Adaxes Q&A - Recent questions

Is there any way to display an output in browser without logging it?

Thu, 08 Oct 2026 16:42:07 +0000

Normally I would use '$Context.LogMessage()' to display something for the user, but this is sensitive so it cant make it to the log.

Performance issues with many individual read permissions to business units

Thu, 08 Oct 2026 09:05:45 +0000

We have about 150 locations, each with their own OU structure and Business Unit in Adaxes. The admins, we delegate access to, may have access over one or several of these OU structures and business units. We recently found that once you have accss to several business units, it starts to significantly impact performance of the user interface. In one example, an admin has access over 25 Business Units, and when opening the Adaxes console (desktop or web), it takes seconds for each domain node or OU to start listing out in the tree view. And everything else is just as slow.

I've done a lot of testing with different concepts of security roles and how to apply them to users/groups, and narrowed it down to one thing: Once I give someone Read, List Object and Read Logging Information over several BUs, with a scope of "This object only" and "Subtree", it slows down the overall interface everywhere, even when just accessing AD and not working with BUs at all. I can keep those security role assignments in place, and just put in another role assignment to grant the same access over all BUs, at the parent container level, and then performance is fine.

But with having 150+ of these BUs, I'd prefer to let the admins only see what they have access to. Is there a known issue/effect behind this and a way to work around it?

Adaxes Version 2025.1 - 3.17.23904.0 Multi-Server setup (3 servers) AD Forest with 4 subdomains and 1 Entra ID tenant

Does Adaxes automatically fail over to another domain controller when the one in use goes offline?

Mon, 05 Oct 2026 15:55:02 +0000

Hello,

We are running Adaxes 3.18.25007.0 with a managed domain example.local that has two domain controllers, DCnode1 and DCnode2. The domain was registered by domain name only (no specific DC), and SSL Usage is set to "Always" in the managed domain properties.

Our use case: during a planned maintenance one of the two DCs was shut down. The Adaxes service did not seem to notice. It kept trying to use the DC that was offline and only worked again after manual intervention. Our goal is for Adaxes to keep working automatically when one of the two DCs is unavailable, whether for maintenance or a failure.

We read the article "Use specific domain controllers" (https://www.adaxes.com/help/UseSpecificDCs/) and this older thread: https://www.adaxes.com/questions/721/adaxes-connects-to-any-domain-controller. In 2014 you explained that allowedDomainControllers is an ordered preference list ("connect to DC1; if DC1 is not available, use DC3..."), and that the domain is marked as not operational if none of the listed DCs is available.

Our questions:

Is the behaviour described in that 2014 thread still valid in the current version of Adaxes?
Failover with an already established connection: if Adaxes is already connected to DCnode1 and DCnode1 goes offline, does Adaxes detect it and switch to DCnode2 automatically? Is availability checked on every connection or only at service startup? How long does the switch roughly take (timeouts, retries), and is a service restart ever required?
Default behaviour without allowedDomainControllers: when the domain is registered by name only and the DC in use becomes unreachable, does Adaxes re-discover another DC on its own, and how quickly?
Load-balanced LDAPS endpoint: our network team provides an LDAPS endpoint behind a load balancer (F5) that balances both DCs. Is it supported to point Adaxes at such an endpoint, either in the domain registration or in allowedDomainControllers, instead of the individual DCs? If not, what is the recommended approach to get automatic failover?

Thank you in advance for your help.

Best regards, Leonardo Bressan

Change of SOA of mail users, groups and contacts - does Adaxes understand this?

Fri, 02 Oct 2026 13:27:44 +0000

Hi! I'm wanting to perform the retirement of the last Exchange server in an installation, but I need to adjust the SOA (Start of Authority) of mailboxed users, as well as a bunch of distribution groups and contacts.

Does Adaxes understand the "onPremisesSyncBehavior/isCloudManaged" change on the onprem objects?

Prevent adding of disabled users as group members (defined as membership rule)

Thu, 01 Oct 2026 08:31:54 +0000

I need to prevent the following situation. Someone defined membership rule that adds direct members to group XYZ. Some of the users then gets disabled, because the emplyee has left the company. The user is removed from all groups during the decomission process, but is then again added to such adaxes-managed group.

Can I: A) have automation that checks all group membership rules and removes disabled users sub-rules? B) prevent the addition process via business rule etc?

PS: I've created business rule that prevents adding disabled users to groups but it works only for interactive additions, not the ones processed via membership rules

SelfPasswordReset — "Continue" button (ReturnUrl redirect) missing since (Adaxes 2026.1)?

Fri, 18 Sep 2026 14:44:21 +0000

Hi,

We use the ReturnUrl parameter on the Self Password Reset page as documented, e.g.:

https://adaxes.contoso.com/webinterface/consoleusers#/SelfPasswordReset?username=jdoe&ReturnUrl=https:%2F%2Fwww.example.com

On our environment running Adaxes 3.15.20916.0 (Adaxes 2023), after a successful password reset the confirmation screen shows a "CONTINUE" button that redirects the user to the URL specified in ReturnUrl (see screenshot here).

On a newer environment running Adaxes 3.18.25007.0 (Adaxes 2026.1), the confirmation screen only shows a plain "Success" message with no button and no redirect at all — ReturnUrl appears to be silently ignored (see screenshot ). We verified this on a stand-alone (non-embedded) page and no request is ever made to the ReturnUrl host after completion, and there is no visible/accessible control ("button") to trigger the redirect manually either.

The "Password self-service ReturnURL allowed hosts" setting is set to * in both Web Interface Configurators, so host restriction is not the cause.

Our question: has the "Continue" button / automatic redirect to ReturnUrl on the SelfPasswordReset success screen been intentionally removed or changed between these two versions? Or is there a new setting required to restore this behavior?

Thanks in advance.

User indirect reporting

Fri, 18 Sep 2026 13:47:34 +0000

Hi, is there a way to make indirect reporting work for user management ? In AD, User A manages user B, User B manages user C. I'd like to make Users managed by B manageable by user A.

M365 User Account vs Application Account

Wed, 16 Sep 2026 08:07:08 +0000

Hi there

What are the differences between using a User Account or Application Account for an M365 connection?

See step 4: https://www.adaxes.com/help/ManageAndAutomateOffice365/

Are both required?

What permissions are needed for the User Account? Can we restrict permissions more with a User Account instead of an Application Account?

Adaxes Services Administration User onboard automate process

Mon, 14 Sep 2026 08:36:49 +0000

Hi Team,

Please share me the- Adaxes Services Administration User onboard automate process details steps to learn

Is there a way to export Business Unit query based rules?

Wed, 09 Sep 2026 07:59:43 +0000

I'm trying to rearchitect my Business Units, and I'd like to see if I can export the rules on the current business units in a simple format so I can reorganize them and create new ones. Or at least get the rules and go from there.

Exchange Hybrid Retirement

Tue, 08 Sep 2026 08:08:50 +0000

I am working on an environment that still has AD attributes on prem but the Last Exchange Server was simply shutdown without the cleanup.

I am reading through the MS guide on moving the SOA for exchange attributes here and was hoping to clarify the effect if we went down this road from Adaxes management.

I am assuming we would set the exchange not managed option for the forest, would we then also need to adjust any business rules and commands that manage attributes or is there some magic linkage in Adaxes that would write the attributes via M365/EOL?

Different "From" address for Password Self-Service emails based on user's OU

Mon, 07 Sep 2026 12:13:00 +0000

We have a single AD domain managed by Adaxes. Users are organized into different OUs, and we need the verification code emails sent by Password Self-Service to use a different "From" address depending on which OU the user belongs to.

Example:

Users in OU-A should receive the verification email from help@domain-a.com Users in OU-B should receive the verification email from help@domain-b.com

We're also planning to publish the web interface on two different domain names, but understand that part can be handled separately (Web Interface Configuration / IIS bindings).

Is there any way to set a different "From" address (and possibly a different SMTP server) for Password Self-Service verification emails depending on the user's OU?

Thanks in advance!

Can you share how I would be able to return the litigation hold date, owner and notes values if the script returns true?

Wed, 26 Aug 2026 16:35:52 +0000

I'd like to return the litigation hold attribute values if the script returns true. How can I do this?

Script to check Exchange Online Litigation Hold status for multiple users?

Wed, 26 Aug 2026 09:13:31 +0000

Hello,

I have a request that is to give an option to run a task that will check a user's litigation hold status in Exchange Online and report back the details for a single or multiple users.

How would I create a script that would connect to Exchange Online, and check the litigationhold status for a group of selected users, and return the hold status properties such as hold date and notes?

Thank you.

Reset Security Questions

Mon, 24 Aug 2026 15:08:23 +0000

Hello

How do I reset a user's security questions? They forgot their answers.

Thank you!

Duplicate delegate entries when modifying calendar permissions via Adaxes

Wed, 19 Aug 2026 20:19:37 +0000

We're on Adaxes 2026.1 - v3.18.25007.

We're seeing duplicate/wrong entries when viewing or modifying a user's calendar permissions via Exchange → Delegation → Calendar access. The same delegate shows up multiple times in the list. This is occurring for multiple users.

We've rebooted the Adaxes servers with no change.

We want to know:

Is this a known issue? Would updating to Update 4 - v3.18.25229 resolve it?

I am looking for assistance with integrating Adaxes with our ITSM

Thu, 13 Aug 2026 08:48:22 +0000

The link in the question from 2023 is no longer showing the data necessary.

Looking for a good guide to get started.

Mailbox creation in one of our OUs doesn't work

Mon, 10 Aug 2026 08:56:09 +0000

Hi,

We have mapped multiple locations to multiple OUs in our Active Directory. The issue is that when creating mailboxes, Adaxes returns an error for exactly one OU. The settings are the same for all OUs in both the web configuration and the Adaxes Administration Console. I don't understand why it isn't working for exactly one OU. here it doesn't work: and another OU, it works: I don't know what i can do.

Web interface logs - view more than sign in logs

Thu, 06 Aug 2026 08:33:45 +0000

I am looking for a way to view the exact reason why someone would see the error below when accessing the web interface.

It would be helpful to see this in a log somewhere to help me find what setting is wrong, so I don't have to rip everything apart to find the reason. The logs available in reports do not show this information.

So I am hoping to find something that says "user attempted to access Web Interface section A, but is lacking the permission XYZ..."

Missing UI Text Translation for Password Reset Error

Fri, 31 Jul 2026 08:48:45 +0000

It isn't possible to translate the following message displayed during the password reset process: "Unable to set password. Make sure the password doesn't repeat any of your previous 24 passwords." This message is not available in the Common Sign-In web interface UI text configuration.

REST API — can't set displayName (and owners) on an Entra distribution group

Wed, 29 Jul 2026 14:25:18 +0000

Environment: Adaxes REST API, called from ServiceNow. Auth via Adm-Authorization header with a service-account token (search + create work). Target: Entra distribution groups (adm-AzureGroupType = 2) in OU=Groups,DC=[domain],DC=onmicrosoft,DC=com.

What works: POST /api/directoryObjects creates the DL fine (resultType: 0) with cn, adm-AzureGroupType: 2, mailNickname, description.

Problem 1 — displayName at create fails: Adding a displayName property to that same create body returns: "resultType": 1, "message": "Illegal modify operation. Some aspect of the modification is not permitted." The object is created but the op reports failure. We've already granted the service account Write on Display Name via its Security Role, and it still fails.

Problem 2 — displayName via PATCH fails: PATCH /api/directoryObjects with: { "directoryObject": "CN=...,OU=Groups,DC=[domain],DC=onmicrosoft,DC=com", "properties": [{ "propertyName": "displayName", "propertyType": "String", "values": ["Renamed"], "operation": "Update" }] } returns HTTP 500 (Method failed: (/restApi/api/directoryObjects) with code: 500).

Questions:

Correct way to set Display Name on a mail-enabled Entra distribution group via REST — at create or via PATCH? Is it Exchange-managed and not settable through the directory-modify path?
Valid operationType values for the PATCH operation field, and is operation/mask required? A working PATCH example that sets displayName would be ideal.
Same for setting owners (adm-ManagedByList) on a distribution group.
What Adaxes Security Role permissions does the service account need to create a distribution group and set its Display Name, owners (adm-ManagedByList), and members specifically which permitted operations / property-write grants (and on which object types/scope)? We want to confirm this isn't a role permission gap before pursuing it as an API issue.

Export user list from group for delegated users

Fri, 24 Jul 2026 08:36:28 +0000

Hello, I have delegated the management of some groups to a restricted set of users through the self-service interface. These users are able to add and remove members from the groups as expected. However, they are currently unable to export the list of group members to Excel or CSV format. As an administrator, I can perform this export without any issue. Could you please advise which permission, role, or configuration needs to be enabled to allow these delegated users to export the membership list of the groups they manage?Thank you for your support.

User creation in Adaxes 2026.1

Wed, 22 Jul 2026 11:36:28 +0000

We have an hybrid situation and the mailbox should be create in Exchange onPrem.

And if we create a new user, we copy another user with groups. The question is, how can i remove one or two AD Groups in this prozess.

I run a powershell script in the prozess after creating the user, but i think the copy of groups from user are the last part of the prozess.

Do you have any ideas?

Deprovisioning Question

Wed, 22 Jul 2026 09:21:12 +0000

I'm building out our user offboarding for HR. Is it possible to have a field in the webform for disabling a user account where they can enter in a ticket number?

I know how to create a custom value but not sure if its possible to add to the webui for offboarding. Currenly they can select the user and it runs though all of the business rules but we need to get the term ticket number into this process for record keeping

Adaxes Logging Database

Mon, 20 Jul 2026 13:12:14 +0000

Hi,

can Adaxes support NoSQL as database for logging?

Are there any plans to support other types of databases in future?

Portal Form - Read only field

Tue, 14 Jul 2026 14:51:26 +0000

Hi team,

is this still not possible? Even with a security role to deny write access to a certain attribute/field?

Username query string parameter no longer works on Sign-in page (worked in 2023 version)

Thu, 09 Jul 2026 14:34:27 +0000

Hi, In our previous Adaxes Web Interface version (2023), we used to pre-fill the username field on the Sign-in page via URL query string, e.g.:

https://.../customWebInterface/SignIn?username=SomeUsername

After upgrading to the latest version, the Sign-in page changed to a two-step flow (username → password), and the username query parameter is no longer read — the field stays empty.

The same username parameter still works correctly on the SelfPasswordReset page (e.g. .../SelfPasswordReset?username=SomeUsername).

So the parameter seems to work only on the Self-Service Password Reset flow now, not on the standard Sign-in flow.

Could you confirm:

Was this intentionally removed from the Sign-in step for security reasons?
Is there any supported alternative to pre-fill or bypass the username step on Sign-in?

Thanks!

Web Interface on Domain B fails to connect to Adaxes Service on Domain A

Wed, 08 Jul 2026 15:16:55 +0000

Hi everyone,

I am deploying a new Adaxes Web Interface instance in a cross-domain environment and running into a connection/discovery issue.

My Scenario:

Domain A: Contains the main Adaxes Service (Backend) and the Configuration Set.

Domain B: Contains the IIS Web Server where I am installing the Web Interface.

The Problem:

During the web interface setup, I am installing the package via command line, specifying only the Configuration Set ID like this:

msiexec /quiet /i "adaxes.msi" ADDLOCAL=AppWebUIFeature ADMWEBSERVICECONFIGSET="<configSetId>"

However, looking at the Web Interface trace logs right after installation, the application constantly attempts to perform a Service Discovery (SCP query) on the local domain where the IIS machine is joined (Domain B), completely ignoring the remote domain. This results in the following loop:

The following Adaxes services found on DomainB: None

SelectNearestServiceException: Adaxes service connection failed.

Question:

Since I am performing a standard installation just by providing the Configuration Set ID, how can I force the Web Interface installer or the application to explicitly look for the Configuration Set on Domain A instead of defaulting to the local Domain B's SCP? Is there a specific installer property or an official way to handle this cross-domain discovery block?

Thanks in advance for your help!

Adaxes Logging - Portal vs Backend

Wed, 01 Jul 2026 13:17:41 +0000

Hi team,

Is there any possibility, or a planned feature, for better logging control?

I would like to show only relevant, useful information in the execution log visible in the portal, but write more detailed/verbose logging into the database itself.

Password Reset Workflow and UI

Mon, 29 Jun 2026 16:23:34 +0000

We recently received some pentest results that flagged the password reset workflow as being vulnerable to user enumeration. When a user attempts to reset a password we get one of two responses.

If the account doesn't exist, "Password self-service is not available for the user" is returned. If the account DOES exist, you're immediately propmted with your security questions. This will allow an attacker to identify valid accounts in the domain.

Are there any setting available in 2023.2 that will chang the UI and workflow to something like, "If the account exists, you will receive a password reset link in your email" and require that link to access the security questions/reset workflow?

Can Adaxes run on Azure VM to manage EntraID?

Fri, 26 Jun 2026 13:33:24 +0000

We are moving away from on-prem in the near future and are wondering if it's possible to install Adaxes on an Azure VM to manage EntraID users + exchange? We are not looking to manage devices.

Scheduled Task Pre and Post Actions

Fri, 19 Jun 2026 09:00:01 +0000

Is it poossibel to run pre and post commands before processing all objects, and then after processing all objects? I have a process that validates if a user account should be disabled, at the moment I have it that if there is an error the account is disabeld by default as a fall back postion, this need to stay in place. However I need to be able to tell if the process failing is causing mass disabling of accounts.

Group type in e-mail function?

Tue, 16 Jun 2026 12:41:40 +0000

I'm setting up e-mail notifications when a group is created or deleted through Adaxes. One thing I'd like to include is what type of group is being created (Distribution, M365, Security), and unfortunately the adm-AzureGroupType doesn't quite work as it only returns a number. I'm sure these correspond to the known types but you cannot translate that in an email. Is there a better variable I can use? Or do I need to go the Powershell route instead of just using email?

Add AES in account options?

Thu, 11 Jun 2026 08:41:52 +0000

Is it possible to have those account options added to Adaxes to support AES in the case of the RC4 depreciation in business rules? Like After Creation, ... modify account options... or define them by default in the Properties?

Entra ID Extension Property

Wed, 10 Jun 2026 10:46:26 +0000

Is it possible to view Entra Extesions Properties via Adaxes. For example in this article it shows how to add a new property to specify what groups shoudl write back to on-prem AD. I want to be able to see groups that have this set in the Entra View

https://learn.microsoft.com/en-us/entra/identity/hybrid/cloud-sync/tutorial-directory-extension-group-provisioning

Adjust default value expressions

Fri, 05 Jun 2026 14:34:52 +0000

I am looking for a way to adjust how properties are expressed, without creating a custom attribute.

For example, the attribute "Lockout-Time" is shown as "enspecified" if they aren't locked out.

However I'd like it to say "User is not locked." I've created custom attributes for things like this, but I was wondering if I could change it without creating a custom attribute.

Thank you!

Staged Upgrade Approach & Version Compatibility Query - Adaxes 2025.1

Mon, 01 Jun 2026 10:04:04 +0000

Hi team,

We are running version 2025.1 - 3.17.23904.0 with three servers and one SQL server. Two of the three servers are used for web access behind a load balancer.

We would like to install the new version on only one server and test it before updating the others.

Could we do the following?

Install the new version on Server 2
Shut down/stop the service on Servers 1 and 3
Test and check Adaxes on Server 2
Then either update Servers 1 and 3, or reinstall the old version on Server 2 if needed

Do you recommend any other approach? Are there any compatibility issues if we revert to the previous version (internal database/settings and SQL logging database)?

Unable to modify Exchange settings for resource accounts migrated to Exchange Online

Fri, 29 May 2026 09:55:45 +0000

No edit button is available within Adaxes for these accounts. The service account has 'Mail Recipients' and 'MailRecipientCreation' permissions assigned. What additional configuration or permissions might be needed?

Are Adaxes custom attribute usable in rule based groups

Thu, 28 May 2026 14:48:56 +0000

I have a custom adaxes attribute that I would like to utlitize in Rule Based groups; it does not look like they are available to select, however.

Example: want something like IF customattribute IS value - then add to group.

Is this possible to make them visable in the Rule Based queries somehow?

script development and SDLC ...

Thu, 28 May 2026 08:45:56 +0000

I am introducing Adaxes to more of my IT team ... and this includes those who are in DevOps and want to put everything in a Git repo.

I'm not an expert on this (SDLC / CICD pipelines ... so my terminology may not be 100% spot on ...

With that said, Is there any support in Adaxes for integration with a SDLC / software deployment system?

I've been a user of Adaxes for years but I've always managed my scripts manually - keeping copies locally in my file system.

Thanks.

Adaxes source of Property Patterns for Country

Wed, 27 May 2026 11:00:10 +0000

Hi,

from where gets Adaxes the list of values prefilled, especially for the Country attribute?

I noticed there is a value of "CS" which is not supported on Active Directory.

Thanks.

Are Exchange Online-only MailContacts expected to be visible in the Adaxes directory picker?

Wed, 27 May 2026 10:52:47 +0000

We are using Adaxes Directory Object Picker for selecting Distribution Group members.

We create external recipients as Exchange Online MailContacts (via New-MailContact).

These contacts:

are visible in Exchange / Outlook GAL
are NOT visible in Adaxes directory picker (even with Contact/InetOrgPerson filters)

Questions:

Are Exchange Online-only MailContacts expected to be visible in the Adaxes directory picker?
If not, is there a supported way to include these objects in selection (e.g. via custom query or other object type)?
Is this limitation related to Adaxes only querying directory objects (AD / Entra), not Exchange recipient objects?

Context: We are using cloud-only contacts (no on-prem AD sync).

Can Adaxes be used without Active Directory?

Fri, 22 May 2026 08:39:04 +0000

We are getting rid of our internal Active Directory. So far the process has gone very well. All of our 250 users have been transitioned to Entra and all of our applicaitons are configured for SSO with Entra. WE LOVE ADAXES (and have recommended it to so many people)! It does such a great job with user management and because we sync our AD accounts to Entra, it also does an excellent job of managing our Entra environment. But what happens when AD is gone. I know that Adaxes can manage cloud accounts, but it still seems to have that reliance on AD. AD is dying a slow death. It's a security nightmare that needs to be eliminated. Keeping an AD environment around to only support Adaxes just doesn't make sense. We have been reluctantly shopping around for a replacement to Adaxes, but nothing compares. Please tells us we can run Adaxes without AD or at the very least you have a cloud only release of Adaxes on the horizon.

Bulk Update of Rule-Based Groups Following AD Restructure

Tue, 19 May 2026 09:08:09 +0000

Hi team,

Due to some restructuring in our native AD, we need to update our rule-based groups - specifically the scope of the rules, which need to be changed from something like OU=old,DC=domain,DC=tld to DC=domain,DC=tld, or to include a new OU in the rule, such as OU=new,DC=domain,DC=tld.

Do you have anything in place for bulk updating these, or a script to manage this? I already looked at the SDKs but could not find the best approach.

Thanks

SDK Documentation - Export Function or AI Accessibility Improvement

Tue, 19 May 2026 08:44:55 +0000

Hi team,

I was trying to check and improve my scripts with AI assistance and attempted to read the relevant SDK pages directly.

However, this does not work properly and I need to export the pages first as MD files to be able to work with them.

Is there an export function available, or is there an improvement planned to better support fetching information?

Thanks.

Update Adaxes from 2023.2 to 2026.1

Wed, 13 May 2026 13:39:42 +0000

We're going to be upgrading and Im wondering if there's any caveats we should be aware of in such a major version jump. We have 2 backend servers and 2 frontend servers.

When someone is using a Custom Command, can you detect (PowerShell) who initiated the CC?

Tue, 12 May 2026 08:18:48 +0000

When someone is using a Custom Command, can you detect (WIth PowerShell as Action) "who initiated" the Custom Command?

I found that you can use e.g.: adm-InitiatorFullName to have the full name of the Initiator, is this correct?

Where can we find more info about the object: $Context.Initiator and the properties of this object that are available or are only the %Adm-InitiatorFullname%; ...EMail; ...Dn available?

When creating a scheduled task, you select Object type. e.g.: User => can you add extra (LDAP) filters

Mon, 11 May 2026 12:00:07 +0000

When creating a scheduled task, you select Object type. e.g.: User but can you add an additional filter, eg. where deparment is a value (HR, IT, ...) or where an extensionAttribute15 equals 'Mailbox'?

We have an external process (SFProvisioning) and HR or other people can request a mailbox for a person. We like to do this with a custom commend that set a value in AD e.g.: ExtAttrib15 and then run a scheduled task on all objects that have this value set to a specific value.

In a custom command you have when starting the 'pop-up' are you sure and at the end the summary witht the execution log.

Can you customize these pop-ups and/or can you during the progress of the CC add an extra pop-up when e.g more information from the requestor is needed?

Adaxes URL locations

Mon, 04 May 2026 08:36:03 +0000

I found a URL that's being used and I am not sure where it's coming from. I've looked everywhere to see how it's even accessible.

The url directs people to a reset password page that's diffferent thn the ones I manage in the web config page. It is not associated with any of the Web Interfaces when I go to edit them.

The URL ends with /adaxes/#/SelfPasswordReset

Image below of the page that looks different than the ones created with web config. This is also not the same as the "Forgot password?" prompt at the bottom of the other Web Interfaces:

The only spot I've seen it is in OS Integration, but that isn't enabled right now. You can see it's grayed out, and the URL is a bit differen't, the hastag is instead the name of one of the Web Interfaces (I blacked it out in the image below)

Is it planned to support this AD integrated feature with a future version?

Tue, 28 Apr 2026 08:27:53 +0000

Adding support for -MemberTimeToLive would be benefitial.