CapaOne Changelog

Software that has reached end of life stops receiving security updates. Every vulnerability found after that date stays open, and no patch is coming. Security Monitor now shows you where that applies in your own environment.

Open Affected Software and select Support Lifecycle on any application. You see each version installed on your endpoints, when it was released, and whether its support has ended.

For the security team, this answers three questions that used to mean checking vendor sites by hand:

• Which applications in our environment are past their support date?
• Is a fix still coming for this CVE, or is the version already end of life?
• What do we put in front of an auditor about our exposure?

Working in deployment? Pass this on to your security colleagues. End-of-life dates are the kind of thing they track by hand today, and this puts the answer next to the vulnerability data they already use.

Security Monitor now shows which local administrator accounts and groups exist on your endpoints — and which of them nobody approved.

You define the accounts and groups that belong there. Security Monitor checks every endpoint against that list and does the rest:

• Unapproved admins — accounts or groups holding local administrator rights that are not on your list
• Orphaned accounts — local accounts whose user no longer exists

The widget shows how many of your endpoints are compliant, so you can see the whole fleet at a glance and go straight to the ones that are not.

Boot the machine. Scan a QR code. Walk away.

That is the whole job when you set up a Windows endpoint from scratch with Provision Manager. No image to maintain. No code to write.

On Thursday 24 September, Dennis Busk Nyehuus runs the full flow live — from an empty machine to a finished Windows endpoint.

🖥️ What you will see

• The complete deployment flow — a new machine boots, a QR code is scanned with a phone, and the machine ends up ready to use
• Image and driver pack matched automatically to the exact model, from a library covering 1,500+ models across Lenovo, HP and Dell
• An installation built entirely without code — the same PowerBricks you know from CustomApps — plus an app pulled from the 150+ ready-made ones in the repository

🗓️ Thursday 24 September, 10:00–11:00 (CEST). Online.

The last 15 minutes are yours. Dennis answers live.

The webinar is held in Danish.

👉 Sign up here

💬 Got a deployment scenario you want Dennis to tackle? Drop it in the comments 👇

PowerBricks are the building blocks you snap together to automate a task without writing the script yourself. This release adds 13 of them and updates 55 more.

Disk encryption is the headline of this release. Five new bricks cover the full lifecycle, so you can turn BitLocker on during provisioning and keep it healthy afterwards:

• 🛡️ Configure BitLocker
• 🔑 Backup BitLocker Recovery Key
• ⏸️ Suspend BitLocker
• ▶️ Resume BitLocker
• 🚫 Disable BitLocker

⭐ Suspend and Resume are the pair you want around a firmware or BIOS update. Without them, an encrypted disk meets the changed hardware and greets your user with a recovery prompt.

Chrome and Firefox now have the same add and remove bricks that Microsoft Edge already had:

• ➕ Add Google Chrome Extension
• ➖ Remove Google Chrome Extension
• ➕ Add Mozilla Firefox Extension
• ➖ Remove Mozilla Firefox Extension

Three bricks handle the regional settings that every new machine needs:

• 🗣️ Configure Windows Language
• ⌨️ Configure Windows Keyboard Layout
• 🕒 Configure Windows Time Zone

Local Group Remove All Except empties a local group but keeps the accounts you name. Point it at the local Administrators group to strip out everything that drifted in over time, without locking yourself out.

We rewrote the PowerShell behind 55 bricks for more reliable error handling and clearer log output.

⚠️ Two changes are visible in the interface:

• Install Microsoft365 is now named Install Microsoft 365, and takes updated parameters.
• The permission bricks — Set and Remove File, Directory, and Registry Permissions — take updated parameters.

Review any app that uses those bricks the next time you edit it.

💡 Got an idea for the next PowerBrick? Let us know in the comments 👇

The new CapaOne logo is now used in the Android Agent app. The app functionality is unaltered.

🎉 16 New PowerBricks Released!

We’ve expanded the PowerBricks library with 16 new bricks, making it even easier to automate, configure, and standardize Windows endpoints.

📁 Archive & File Handling

• Extract Archive
• Zip Directory

🔤 Font Management

• Install Font
• Uninstall Font

☁️ Microsoft 365

• Install Microsoft365

🖥️ Windows Configuration

• Configure Power Settings
• Configure Start Menu Layout
• Windows Configure Right Click Menu
• Windows Tray Icon Pin

👤 Local User Management

• Add User To Local Group
• Change Local User Password
• Create Local User
• Delete Local User Account
• Remove User From Local Group

🔄 Windows Update

• Configure Windows Update
• Reset Windows Update

🚀 The new PowerBricks are ready to use and help save time, reduce manual work, and ensure more consistent endpoint configurations.

PowerBricks are the building blocks that unlock new possibilities — making development simpler and faster than ever. Say goodbye to complex coding and hello to a new era of effortless innovation.

Last week we released 12 new PowerBricks, making CustomApps even more powerful and efficient:

• Install Driver
• Install MSIX
• Import Registry File
• Install Windows Update
• Uninstall Windows Update
• Configure Windows Service
• Add Microsoft Edge Extension
• Register DLL
• Update Windows Group Policy
• Uninstall Program
• Remove Microsoft Edge Extension
• Unregister DLL

Got an idea for the next PowerBrick? Let us know in the comments 👇

Last week, Dark mode arrived and AdminOnDemand became Privilege Manager 🚀

Next week, CustomApps & Updater will become Application Manager and Experience & Reliability will become Experience Monitor.

You can read more about the changes to Privilege Manager here.

Following our announcement in November 2025, we are moving into the next phase of our rebranding by transitioning to the new product names and the new CapaOne icon.

Over the next few weeks, you will see the new icon appear in the notification area, agent menu, and system messages. AdminOnDemand will also officially become Privilege Manager.

👉 Please note that while our visual identity is evolving, the functionality remains exactly the same.

We are excited to announce one of the most requested UI enhancements to date: Dark Mode!

Whether you prefer the familiar Light Mode or want to reduce eye strain with the new Dark Mode, you can customize the CapaOne interface with ease. Toggle between the classic and the modern with a single click. Dark Mode is just weeks away - get ready to flip the switch!

In Autumn 2026, Apple is transitioning from the traditional Mobile Device Management (MDM) framework to the modern Declarative Device Management (DDM) framework.

To ensure future operational stability in CapaOne Mobile Manager, we are currently integrating the new framework into our platform. We are committed to providing a seamless transition, ensuring that existing configurations remain robust.

This is an informational message only. No action is required on your part. Please feel free to contact us if you have any questions.

We are excited to announce that CapaOne CustomApps now features direct integration with Microsoft Intune. The integration enables you to create and validate your packages in CapaOne and deploy them to Intune in just a few clicks. Leverage PowerBricks and the speed of CapaOne to eliminate manual coding and significantly reduce your packaging lead time.

Let us know what you think of the new feature by leaving a comment or reaction.

As part of the previously announced rebranding of CapaOne, we’re updating the color scheme on the entire platform, starting tomorrow morning. This is purely a visual change, all functionality remains the same.

Let us know what you think of the updated color scheme by leaving a comment or reaction.

VBScript has had its heyday — now PowerShell is taking over. Do you want to be ready for the transition? With the course PowerShell in Practice, you get the skills that prepare you for the future of software packaging in just three days.

Why you should attend: Learn to use PowerShell effectively for packaging and automation in CapaInstaller. Gain insight into the CapaSystems PowerShell Scripting Library — unique to our platform. Work with CapaOne CustomApps, PowerPacks, the CapaInstaller SDK and PSAppDeployToolkit. Take part in hands-on exercises where you work with your own packages.

Course dates: December 1-3, 2025 (completed), January 12-14, 2026 (fully booked), March 10-12, 2026 (a few seats left), April 14-16, 2026 (seats available).

Scheduled maintenance successfully completed on December 2, 2025 at 16:48 (GMT+1). Reminder that critical infrastructure was upgraded that day; service disruptions could occur between 15:00 and 23:00 (GMT+1).

On Tuesday, December 2nd, critical infrastructure was upgraded; service disruptions could occur between 15:00 and 23:00 (GMT+1).

Reminder that the navigation menu structure was updated on Friday, November 28th. The application switcher in the upper right corner was removed and the most important functionality migrated into the user profile menu. All features related to CapaInstaller and PerformanceGuard remain accessible from the CapaOne Portal.

Last week we released 6 new PowerBricks, making CustomApps even more efficient:

• Activate Process Execution At First Logon
• Deactivate Process Execution At First Logon
• Delete Directory From All Users Profile Directories
• Delete File From All Users Profile Directories
• Sleep Script
• Execute PSAppDeployToolkit Package

As part of the previously announced rebranding, the navigation menu structure is being updated to reflect the new product names. The application switcher will be removed and its functionality migrated into the user profile menu. Scheduled for deployment within the next month. All features related to CapaInstaller and PerformanceGuard will still be accessible from the CapaOne Portal.

To strengthen the global CapaOne brand and prepare for future expansion into the European market, we are refreshing the names of existing products. The product names will be refreshed gradually over the next months, to ensure a smooth transition with minimal disruption.

Last week we released 9 new PowerBricks, making CustomApps even more efficient:

• Copy Directory To All User Profile Directories
• Copy File To All User Profile Directories
• Create Shortcut
• Delete Registry Key
• Delete Registry Variable
• Execute Process
• Verify System Requirements
• Wait For Process To Start
• Wait For Process To End

Remember that this Wednesday we are hosting the autumn CapaSystems User Group. You can look forward to: sharing experiences with other customers, a look at our Product Roadmap, insight into CustomApps & PowerBricks, and lunch from the hot dog stand. Wednesday, October 29, 2025, 10:00-15:00, CapaSystems, Roskildevej 342C, Taastrup.

On Monday, October 13th, critical infrastructure was upgraded; service disruptions could occur between 15:00 and 16:00 (GMT+2).

With 9 new PowerBricks, you can turn your ideas into reality with unprecedented speed and simplicity.

• New Navigation Sidebar — updated icons and new text font provide the best readability to date; the space switcher has been removed to make navigation even easier.
• Security Filters — brand new filter options make it fast and easy to find any information; the ability to save and load filters increases efficiency and ensures a consistent approach.
• Bulk Commands — new bulk commands enable executing a command on multiple endpoints with a single click.
• CustomApps — upload speed improved by a staggering 200%; a new progress indicator shows total progress from start to finish; the upload process is more resilient to network dropouts.

Critical infrastructure was upgraded; service disruptions could occur between 13:00 and 16:00 (GMT+1).

On Friday August 15th, critical infrastructure was upgraded; service disruptions could occur between 13:00 and 16:00 (GMT+1).

Within the next few weeks, a completely redesigned navigation sidebar rolls out for a smoother, more intuitive experience. The space switcher (partially hidden in the upper left corner today) will be incorporated into the redesigned sidebar for enhanced visibility and easier access. The sidebar can be used collapsed or expanded, to suit personal preference.

• New Global In Progress View — the “In progress” list moved from CapaOne Updater to Endpoints and now includes actions from Updater, Drivers and CustomApps. It’s possible to pause, resume and clear operations.
• New Assignment Tab — a new dedicated Assignment tab was introduced, to enhance accuracy.
• New Endpoints Tab — displays both directly and group linked endpoints.

Recent Microsoft updates for Windows 10 22H2 and Windows 11 22H2/23H2/24H2 unexpectedly interfere with legitimate drivers on Lenovo ThinkPad laptops due to changes in the Vulnerable Driver Blocklist. Strongly recommend caution when patching drivers on Lenovo ThinkPads; consider delaying updates until a fix is available from Microsoft or Lenovo.

Reported symptoms: Blue Screen of Death during OS deployment, malfunctioning monitor drivers, malfunctioning network drivers.

Bulk actions are seamless thanks to the brand new selector option. The action buttons are relocated on the right to optimize the layout. Individual endpoints can be deleted directly from the action buttons.

Tomorrow, April 23rd, critical infrastructure was upgraded; service disruptions could occur between 10:00 and 14:00 (GMT+1).

Within the next few weeks, a User Experience boost lands in CapaOne: bulk actions become seamless thanks to a brand new selector option; action buttons relocate to the right to optimize the layout; individual endpoints can be deleted directly from the action buttons.

Maintenance performed March 27, 2025 at 2:00 PM (GMT+1), expected to last 5 minutes.

Google announced the Play EMM API stops working September 30, 2025. CapaInstaller uses the Play EMM API for Android endpoint management, so Android endpoint management will stop working in CapaInstaller on September 30, 2025. Apple and Windows endpoints are unaffected. CapaOne MDM uses a newer Google API and continues to function as before. Strongly recommend migrating Android endpoints from CapaInstaller to CapaOne as soon as possible.

Some customers experienced issues applying configurations with a large amount of data on Apple endpoints. The “view commands queue” feature was temporarily disabled to fix it. Android and Windows endpoints were unaffected; feature expected fully operational again within a few work days.

CapaOne is fully operational again. Service disruptions that began Monday morning were fixed Tuesday afternoon, caused by an infrastructure update at a primary service provider. Customer data remained safe throughout.

Evolving data privacy regulations require obtaining explicit cookie consent. Starting February 1st, 2025, all customers are prompted to accept cookies.

Reminder that the Summary dashboard in CapaOne Security becomes a paid feature on February 1st, 2025. Contact [email protected] to keep the Summary dashboard.

CapaOne Security now displays views over 92% faster. Previously customers with 5,000+ endpoints could see a 10-15 second delay before Endpoints, Software and Detected CVE views displayed; now under 1 second, even for 10,000+ endpoints.

Maintenance performed January 7, 2025 at 3:00 PM (GMT+1), expected to last 10-15 minutes.

Enhanced CVE matching in CapaOne Security led to a 5% increase in vulnerability detection. Resolved issues with specific versions of 7-Zip and Adobe Acrobat that were not previously matched.

No scripting knowledge required — the GUI based application creator makes it easy for everyone to create and customize applications, in seconds using the repository or minutes using own files. PowerBricks make complex applications easy: drag and drop the PowerBrick with the desired action and fill in mandatory fields. The CapaOne CustomApps BETA program launches very soon.

• Bulk commands — send commands to multiple devices at once.
• Filters — quickly find what’s needed.
• Reporting — helps meet increasing compliance regulation demands.
• Plus several quality-of-life improvements.

Filters and tags relocated to the endpoint section, placing them closer to the endpoints they affect. Tables optimized to be more streamlined throughout CapaOne. Windows endpoint list overhauled — driver update status now visible directly in the list.

Most popular features are now at the top, and the menu layout is aligned for Windows, Android and Apple.

Maintenance performed same day at 13:00, expected to last 5-10 minutes.

CapaOne Updater now offers a “pause deployment” feature, allowing temporary pause and modification of deployment actions before resuming.

CapaOne workflows got a major upgrade July 11, 2024, making it easier to select which applications a workflow should update — one, more, or all. If “all applications” is selected, new applications are automatically added when released. No manual operations necessary.

• Azure multi-tenant support — ensures a smooth experience across all Azure AD tenants.
• “Run as different user” — lets IT staff elevate privileges on endpoints even when end users aren’t around.

• CVE detection — empowers staying ahead of cyberattacks.
• NIS2 reporting — ensures an effortless compliance process.
• CapaOne Security is moved to the main menu for quick and easy access.

Azure AD groups (Entra ID groups) can now be used to validate users in CapaOne AdminOnDemand — makes it easy to specify users allowed to run elevated processes by selecting Azure AD groups from a drop-down list.

The CapaOne logo has been updated, reflecting a renewed commitment to efficient, scalable, and secure cloud solutions. Already live on websites; integrated into products over the following weeks.

CapaOne Security monitors the most critical security configurations, hardware drivers, third-party software, and Windows patches — helps identify and pinpoint security vulnerabilities across all endpoints. Available now, free.

CapaOne Drivers automatically detects and updates outdated drivers across all computers in an organization with a single click — manual single-endpoint updates or automated bulk updates across the entire fleet. Compatible with various deployment tools, cloud-based.