ 10 unchanged lines

173173

174174 ## Next steps

175175

176 −[Deploy Azure AD Password Protection](howto-password-ban-bad-on-premises-deploy.md)

176 +[Deploy Microsoft Entra Password Protection](howto-password-ban-bad-on-premises-deploy.md)

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 08:37 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.