What's new in Tenvero

–Added the correct Tenvero icon to the Windows setup executable for consistent Explorer and installer branding.

–Hardened release packaging so future setup builds cannot silently ship without the Tenvero icon.

–Includes the new responsive sync progress experience introduced in v2.0.23.

–Added responsive progress modals to Preview sync and Run sync now on Overview and Sync & Reconciliation.

–Shows real synchronization stages including Active Directory reads, Exchange Online connection, permission snapshots and mailbox-by-mailbox comparison.

–Failed runs remain visible with the real error and Retry / Close actions instead of disappearing.

–Successful runs show added/updated, removed and unchanged totals; Preview clearly confirms no Exchange permissions were changed.

–Improved persistent Exchange Online connection reliability by proactively replacing stale idle workers before the next mailbox read.

–Explicit reconnects now use a fresh PowerShell runspace, reducing first-read failures after idle periods.

–Improved Logs scrolling and paging, with newest entries shown first.

–Improved Exchange startup behavior so a slow or stalled warm-up no longer leaves Tenvero stuck in a long Connecting state.

–Hardened Audit permission reads, reconnect handling and error classification to avoid false Critical findings after Exchange transport failures.

–Fixed table mouse-wheel behavior across Overview, Shared Mailboxes, Delegation, Audit and Diagnostics; tables now own their scrolling while pages remain fixed-height.

–Refined the Audit summary chart and log paging.

–Added a non-blocking update check and clearer Manager elevation behavior.

–Improved persistent Exchange worker initialization and surfaced the real underlying worker error instead of opaque EndInvoke messages.

–Fixed partial mailbox Find and dynamic picker actions in SMTP & Aliases and Mailbox Settings.

–Fixed dynamic dialog scrollbar rendering and mailbox Find after the shared Tenvero scrollbar theme was introduced.

–Significantly accelerated Delegation takeover preview by querying only required permission types and caching repeated recipient/AD lookups.

–Improved responsive Shared Mailboxes actions and light-theme Audit visuals.

–Removed remaining predecessor-brand text from customer-facing surfaces while preserving silent upgrade compatibility.

–Restored the selectable Import existing access takeover workflow: review current direct Exchange permissions and adopt only the rows you choose.

–Added consistent Tenvero-themed scrollbars across pages, tables, logs and dialogs.

–Fixed mailbox/group picker sizing compatibility on Windows PowerShell 5.1.

–Corrected DataGrid cell/header insets across the Manager so table content has consistent spacing from card and grid edges.

–Restored the seven-step Setup Assistant covering prerequisites, tenant/Entra app, certificate, Exchange Online, Entra Connect, mailbox mappings and scheduled reconciliation.

–Improved table spacing and Overview header alignment.

–Fixed WPF navigation failures on Windows PowerShell 5.1 and moved navigation handling back into the Manager’s main script scope.

–Refined navigation alignment and replaced native ComboBox chrome with the Tenvero dark/light dropdown style.

–Added semantic Healthy, Warning and Critical colors across operational status surfaces.

–Improved page error handling so navigation failures show the real error.

–Fixed WPF startup failures caused by frozen theme brush resources.

–Theme switching now safely recreates mutable WPF brushes when required.

–Fixed a Windows PowerShell 5.1 WPF theme-color startup incompatibility.

–Hardened dynamic WPF brush creation to prevent the same issue returning.

–Introduced the native WPF/XAML Tenvero Manager while keeping the existing Exchange, AD, reconciliation, licensing, scheduler and ADUC backend.

–Added one shared WPF design system for navigation, cards, buttons, inputs, DataGrids, status surfaces and dark/light themes.

–Migrated the full Manager workspace—including Delegation, SMTP/Aliases, Mailbox Settings, Audit, Sync, Setup Assistant, License, Diagnostics and Logs—into the new shell.

–Preserved the persistent Exchange session and feature/entitlement enforcement at both UI and backend levels.

–Improved Overview resizing and high-DPI behavior so KPI cards, mailbox panels, audit panels and quick actions stay inside the visible workspace.

–Removed the background Exchange warm-up wait cursor.

–Applied the approved Tenvero desktop styling to the real Manager and sharpened the splash presentation.

–Redesigned the Manager around the cleaner Tenvero website/dashboard visual language.

–Simplified Overview to four KPI cards, managed-mailbox summary, priority audit findings and compact quick actions.

–Improved dark-mode spacing, responsive layout and high-DPI splash quality.

–Fixed a Manager startup crash in the persistent Exchange runspace.

–Made background Exchange warm-up non-fatal and retryable on demand.

–Improved DPI-safe Home quick-action buttons.

–Added a persistent Exchange Online session for interactive mailbox administration, started in the background when Tenvero opens.

–Added Exchange connection health checks and one safe reconnect/retry for read-only operations.

–Kept write operations non-retried to prevent ambiguous duplicate changes.

–Added automatic disconnect after five minutes of Exchange inactivity.

–Added persistent Mailbox Context so an administrator can select a mailbox once and move between its Overview, Delegation, SMTP/Aliases and Mailbox Settings.

–Added Home mailbox search, reorganized Workspace/System navigation and improved responsive layouts.

–Introduced classified error dialogs with suggested actions for Exchange, AD, certificates, Task Scheduler, licensing and directory failures.

–Improved recovery from stale Exchange REST sessions during Mailbox Settings, SMTP/Aliases and mailbox search.

–Added one clean reconnect/retry for safe read operations while deliberately leaving writes non-retried.

–Optimized exact and partial mailbox search behavior.

–Tenvero Manager now requests elevation once at startup to reduce repeated UAC prompts.

–Replaced tenant-wide mailbox enumeration with targeted server-side Exchange search by partial name, alias or SMTP address.

–Unified mailbox selection across Delegation, SMTP/Aliases and Mailbox Settings.

–Fixed reconciliation snapshot collection edge cases that could produce null/scalar permission sets.

–Reduced Exchange connection and mailbox read overhead with REST-backed commands and selective properties.

–Added per-user mailbox inventory and accepted-domain caches to speed repeat searches and SMTP/Alias work.

–Fixed scheduled/manual reconciliation regressions after the bulk snapshot optimization.

–Reduced unnecessary Exchange reads and improved snapshot error diagnostics.

–Reworked reconciliation around cached AD membership and shared Exchange permission snapshots for much faster large-mailbox comparisons.

–Preview Sync and Run Sync Now moved to isolated PowerShell workers with granular progress and safety timeouts.

–Added shared-mailbox Sent Items copy controls for Send As and Send on Behalf.

–Fixed Sync configuration writes to the administrator-owned ProgramData configuration using a narrow elevated writer.

–Added real certificate private-key signing preflight and a guided Repair my key access flow for app-only Exchange authentication.

–Fixed ADUC property-page sizing so Tenvero fits inside the normal ADUC Properties window and compiles/registers from a writable staging location.

–Fixed Import existing access hanging while the native Exchange worker was running.

–Added granular takeover stages and bounded read/adoption timeouts while preserving fail-closed, non-destructive takeover behavior.

–Fixed takeover phase 2 failing after successful AD group updates because the licensing service command was not available in the worker scope.

–Preserved already-completed AD memberships and existing direct Exchange permissions across retries.

–Fixed Take over selected scope handling while preserving deep delegation and AutoMapping entitlement checks.

–Fixed takeover commits when the delegation engine had not yet been loaded locally.

–Added clearer in-window takeover status and kept dialogs owned by the active Tenvero window.

–Continued to preserve existing direct Exchange permissions during adoption.

–Improved Existing Access takeover reliability by aligning native app-only Exchange connection behavior with Diagnostics.

–Added a clean retry for transient Exchange module-formation failures and stronger readiness verification.

–Fixed native Diagnostics/Exchange result serialization on Windows PowerShell 5.1.

–Removed the non-actionable unapproved-verb warning from internal licensing imports.

–Fixed native UI-host compilation failures caused by duplicate .NET assembly references.

–Centralized and hardened the host compiler used by Setup and the installed Manager.

–Fixed release validation incorrectly scanning documentation as executable licensing code.

–Hardened runtime fingerprint checks to scan only PowerShell runtime/configuration files.

–Fixed a release self-test false positive in the licensing source validator.

–Production licensing remains tenant-bound and does not use a hardware fingerprint for authorization.

–Added the branded Tenvero startup splash with staged loading status.

–Added a single-instance Manager guard to prevent duplicate launches.

–Fixed the Ed25519 zero-length-message self-test used during install/startup validation.

–Added a dedicated offline internal/master license validation path with local RSA verification.

–Master licenses can be validated/refreshed fully offline and bypass production API health checks.

–Preserved compatibility with the existing signed internal/master license format during upgrades.

–Fixed a mailbox administration parser issue in the Delegation takeover planning path.

–Reworked the Tenvero ADUC property tab into a compact native ADUC-style page.

–Added selected-object mail details plus direct actions for SMTP Addresses, Delegation/Mappings, Mailbox Settings, Refresh and Open Tenvero.

–Introduced production feature-based licensing and entitlement enforcement using signed features[] rather than edition-name checks.

–Added Standard, Professional and MSP catalogs plus a 30-day Professional trial.

–Added tenant binding, protected entitlement cache, paid offline/grace behavior and strict fail-closed validation for invalid/revoked/expired/tampered licenses.

–Added entitlement enforcement to reconciliation, scheduling, Entra delta, takeover, aliases, mailbox settings, audit and diagnostics.

–Moved appearance preference to the current user’s LocalAppData profile while keeping Dark as the default.

–Improved Delegation layout spacing, Home Exchange health checks and Entra Connect busy-state handling.

–Prevented false startup-failure dialogs caused by errors produced after the Manager UI had already opened.

–Improved Entra app provisioning reliability by requiring a suitable Microsoft.Graph.Authentication version and updating older installations when needed.

–Switched the provisioning worker to device-code authentication with WAM disabled to avoid known elevated Windows PowerShell authentication regressions.

–Diagnostics now reports Graph Authentication compatibility and gives actionable errors for known listener/browser credential failures.

–Dark is now the default appearance for new installations.

–Reworked the Manager shell: full-height branded sidebar, page header and card-based surfaces.

–Added theme-aware vector icons to KPI cards, navigation and the status bar.

–Added native Windows dark-title-bar integration on supported builds.

–Added a dedicated Tenvero progress window running in a separate process, so feedback stays visible during long Exchange/AD operations.

–Progress now covers reconciliation, delegation audit, certificate creation and Entra provisioning.

–The Manager locks duplicate actions while a blocking operation is active.

–Added System / Light / Dark appearance selection, persisted live without restarting Manager.

–Redesigned Home into five compact health cards: Directory Services, Exchange Online, Automation, Mailboxes and Audit.

–Redesigned Shared Mailboxes into a master/detail workspace.

–Existing-access takeover remains fail-closed with no backend behavior changes.

–Added a dedicated read-only Audit tab with a full delegation-health scan.

–Flags disabled AD users, orphaned trustees and unmanaged direct Exchange access.

–Added Critical / Warning / Info filtering, remediation guidance and CSV export.

–Added Import existing access to discover current direct Exchange delegates.

–Safe delegates are adopted into mapped AD groups without removing current access.

–Added Access activity showing Grant, Revoke, Takeover and AutoMapping events.

–Added first-class 30-day TRIAL licenses enabling the full Enterprise feature set.

–Trial licenses are cryptographically signed and bound to a Tenvero Installation ID.

–Rebranded the complete product from MailPilot to Tenvero.

–Added non-destructive migration from MailPilot and older MailboxAutoMapping data.

–Added atomic configuration writes, a global sync mutex and log rotation.