Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-0237: Unable to see Centrify Profile Tab when doing "Find" in ADUC

Authentication Service ,  

12 April,16 at 11:45 AM


Using Active Directory Users and Computers and "Finding" a user, computer or group from Active Directory, the Centrify Profile tab does not appear when the properties dialog for the object is opened from the search results.

To extend an AD user object to have Centrify profile tab, we have used two approaches.
1) Using display specifier.
2) Using extension snapin.
The one that we show Centrify profile extension from our user node within our snapin is done by extension snapin approach.
The property sheet hosting all the property pages is owned by our MMC snapin.   That's why we can add whatever property page we like *IF* the property page is launched from the user node in our MMC console's result pane.
In order to provide a consistent user experience, when we are finding an object from Active Directory, Centrify console is calling Microsoft's object picker.  Within the object picker, user can also launch the property dialog from the searched results.  However, the property dialog launched in this way is actually owned by Microsoft's object picker.  Microsoft only allows third party to extend the property page by using display specifier. 
The display specifier by default can only be updated by the domain administrator of the root domain or the enterprise admin.  You can also ask enterprise admin to grant you permission on the display specifier container. 
Then, you can use your own account to run that VBscript.
The update of the display specifier is reversible.  The only purpose of updating the display specifier is to tell the client component what plugin it should load when displaying a particular AD object.  If the plugins cannot be
found, it will just skip it.


displayspecifier.vbs script needs to be run in order to resolve the problem. Please follow the instructions below:

1. Log on using an enterprise administrator account or a domain administrator for the forest root domain.
2. Open a Command Prompt window and change to the Centrify DirectManage Access Manager directory. For example:
cd C:\Program Files\Centrify\DirectManage Access Manager
3. Run the displayspecifier.vbs script.

Centrify Corporation does not take any responsibility for the content or availability of the links in this article and it was provided as a courtesy.  Customers should contact the vendor if there are any further questions.