12.0.4 Updated Release Notes: Windows Agents (build 4258)

Release Schedule

Privilege Manager Cloud Release: June 28, 2025

Privilege Manager On-Premises Release Date: July 11, 2025

Affected Versions

Affected Versions: Windows Agent Version 12.0.4258 on Windows 11 25H2

This update addresses:

  • UAC intercept enhancement to support UWP applications and accessibility applications. [589051]

  • Ensuring two memory allocations are deallocated from our driver to address a memory utilization issue. [650324]

  • Resolution of a deadlock issue encountered when a policy with the Restrict File Dialogs action was enforced on a workstation with a SentinelOne agent. [670600]

  • Launching white-listed accessibility applications (e.g., magnify.exe, msra.exe) now follows Microsoft's default UAC workflow instead of mistakenly being handled as elevation requests. [553990]

Do not install the agent on a workstation running a Windows 11 build newer than 10.0.26200.x.

Do not install the Delinea Privilege Manager agents on Windows workstations running OS build versions 26200.7392 or 26100.7392 (KB5072014). The Delinea team is investigating an emergent issue with these Windows versions.

Windows Agent Software

12.0.4258 Bundled Privilege Manager Agent Installer

12.0.4258 Core Thycotic Agent (x64)

12.0.4258 Core Thycotic Agent (x86)

12.0.4258 Application Control Agent (x64)

12.0.4258 Application Control Agent (x86)

12.0.4258 Local Security Solution Agent (x64)

12.0.4258 Local Security Solution Agent (x86)

12.0.4258 Bundled Privilege Manager Core and Directory Services Agent

12.0.4035 Directory Services Agent (x64)

macOS Agent

12.0.4.134 Privilege Manager macOS Agent (macOS Big Sur 11 and later)

Installation Notes

  • Starting with builds 11.4.3235 & 12.0.1016, and going forward with all newer builds, there is a dependency on a PowerShell script being executed by the MSI installer package for the application control agent. The script itself is signed with our code signing certificate so it will meet the execution policy requirements for signed scripts, but if all script execution has been disabled, then it will cause the installer to fail.

  • When upgrading Privilege Manager to a newer version, Delinea recommends upgrading the Directory Services agent such that both are running on the same release version.

  • Privilege Manager exclusively supports operating systems (OS) that have not reached their official End of Support. For optimal performance and compatibility, it is recommended to utilize Privilege Manager on a supported and actively maintained OS.

  • Delinea recommends as a best practice to create system restore points prior to doing system changes such as patches.

    Delinea supports the use of software versions up to a year prior to the current version. You can find previous versions of the documentation here.

Known Issues

  • There is a security issue with Windows Core agent versions 13.0.1058 and older. A fix for this issue is included in v12 versions 12.0.5804 and newer, and v13 versions 13.0.2064 and newer of the Windows Core agent which is available on the Software Downloads page.

    Delinea recommends customers who cannot immediately upgrade to use group policy or device management tooling to take the following actions on their workstations running the Privilege Manager Windows agent:

    • Privilege Manager Cloud: Block inbound TCP on port 5593. There is no degradation in function from blocking the port.

    • Privilege Manager On-premises: Block inbound TCP on port 5593, or at least restrict it to your Privilege Managerr web server IP address. If you block the port, agents pull updates from the server based on a set schedule.