Adaxes Q&A - Recent questions and answers

Answered: Is there any way to display an output in browser without logging it?

Thu, 08 Oct 2026 16:43:34 +0000

Hello,

Unfortunately, thre is no such possibility.

Answered: Performance issues with many individual read permissions to business units

Thu, 08 Oct 2026 09:12:01 +0000

Hello,

First of all, you are using an old build of Adaxes 2025.1 that has known issues. There were issues specifically dedicated to business unit membership rules. We recommend you to proceed with upgrading to Adaxes 2025.1 Update 5 or the latest version.

Upgrade instructions

What’s New 2025.1

What’s New 2026.1

Answered: Does Adaxes automatically fail over to another domain controller when the one in use goes offline?

Mon, 05 Oct 2026 16:08:54 +0000

Hello Leonardo,

Is the behaviour described in that 2014 thread still valid in the current version of Adaxes?

Yes, it is still valid as described in the help article.

if Adaxes is already connected to DCnode1 and DCnode1 goes offline, does Adaxes detect it and switch to DCnode2 automatically?

Yes, it switches automatically.

Is availability checked on every connection or only at service startup?

It is performed whenever a request is executed from Adaxes towards the domain. It can be something manual (e.g. updating object properties) or automatic (e.g. actions performed by a scheduled task).

How long does the switch roughly take (timeouts, retries), and is a service restart ever required?

The switch is performed instantly.

when the domain is registered by name only and the DC in use becomes unreachable, does Adaxes re-discover another DC on its own, and how quickly?

By default, Adaxes relies on the Domain Controller locator algorithm to locate domain controllers for a managed domain. That is what gives Adaxes available domain controllers if the Softerra.Adaxes.Service.dll.config file is not updated accordingly.

Is it supported to point Adaxes at such an endpoint, either in the domain registration or in allowedDomainControllers, instead of the individual DCs? If not, what is the recommended approach to get automatic failover?

Unfortunately, there is no such possibility. Specifying DCs in the Softerra.Adaxes.Service.dll.config file is the only option. Pay attention that all the required ports must be open for all the corresponding DCs: https://www.adaxes.com/help/AdaxesNetworkUsage.

Answered: Change of SOA of mail users, groups and contacts - does Adaxes understand this?

Mon, 05 Oct 2026 09:27:17 +0000

Hello,

I'm wanting to perform the retirement of the last Exchange server in an installation, but I need to adjust the SOA (Start of Authority) of mailboxed users, as well as a bunch of distribution groups and contacts.

With Adaxes, there is no need to change the SOA after retiring your last on-premises Exchange server. Everything can keep working just fine. For more details about Adaxes functioning after the procedure and recommended actions, have a look at the following article: https://www.adaxes.com/questions/16903/does-adaxes-function-after-decommissioning-exchange-server.

Does Adaxes understand the "onPremisesSyncBehavior/isCloudManaged" change on the onprem objects?

The attribute does not influence Adaxes functionality. If you are still going to change the SOA, you will also need to make sure that only the corresponding objects are actually updated by your workflows. However, updating the attribute might influence your Adaxes licensing. With the current settings, if you register a Microsoft Entra domain and a synchronized Active Directory domain in Adaxes, synchronized users will only be counted once toward the license limit. With the update you mentioned, it will be two separate accounts consuming two Adaxes licenses.

Answered: Prevent adding of disabled users as group members (defined as membership rule)

Thu, 01 Oct 2026 08:39:43 +0000

Hello,

A) have automation that checks all group membership rules and removes disabled users sub-rules?

It can only be done using a custom PowerShell script. Unfortunately, we do not have anything like that, but the following article should be helpful: https://adaxes.com/sdk/IAdmGroup2.

B) prevent the addition process via business rule etc?

Unfortunately, there is no such possibility. Business rule do not trigger upon membership updates based on rule-based groups settings. The behavior is by design and cannot be changed.

Answered: SelfPasswordReset — "Continue" button (ReturnUrl redirect) missing since (Adaxes 2026.1)?

Fri, 18 Sep 2026 15:25:02 +0000

Hello,

Thank you for pointing out the behavior. We confirm that this is an issue in Adaxes. It will be addressed in one of the future releases. Unfortunately, there is no workaround for it. We apologize for the inconvenience.

Answered: User indirect reporting

Fri, 18 Sep 2026 14:27:16 +0000

Hello,

Thank you for clarifying. Unfortunately, there is no such possibility. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

As a workaround, you can use a dynamic business unit with the membership rule like below in the assigned scope of your security role. For details on creating dynamic business units, have a look at the following tutorial: https://www.adaxes.com/help/CreateDynamicBusinessUnit.

Answered: M365 User Account vs Application Account

Wed, 16 Sep 2026 08:19:34 +0000

Hello,

What permissions are needed for the User Account?

The account must be assigned the Global Administrator or both the User Administrator and Exchange Administrator roles in Microsoft Entra. Unfortunately, there is no possibility to be more granular about permissions in case of a user account.

Can we restrict permissions more with a User Account instead of an Application Account?

With all the limitations Microsoft are introducing for their APIs, it is highly recommended to use an application account. Also, it is very likely that user accounts will be decommissioned for such connections.

Answered: Is there a way to export Business Unit query based rules?

Mon, 14 Sep 2026 19:07:14 +0000

Hi,

had the same issue a while ago and created this to export them into JSON and then create HTML overview

Can not paste it directly, as I hit the 35k char limit :D

Script can be found here: https://privatebin.net/?37b7b643171217ab#9uLcsNSR3hM4EkCf9wTVaSizjTn9MVH7ALi5dD4crQf6

Answered: Adaxes Services Administration User onboard automate process

Mon, 14 Sep 2026 08:39:43 +0000

Hello,

For information on how to automate user provisioning in Adaxes, have a look at the following tutorial: https://www.adaxes.com/help/AutomateUserProvisioning. If this is not what you meant, please describe the desired workflow in as much detail as possible with screenshots and live examples. You can post them here or send us at support@adaxes.com.

Answered: Exchange Hybrid Retirement

Tue, 08 Sep 2026 08:12:10 +0000

Hello,

There is no need to change the source of authority when you decommission your last on-premises Exchange server. The corresponding attributes will remain in your AD schema and Adaxes will use them whenever required for synchronized accounts. However, certain things still need adjustment in Adaxes. For details, have a look at the following article: https://www.adaxes.com/questions/16903/does-adaxes-function-after-decommissioning-exchange-server.

Answered: Different "From" address for Password Self-Service emails based on user's OU

Mon, 07 Sep 2026 12:13:58 +0000

Hello,

Unfortunately, there is no such possibility. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Can you share how I would be able to return the litigation hold date, owner and notes values if the script returns true?

Wed, 26 Aug 2026 16:37:17 +0000

Hello,

What exactly do you mean by return the litigation hold attribute values? Please, describe the desired behavior in all the possible details with live examples. Pay attention that the referenced script is to be executed in a condition, not action.

Answered: Script to check Exchange Online Litigation Hold status for multiple users?

Wed, 26 Aug 2026 09:17:38 +0000

Hello,

Unfortunately, we do not have a script for checking the feature directly in Exchange Online. However, the Litigation Hold script from the following article checks the feature via Adaxes resources: https://scripts.adaxes.com/check-whether-mailbox-feature-is-enabled. The script works just fine for mailboxes located in Exchange Online that can be managed in Adaxes. However, it only applies to the mailbox of the target object.

Answered: Reset Security Questions

Mon, 24 Aug 2026 15:14:43 +0000

Helllo,

That is something you can do in the Administration console:

Launch Adaxes administration console.
In the Console Tree, expand the Adaxes service node.
Expand Configuration / Password Self-Service and select Statistics.
Wait for the Enrollment report to generate.
Right-click the required user and then click Disenroll in the context menu.

Also, users can just reenroll themselves in the web interface via the corresponding option in the Password self-service card.

Duplicate delegate entries when modifying calendar permissions via Adaxes

Wed, 19 Aug 2026 20:19:37 +0000

We're on Adaxes 2026.1 - v3.18.25007.

We're seeing duplicate/wrong entries when viewing or modifying a user's calendar permissions via Exchange → Delegation → Calendar access. The same delegate shows up multiple times in the list. This is occurring for multiple users.

We've rebooted the Adaxes servers with no change.

We want to know:

Is this a known issue? Would updating to Update 4 - v3.18.25229 resolve it?

Answered: I am looking for assistance with integrating Adaxes with our ITSM

Thu, 13 Aug 2026 09:11:09 +0000

Hello,

Out of the box, Adaxes does not integrate with third party software. However, if the software has an API, it should be possible to send requests from Adaxes to it and vice versa using custom scripts. For Adaxes API, have a look at our SDK: https://adaxes.com/sdk.

Answered: Mailbox creation in one of our OUs doesn't work

Mon, 10 Aug 2026 09:12:49 +0000

Hello,

According to the error, user creation failed because the Password property is set as required, but was not specified during user creation. Making a property required is possible using property patterns. the following tutorial will be helpful: https://www.adaxes.com/help/MakePropertyRequiredAndSpecifyFormat.

Answered: Web interface logs - view more than sign in logs

Thu, 06 Aug 2026 09:10:19 +0000

Hello,

The error only occurs when a user attempts to access a web interface they are not allowed to sign in into. At the same time, option Hide error details and remaining attempts on sign-in failure must be disabled.

However, the attempt does not create a log record in Adaxes. Thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Missing UI Text Translation for Password Reset Error

Fri, 31 Jul 2026 08:57:23 +0000

Hello,

Yes, that is correct. The thing is that the message is returned by Active Directory. It does not come from Adaxes and that is why it is not available in the corresponding UI texts.

Answered: REST API — can't set displayName (and owners) on an Entra distribution group

Wed, 29 Jul 2026 15:05:55 +0000

Hello,

The behavior is expected. In case of Microsoft Entra groups, you should only set the cn attribute in your requests. There is no possibility to set the displayName one.

As for owners and group members, it should work just fine. Please, provide the full script you are suing in TXT format. Should you face any errors/warnings, please, provide screenshots. Also , please, provide a screenshot of the Multi-server environment dialog. The dialog displays how many Adaxes services you have and what their versions are. For information on how to view it, see https://www.adaxes.com/help/MultiServerEnvironment. You can post the details and screenshots here or send them to support@adaxes.com.

Answered: Export user list from group for delegated users

Fri, 24 Jul 2026 08:59:10 +0000

Hello Simone,

It is only required that the Export operation is enabled and configured accordingly in the web interface settings. The following tutorial will be helpful: https://www.adaxes.com/help/ConfigureAndOrganizeOperations.

Answered: User creation in Adaxes 2026.1

Wed, 22 Jul 2026 11:45:22 +0000

Hello,

When copying a user in the Adaxes web interface, you can select groups to which the new account will be added. For details, have a look at the Allow to preview and modify section of the following tutorial: https://www.adaxes.com/help/AllowUsingTemplatesForUserCreation/#allow-to-preview-and-modify.

Answered: Deprovisioning Question

Wed, 22 Jul 2026 09:22:55 +0000

Hello,

Are you executing a custom command to deprovision user accounts? If that is correct, the only option is to use a parameter. For details, have a look at step 5 of the following tutorial: https://www.adaxes.com/help/CreateCustomCommand.

Answered: Adaxes Logging Database

Mon, 20 Jul 2026 13:17:21 +0000

Hello,

Unfortunately, there is no such possibility. Only MS SQL and Azure SQL databases can be used as external ones for Adaxes logging. Currently, there are no plans to add support for other SQL databases.

Answered: Portal Form - Read only field

Tue, 14 Jul 2026 14:51:33 +0000

Hello,

That is correct. The behavior remains the same on the user creation form. The only option is to remove the required property from the form and set it somehow else (using property patterns, predefined fields, etc.).

Answered: Username query string parameter no longer works on Sign-in page (worked in 2023 version)

Thu, 09 Jul 2026 14:35:26 +0000

Hello,

Was this intentionally removed from the Sign-in step for security reasons?

Yes, that is correct.

Is there any supported alternative to pre-fill or bypass the username step on Sign-in?

Unfortunately, there is no such possibility and there are no plans for anything like that.

Answered: Web Interface on Domain B fails to connect to Adaxes Service on Domain A

Thu, 09 Jul 2026 09:45:35 +0000

Hello,

Thank you for the provided details. The issue can occur in such a setup in case domain B is not managed in Adaxes. To remedy the issue, try to do the following on the computer in domain B where the web interface component is installed:

Navigate to the folder where the web interface is installed. By default, the folder is C:\Program Files\Softerra\Adaxes 3\Web Interface\App.
Open the appsettings.xml file with a text editor.
Locate the configuration\adaxes.web.ui XML element.

Set the lookupServiceDomainName attribute to domain A.

<adaxes.web.ui adaxesConfigurationSetId="{93294e43-4d1e-41bd-984b-cba6b570a748}" lookupServiceDomainName="domainA.com">
 <trace enabled="false" filePath="${basedir}/adaxes.webui.trace.txt"/>
</adaxes.web.ui>

Save the file.
Check whether the issue persists.

Answered: Adaxes Logging - Portal vs Backend

Wed, 01 Jul 2026 13:34:07 +0000

Hello,

Unfortunately, there is no such possibility. Currently, we do not have plans to add such features. However, thank you for the suggestion. We have forwarded it to the corresponding department for consideration.

Answered: Password Reset Workflow and UI

Mon, 29 Jun 2026 16:23:56 +0000

Hello,

Unfortunately, there is no such possibility in Adaxes 2023.2. However, starting from Adaxes 2025.1 you first need to enter a valid username. Only after that there is a possibility to start the verification for password self-service. On the username step, brute force protection settings apply. For details about the settings, have a look at the following tutorial: https://www.adaxes.com/help/PreventBruteForceAttacks.

Answered: Can Adaxes run on Azure VM to manage EntraID?

Fri, 26 Jun 2026 13:35:00 +0000

Hello,

Adaxes components can only be installed on computers joined to an AD domain. Unfortunately, there is no possibility to perform the installation on Entra-joined devices. To keep using Adaxes, you will need at least a placeholder AD domain.

Answered: Scheduled Task Pre and Post Actions

Fri, 19 Jun 2026 09:02:16 +0000

Hello Sam,

Unfortunately, there is no such possibility. Each object is processed by a scheduled task separately. You can use corresponding conditions in the task itself or business rules triggering before the corresponding operation (e.g. Before updating a user) to perform the required validation.

Answered: Group type in e-mail function?

Tue, 16 Jun 2026 12:43:07 +0000

Hello,

Unfortunately, the only option here is to use a custom PowerShell script. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Add AES in account options?

Thu, 11 Jun 2026 09:19:05 +0000

Hello,

Unfortunately, there is no such possibility. The checkboxes you pointed out belong to a different property, Kerberos encryption types (schema name msDS-SupportedEncryptionTypes). As such, you can just use a property pattern to set the checkboxes when new accounts are created. The default value should be set to 24.

Answered: Entra ID Extension Property

Wed, 10 Jun 2026 10:52:51 +0000

Unfortunately, managing such attributes is not supported in Adaxes. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Adjust default value expressions

Fri, 05 Jun 2026 14:39:32 +0000

Hello,

Unfortunately, there is no such possibility. The values depend on the property type. For example, Lockout Time (schema name lockoutTime) is of the Large Integer type. As such allowed values for the property are Unspecified, Never, and a date. There is no possibility to replace any of those with a custom text.

For your information, it is possible to enable displaying certain statuses for accounts. For example, you can enable the Account is locked out status. As a result, when viewing locked accounts, the status will be displayed in the header. For accounts that are not locked out, there will be no status in the header.

Answered: Unable to modify Exchange settings for resource accounts migrated to Exchange Online

Tue, 02 Jun 2026 08:47:04 +0000

Hello,

It is not only about the permissions in a security role. You need to make sure that they are granted over the proper objects, to the proper accounts and assigned over proper scope. The following tutorial should be helpful: https://www.adaxes.com/help/GrantPermissionsToPerformExchangeTasks.

Answered: Staged Upgrade Approach & Version Compatibility Query - Adaxes 2025.1

Mon, 01 Jun 2026 10:08:51 +0000

Hello,

The approach will not work and is highly not recommended. First of all, Adaxes 2026.1 is not compatible with 2025.1. Also, stopping Adaxes services sharing common configuration will produce a lot of errors and might lead to unpredictable results. The only recommended option to test the new version before upgrading the entire Adaxes environment is to install Adaxes 2026.1 on a separate computer. This way you can keep using Adaxes 2025.1 and test the latest version separately. Once the testing is completed, you can just uninstall Adaxes 2026.1 from the separate computer and then upgrade your Adaxes environment if suitable.

Answered: Are Adaxes custom attribute usable in rule based groups

Thu, 28 May 2026 14:50:06 +0000

Hello,

Unfortunately, there is no such possibility. Adaxes custom attributes cannot be used in criteria for search queries. This applies to all places including rule-based groups.

Answered: script development and SDLC ...

Thu, 28 May 2026 08:46:27 +0000

Hello,

Unfortunately, there is no such possibility. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Answered: Adaxes source of Property Patterns for Country

Wed, 27 May 2026 15:21:43 +0000

Hello,

The list of allowed values for the Country property in the built-in property patterns is predefined in the Adaxes installation. However, you can add/remove values from the list. The two-letter code must match the Alpha-2 code in the ISO-3166 standard. Regarding the CS value in the list, thank you for pointing it out. We have forwarded the information to the corresponding department for consideration.

Answered: Are Exchange Online-only MailContacts expected to be visible in the Adaxes directory picker?

Wed, 27 May 2026 10:55:25 +0000

Hello,

Are Exchange Online-only MailContacts expected to be visible in the Adaxes directory picker?

No, they are not expected to be visible. The behavior is by design.

If not, is there a supported way to include these objects in selection (e.g. via custom query or other object type)?

Unfortunately, there is no such possibility. Such objects can only be requested using custom scripts. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Is this limitation related to Adaxes only querying directory objects (AD / Entra), not Exchange recipient objects?

Yes, that is correct.

Answered: Can Adaxes be used without Active Directory?

Fri, 22 May 2026 09:08:39 +0000

Hello,

As of now, Adaxes components can only be installed on computers joined to an on-premises AD domain. There are no plans to change that in the near future. As an option, you can roll out a placeholder on-premises Active Directory domain, join a computer to it, and install Adaxes on the domain-joined computer. Then you can register your Microsoft Entra domain using an application account and manage cloud-only objects in Adaxes. The placeholder domain can reside in Microsoft Entra Domain Services, not only in your on-premises environment.

Answered: Bulk Update of Rule-Based Groups Following AD Restructure

Tue, 19 May 2026 09:09:31 +0000

Hello,

Unfortunately, there is nothing like that. However, the following article might be helpful: https://adaxes.com/sdk/IAdmGroup2.

Answered: SDK Documentation - Export Function or AI Accessibility Improvement

Tue, 19 May 2026 08:47:27 +0000

Hello,

There are currently no plans to implement any exporting function. The documentation is designed to be online, not for export. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

At the same time, it is highly not recommended to use AI for Adaxes scripts. Per our experience it can even write scripts with properties and methods that simply do not exist.

Answered: Update Adaxes from 2023.2 to 2026.1

Wed, 13 May 2026 13:41:38 +0000

Hello,

There are generally no caveats in terms of the upgrade itself. The upgrade process remains the same. However, starting from Adaxes 2025.1, only PowerShell 7 is used to run scripts. If cmdlets from modules that are incompatible with PowerShell 7 are used in scripts, the modules are loaded implicitly in background Windows PowerShell 5.1 processes by the Windows PowerShell Compatibility feature. For details about the feature, have a look at the following Microsoft article: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_windows_powershell_compatibility?view=powershell-7.5. From the Adaxes standpoint, it means that when such a module is imported, the corresponding powershell.exe process is started and will not be closed until Adaxes service is restarted. To remedy the issue, you need to ensure that only module versions compatible with PowerShell 7 are installed on the computer(s) where Adaxes service runs. For the modules that do not have versions compatible with PowerShell 7, we suggest importing/removing modules explicitly in scripts executed in Adaxes using try/finally blocks. This approach will close the external powershell.exe process when the module is removed in the script. For example:

try
{
    Import-Module ServerManager
    
    # Your code here
}
finally
{
    Remove-Module ServerManager
}

Answered: When someone is using a Custom Command, can you detect (PowerShell) who initiated the CC?

Tue, 12 May 2026 08:29:45 +0000

Hello,

When someone is using a Custom Command, can you detect (WIth PowerShell as Action) "who initiated" the Custom Command?

Yes, it is possible to get the initiator of the custom command execution. For details, have a look at the corresponding section of the following SDK article: https://www.adaxes.com/sdk/ServerSideScripting/#getting-information-about-the-initiator.

I found that you can use e.g.: adm-InitiatorFullName to have the full name of the Initiator, is this correct?

Yes, you can use calculated properties to get the initiator-related properties. For more details about the available initiator-related calculated properties, have a look at the corresponding section of the following SDK article: https://www.adaxes.com/help/CalculatedProperties/#operation-initiator.

Where can we find more info about the object: $Context.Initiator and the properties of this object that are available or are only the %Adm-InitiatorFullname%; ...EMail; ...Dn available?

Please, have a look at the description of the Initiator property in the following SDK article: https://www.adaxes.com/sdk/ExecuteScriptContextClass/#Initiator_details.

Answered: When creating a scheduled task, you select Object type. e.g.: User => can you add extra (LDAP) filters

Mon, 11 May 2026 12:07:37 +0000

Hello,

When creating a scheduled task, you select Object type. e.g.: User but can you add an additional filter, eg. where deparment is a value (HR, IT, ...) or where an extensionAttribute15 equals 'Mailbox'?

Unfortunately, there is no possibility to add filtering for the objects in the Activity Scope. However, you can use conditions in the scheduled task itself. For details, have a look at the following tutorial (step 9 seems to be exactly what you need): https://www.adaxes.com/help/ScheduleTasksForDirectoryManagement.

Can you customize these pop-ups and/or can you during the progress of the CC add an extra pop-up when e.g more information from the requestor is needed?

You can configure the confirmation notification for all custom commands or disable it entirely. The notification can be specified on the first step of the custom command creation wizard. To modify the notification for an existing command, select the command in the Administration console and click Edit next to Confirmation in the top right corner.

Unfortunately, there is no possibility to have pop-ups to request additional details during the process of the custom command execution. It can be only done using parameters as the first step before the execution itself. For details on using custom command parameters, have a look at step 5 of the following tutorial: https://www.adaxes.com/help/CreateCustomCommand.

Answered: Adaxes URL locations

Mon, 04 May 2026 08:40:16 +0000

Hello,

The URL is referencing the Password self-service functionality on the Common Sign In page. The base URL of the page is like http://adaxesserver.domain.com/Adaxes. It is set up in the web interface configurator same as other web interfaces.

Answered: Is it planned to support this AD integrated feature with a future version?

Tue, 28 Apr 2026 08:28:41 +0000

Hello,

Currently, there are no such plans. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.