Dear Royal Server User!
If a beta release is ready for testing, you can find the download link and release notes below.
Caution:
It is strongly recommended to backup your Document Store and all files under %ProgramData%\RoyalServer.
If you have feedback or want to report bugs, please contact Royal Apps Helpdesk.
New
Support new licensing and versioning model. See here for details.
Improved
The default installation directory was changed to C:\Program Files\Royal Server.
Fixed
Addresses a bug which resulted in the wrong NetBIOS domain name being displayed when selecting users or groups
from a foreign domain in the same Active Directory forest.
Fixed
Addresses a bug which resulted in intermittent license check failures.
Fixed
Addresses a bug with the user picker on machines which are not joined to an Active Directory domain.
The user picker incorrectly proposed WORKGROUP\username instead of using the machine name when picking a user.
sha256: 638b2a8070abf4dc0d5bcf00dfd9a311bd90d437842e6c4415908a8541b80119
New
Added a new UI section for customizing response headers of Royal Server responses under Royal Server > Service Configuration.
Enabled headers will be added to responses, disabled headers will be removed.
The configuration is stored in %ProgramData%\RoyalServer\appsettings.json file under CustomHeaders.
New
Added a new UI section for logging to a Syslog (System Logging Protocol) endpoint under General > Logging.
sha256: 308545ed2f754d84401d7a75de6e17d6529bbfd3dee4e2a85ef4ae804ffedc84
New
Added (best-effort) translations for Danish, Spanish, Italian, Dutch, Polish, Portuguese, Russian, and Simplified Chinese.
New
The Royal Server client timeout for requests issued by the Configuration Tool can now be configured under General > General Configuration. The value is stored under %LOCALAPPDATA%\RoyalServer\ConfigurationTool\settings.json. The default is 60 seconds.
Improved
Updated translations for German and French.
Improved
The user interface language is now a per-user preference stored under %LOCALAPPDATA%\RoyalServer\ConfigurationTool\settings.json instead of %ProgramData%\RoyalServer\appsettings.json.
Changing the language no longer affects the Royal Server configuration or triggers the “Restart Royal Server” notification.
The Configuration Tool now offers to restart itself to apply the new language.
Improved
Persist window position, size, and maximized state across launches (stored under %LOCALAPPDATA%\RoyalServer\ConfigurationTool\settings.json).
sha256: c4f17ec577c5663b89e391388fe2df3edb30972d3b5bc1c43ad132a09ea45b32
Improved
Performance improvements for management connections.
New
Added a Proxmox module, enabling Royal clients to manage Proxmox nodes and virtual machines through Royal Server.
Fixed
Fixes support for custom WinRM ports and PowerShell session configurations.
sha256: 061a22609ded34501155a1d79c7447dcffc3bd6e2ed360d64b4ef72f9b88b4af
Fixed
Addresses a crash in the Multi-Factor Authentication user dialog when the username combined both supported downlevel and upn formats, for example domain.local\username@upn-suffix. Such usernames are now rejected with a message showing the accepted formats.
Fixed
Addresses a bug which resulted in a user being reported as non-existent when the domain could not be contacted. Both cases are now reported separately, and the log records which domain could not be reached.
Fixed
Addresses a bug on machines which are not domain-joined which made it possible to configure display names starting with non-existant workgroup names for local users.
sha256: 2b5f7b983c704e7cb3fbfd08fabebeab659ae38a48ac5fb00d590c27360bd98d
Improved
Short-circuit resolution of user and group accounts without a valid name.
Fixed
Security: Fixed a vulnerability in the Script module where batch scripts could be executed on remote hosts under the Royal Server service account.
Improved
Improved error handling and diagnostics when picking a directory object whose NetBIOS domain name could not be resolved.
Fixed
Removed unused ExecuteScript command from the Script module.
sha256: 3ab159d33b22bbffc555ec4efecb1d8ba0acd07a61d2e3bee4035c9508484e30
Fixed
Security: Fixed a vulnerability in Dynamic Folder and Dynamic Credential execution to prevent execution as the Windows Service account. Please consult the documentation.
sha256: 7a36d322f6fce4f8f0d30ebdbb841a65f9d72f9bef68bdcaf9f1a5a2d0e4f80e
Improved
Royal Server now checks for Dynamic Folder and Dynamic Credential script
runs whether the service account holds the user rights “Replace a process level token”
and “Adjust memory quotas for a process”.
The new script ./Scripts/grant_service_account_rights.ps1 grants them.
Improved
The setup now removes leftovers of interrupted script runs, and the new
command “RoyalServer.exe --cleanup-script-temp” removes them manually.
Improved
Royal Server now logs at startup when the %ProgramData%\RoyalServer\Temp\
folder is missing, inaccessible, or contains folders of previous service accounts.
Fixed
Addresses a bug which caused Dynamic Folder and Dynamic Credential scripts
to fail with “Cannot open script directory ‘Temp’” after the Royal Server service
account was changed.
sha256: e4bf9c74a1591d736c2743a3099efb97e8d5f56115b1b2962e2764e0d3b44726
sha256: cd1ee39e8680babf25de203ccc869a4fca4caba2ac71d10bdfacad6264d49152
Fixed
Security: Hardened the authorization of requests to the Document Store and Royal Server Management modules.
sha256: 5543e3ff429e4a629635fda007bdc6338969492640c230775c0dc025afa983c5
Fixed
Security: Hardened execution of Windows Processes, Windows Services, Hyper-V and Windows Events to always run as the destination user configured in the connection.
Fixed
Secure Gateway: Setting “Max. Connections” to 0 rejected all connections instead of allowing an unlimited number of connections.
sha256: d275f8882c14ed570bb0c64cb96a0da9821ff128bec53de3d336d574033bf576