What's new?
In Management Client 2026 R2
Role permissions
Device group permissions now support automatic permission inheritance, effective permission views, and bulk removal of device-level permissions.
Administrators can more easily manage access through device groups and identify the source of assigned permissions.
OAuth 2.0
Support for OAuth 2.0 has been added alongside basic authentication, offering a more secure method for authenticating outgoing notification mail servers.
In Management Client 2026 R1
No updates for this version.
In Management Client 2025 R3
Audit logging
Audit logging in the XProtect VMS has been modernized by integrating OpenTelemetry, enabling audit logs to be treated as telemetry data and exported using standardized pipelines.
The changes simplify the architecture and open the door to using modern observability frameworks.
XProtect Access
The Access Control node consists of two options:
From Systems, view and manage your access control systems.
From Groups, group your access control units for more granular permission management.
No updates for this version.
XProtect supports identity synchronization through System for Cross-site Identity Management (SCIM). SCIM enables automatic user provisioning and changes to user permissions are instantly reflected in the VMS without requiring a new login.
XProtect Management Client
Show disabled devices device filter renamed and inverted
The filter logic for the Show disabled devices hardware device filter option, in the Overview pane has been inverted and renamed Hide disabled devices. The filter option is cleared by default, which means the device tree now displays all devices, including disabled devices, by default.
Specified device filter criteria are now persisted but are reset if the Management Client is restarted. Users still manually remove device filter criteria to reset the filters. As a result, the F5 shortcut key no longer resets device filter criteria.
Previously, newly created but disabled devices could be difficult to locate, as the Show disabled devices filter was cleared by default and could easily be overlooked.
New XProtect Management Client images
Images in the technical documentation have been updated to reflect the current environment.
No longer supported
The following options are no longer supported:
Multiple recording server instances
Multiple recording server instances is no longer supported. See this knowledge-base article that describes how to update an installation using multiple recording server instances.
Management Client installed help files
The Management Client now relies on online help from the Milestone web site and installed help files are no longer available. If a workstation running the Management Client does not have internet access, a link to the relevant help topic will be available in the client. The help files can be downloaded and installed manually, if needed. See Help files.
Support for Microsoft SQL Server 2014
Extended support for Microsoft SQL Server 2014 ended on 9th of July 2024. There are no more security updates from Microsoft on that server.
JPEG transcoding in the Smart Client
The setting for JPEG transcoding (image quality) in setup mode is no longer available from the properties pane. Use adaptive streaming instead.
SMTP camera events
Allowing cameras to upload an image to the XProtect VMS using SMTP has been disabled by default in the system. This feature was used by some old camera models. Due to current security standards, having open ports for non-encrypted communication is not secure.
XProtect Management Client
Russian Management Client documentation
The help for the Management Client is now also available in Russian.
Failover recording server / recording server installation
When you install a recording server or failover recording server, the files of each respective server are now placed within separate folders in the Milestone folder: XProtect Failover Server and XProtect Recording Server.
If you are upgrading XProtect, these folders are also created during the upgrade process and the files for each server type are located in the folders.
Previously, the files of the failover recording server and recording server were installed in the same folder, which could cause issues when you were scaling products or running on different Microsoft .NET versions.
XProtect Management Client
Azure Active Directory can now be used for authentication. During installation you can choose between Windows Authentication and Azure Active Directory Integrated for integrated security.
XProtect Management Client
A (do not trust server certificate) option is now available for Windows Authentication and for Azure Active Directory Integrated. For Azure Active Directory Integrated, this option is mandatory. The (do not trust server certificate) option ensures that server certificates are validated and verified before installation.
XProtect Management Client:
A new Edit alarm settings user permission for alarms has been introduced that enables administrators to edit alarm definitions, alarm states, alarm categories, alarm sounds, alarm retention, and event retention. The corresponding editing permissions for alarm definitions have been removed from the existing Manage user permission, and administrators will require both user permissions (Edit alarm settings and Manage) to manage alarm settings.
The new Edit alarm settings user permission is not applied to existing users and must be manually assigned to users that require administrator-level access to configure alarms after installation or upgrade.
XProtect Management Client:
Adaptive streaming can now be configured for use in playback mode. This method is referred to as adaptive playback. For more information, see Adaptive playback.
XProtect Management Client:
When you install the XProtect components, you can now select to use a pre-created database as part of a custom installation.
XProtect Management Client:
New user permissions for video restrictions have been introduced that enable administrators to configure and assign create, view, edit and delete rights to users.
XProtect Incident Manager:
To comply with GDPR or other applicable laws concerning personal data, administrators of XProtect Management Client can now define a retention time for incident projects.
XProtect Incident Manager:
The XProtect Incident Manager extension is now also compatible with XProtect Expert, XProtect Professional+, and XProtect Express+ version 2022 R3 or later.
XProtect Incident Manager can now show more than 10,000 incident projects.
XProtect Incident Manager:
The first release of this extension.
The XProtect Incident Manager extension is compatible with XProtect Corporate version 2022 R2 and later and with XProtect Smart Client version 2022 R2 and later.
XProtect LPR:
License plate styles, which are part of country modules, are now listed in one place.
To make license plate styles easier to manage, you can group them into aliases according to your license plate recognition needs.
Match lists now support aliases.
Event server encryption:
You can encrypt the two-way connection between the event server and the components that communicate with the event server, including the LPR server.
Logging in via an external IDP:
You are now able to log on to the XProtect VMS using an external IDP. Logging on via an external IDP is an alternative to logging on as an Active Directory user or as a basic user. With the external IDP logon method you can bypass the setup requirements of a basic user and still be authorized to access the components and devices in XProtect.
Update hardware data
You can now see the current firmware version for the hardware device that is detected by the system in the Management Client.
XProtect Management Server Failover
You can now achieve high availability of your system by configuring a failover management server between two redundant computers. If the computer that runs the management server fails, the second one takes over. The real-time data replication ensures that the databases of the management server, log server, and event server are identical on both computers.
For more information, see XProtect Management Server Failover.