Technical Product FAQs

Hyena includes extensive support for management of computers and Active Directory under Server 2000, Server 2003, Server 2008 R2, Server 2012, Server 2012 R2, Server 2016, Server 202.  Hyena can also be used to manage Active Directory from any Windows 200x, XP, Vista, Windows 7, Windows 8, Windows 8.1, Windows 10 or Windows 11 client.

Hyena has met the Microsoft 'Compatible with Windows 7' logo requirements. Applications that meet these requirements not only are compatible with Windows 7, but are also required to have 64-bit functionality. Hyena v9 has met the Microsoft 'Compatible with Windows 8' logo requirements! "Compatible with Windows 8" certification means this product met Microsoft testing requirements for compatibility with 64-bit and 32-bit Windows 8. To earn the "Compatible with Windows 8" logo, apps and devices must pass Microsoft-designed installation, performance, reliability and security tests so you can be sure these products are compatible with Windows 8. Windows® 10 Compatible certification means this product met Microsoft testing requirements for compatibility with 64-bit and 32-bit Windows 10. To earn the "Windows 10 Compatible" logo, apps and devices must pass Microsoft-designed installation, performance, reliability and security tests so you can be sure these products are compatible with Windows 10. Hyena v11.5 has been tested to meet all of the technical requirements to be "Windows 10 Compatible".

Both Hyena and Exporter Pro are available in x86 and x64 versions, which is essential for full compatibility with Windows 7, Windows 8, Windows 8.1, Windows 10, Server 2008 R2, Server 2012, Server 2012 R2, Server 2016 and Server 2019 64-bit installations.

The Active Directory shell Properties, AD Find common dialog, and AD object creation wizards will not work correctly on 32-bit applications when run on 64-bit operating systems. These components are all installed by the Microsoft RSAT package and are not controlled by Hyena. Since you must/should install the 64-bit RSAT package on a 64-bit operating system, the 32-bit components are not installed. This is the reason we offer a 64-bit version of Hyena, in order to get around the limitation of not having these missing components from the RSAT package.

Hyena doesn't actually handle any of the communication between computers, but rather executes Windows API functions for retrieving/setting data, and Windows does the rest. We do know that these functions use RPC for communication, and that in general the only firewall port that must be opened is TCP 445.

Note that Hyena's port requirements are the same as Microsoft MMC snapins, so any port required to operate the MMC computer management or Active Directory Users and Computers snapins would also be required to use Hyena or Exporter Pro.

For additional installation requirements see the Hyena Installation Guide.

Windows 7 and newer OSes have default permissions that restrict certain functions (ie creating a file) under the program files directory. Right-click on Hyena and choose 'Run As Administrator' and repeat the steps that produced the error. If that fixes the issue, here are a couple of solutions:

• Give the account running Hyena full control permissions to the Hyena installation directory.
  
  
• Change the default location where Hyena creates the interface file for Exporter Pro by selecting Tools > Settings > Advanced, and setting a writeable directory location for the account using Hyena for the setting named 'ExporterProInterfaceDirectory'.

Hyena depends on the Windows browser list for its 'Servers' list, as Microsoft doesn't have a function to retrieve only servers directly from Active Directory. The 'Computers' list under the domain will include all computers, including servers.

There are a number of reasons for computers not to show up on your browse list:

1. The computer browser service not running on the computer where Hyena is installed, (Windows 7 and newer OSes has it stopped by default)
2. The computer browser service not running on the domain controllers (2008 and newer OSes has it stopped by default)
3. The computer browser service not running on the missing servers (2008 and newer OSes has it stopped by default)
4. Network configuration/layout not allowing broadcasts required by browsing
5. Create an AD query to filter for computers with 'Server' in the OS description. Go to File > Manage Object View > AD Queries, change the Query Type to 'Container/OU Contents'. Click the New Query icon and enter a Query Name of 'Servers'. Check the box to Include subcontainers and sub-OUs in search, then paste this into the LDAP Search Filter box:

(&(objectCategory=computer)(objectClass=computer)(operatingSystem=*server*))

Click OK to save the new query. To run this query right-click on the Containers/OUs object for a domain and choose Query Active Directory > Servers.

Windows restricts applications like Hyena to add to or remove computers from the browse list, so we can only suggest alternate methods if you aren't able to determine why those servers are missing from your browse list:

1. Right-click on the 'All Computers' object and choose Query Active Directory > Computer(Detailed). Then filter the OS column for the word 'Server'.
2. Navigate through the Containers/OUs to the location where your servers reside in Active Directory.
3. Create a static Object Grouping under File > Manage Object View. The limitation to this method is you have to manually add all of your servers, and you must add/remove them over time as this is not a dynamic list.
4. Create an OU in the directory and place all of your servers into this OU structure.

Due to changes made by Microsoft in Windows 7, current release versions of Hyena will forcibly disable the RAS (Dialin) properties when viewing the User Properties. This was done to prevent errors when attempting to view or save any dialin settings, since these errors were creating a large number of support incidents. These errors are the result of Microsoft changing Windows 7 system components that essentially disabled the RAS functionality. When used on Windows 7, Microsoft's own Active Directory Users and Computers snapin will also not display any RAS/Dialin settings for this same reason. It is unclear why Microsoft has eliminated this functionality in Windows 7.

Microsoft may be slowly addressing these issues, however. To allow the possibility that some configurations can still be used to manage user dialin settings, the user properties Dialin tab can be re-enabled on a Windows 7 client by setting to true the Tools > Settings > Advanced setting 'ForceWindows7RAS'. Note that you must still also turn on the option to show user RAS (dialup) information on the Tools >Settings > User dialog. This setting also has no effect on the Shell Properties for a user as these dialogs are still controlled by Microsoft.

If changing this setting, Hyena must be restarted. When enabled, the Hyena user properties dialog will have a Dialin tab. If an error is encountered when trying to view or save the Dialin settings, then the client does not have the right Microsoft support libraries to manage RAS settings. Turning this advanced setting back off will prevent the errors.

Both Hyena and Exporter Pro can manage and export Terminal Server/RDP settings. Make sure to read the help file for information on how to configure your computer for Terminal Server support. Please contact support if you are unable to manage Terminal Server settings for any reason.

The directory attribute 'LastLogon' is stored locally on each domain controller, and depending on which controller is used to retrieve this information, you can see different results. In Hyena, you can right-click on a user and choose 'View Logon Information' and then click the 'Check All Domain Controllers' button to see that each controller reports different information based on the last time a user was authenticated by each controller. Unfortunately, we are unable to perform this action for multiple users in Hyena due to the extreme performance delays in processing this information.

To get a report for multiple users, it is best to use Exporter Pro for this because it has an option to force it to check all domain controllers and report the latest date/time found.

To do this, click on your domain in Hyena to select it, then go to Tools > Exporter Pro > Export From Selected Objects. Click the Settings button, then double-click on Detailed Users under Active Directory (Users, Groups). Check the box to enable it and enter an output filename. Click the button for Set Options and check the box to export information from all domain controllers. Also make sure Last Logon is listed in the window as one of the fields to export. Run the export and when finished you can open the output file with Excel.

This function and many others in Hyena require the Remote Registry service, and typically Windows 7 and Windows 2008 have that service stopped by default. Start the service, and set it to Automatic startup.

This is caused by changing the default OU query. To put it back to the default state, go to File > Manage Object View > AD Queries and change the 'Query Type' to Container/OU Contents. Click on the 'Container/OU (Summary)' query and make sure the first two fields are:

Directory Name
Description

Also make sure it has 'Both' set as the Default Window assignment.

This is caused by having an incorrect Type setting for your domain. Go to File > Manage Object View > Objects and click on your domain. At the bottom change the Type to 'Windows 2000/2003/2008 Domain'. You will also need a proper ADSI Path: click the button besides the ADSI Path box, find your domain and click OK to add the proper path information. Click Update and then OK to close Object Manager.

To workaround this problem, go to File > Manage Object View > Objects. Click on your domain, and make sure the information in the ADSI Server field is in a flat NetBios format of, for example, 'DC0145', and not 'DC0145.systemtools.com'. Click Update and then OK and try viewing Terminal Server data on a user again.

This problem is caused by a bug or limitation in the Microsoft terminal services interfaces used by Hyena, which do not support DNS paths. Its a known problem with Windows 7, but hopefully Microsoft will address this issue in Windows 8.

The default install of the Microsoft Remote Server Administration Tools (RSAT) does not install the proper options for managing Active Directory. Go to Control Panel > Programs, then select 'Turn Windows features on and off'. Go to 'Remote Server Administration Tools' and enable the AD DS Snap-ins and Command-line Tools option.

The default install of the Microsoft Remote Server Administration Tools (RSAT) does not install the proper options for managing Active Directory. Go to Control Panel > Programs, then select 'Turn Windows features on and off'. Go to 'Remote Server Administration Tools' and enable the AD DS Snap-ins and Command-line Tools option.

If you aren't able to view printers on any remote computer, make sure the Print Spooler service is running on your computer. If you are only having issues viewing printers on Windows 7 computers, you may have an GPO issue. Try the information found in this thread on our ToolBoard:

http://www.systemtools.com/toolboard/showthread.php?3994-Can-t-access-printers-on-Win-7-systems/page3&highlight=1722

This error is typically caused by trying to install Hyena through a remote session such as a Terminal Server or RDP session. You will need to run the install program physically on the server or through another method.

Go to File > Manage Object View > Objects, and click on your domain. Click the browse button besides the ADSI Path box and find your domain. This will add the proper DNS domain path format to the ADSI Path box. Click Update to save the change and then OK to close Object Manager.

The Authentication Credentials option requires the use of a DNS-style domain entry, due to the requirements of the underlying Microsoft protocol being used.

Yes, Hyena now supports Exchange 2010 as well as Exchange 2000, 2003, 2007, 2010, 2013, 2016 and 2019. See Hyena's help file for more information on the support options for different versions of Exchange.

When you enable Exchange 2010 functionality in Hyena, it will automatically attempt to register the SystemTools_PSI.dll file, but Hyena has to use a Microsoft utility named regasm.exe to do this. If it can’t find the file, the registration will fail.

Search your computer and see if you can find a copy of regasm.exe. This file is installed when you install the Microsoft .Net Frameworks. Once you find it, run this command from a Command Prompt:

Regasm.exe systemtools_psi.dll

You many need to provide the path to regasm.exe and/or the SystemTools_PSI.dll file.

The following article on Microsoft's Technet has the best explanation of these fields:

"The LastLogonTimeStamp Attribute - What it was designed for and how it works"

The Active Directory MemberOf attribute for users contains all of the groups they are members of, with the exception of the Primary Group. Primary Group membership is kept in the PrimaryGroupID attribute. You can add this to Hyena's display or export, then sort or filter for the group ID you are trying to locate.

Another option is to use the User Group Membership export in Exporter Pro. Click on the objects you want to report on in Hyena, then choose Tools -> Exporter Pro -> Export From Selected Objects, click the Settings button, enable User Group Membership, then click OK and Start Export. When it finishes running you can open the file in Microsoft Excel.