Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-0237: Unable to see Centrify Profile Tab when doing "Find" in ADUC

Centrify DirectControl ,  

12 April,16 at 11:45 AM

Applies to: All versions of Centrify DirectControl on Microsoft Windows 2000, 2003 (32 and 64-bit systems)

Problem:
Using Active Directory Users and Computers and "Finding" a user, computer or group from Active Directory, the Centrify Profile tab does not appear when the properties dialog for the object is opened from the search results.

Cause:
To extend an AD user object to have Centrify profile tab, we have used two approaches.
 
1) Using display specifier.
2) Using extension snapin.
 
The one that we show Centrify profile extension from our user node within our snapin is done by extension snapin approach.
 
http://msdn.microsoft.com/en-us/library/ms692766(v=VS.85).aspx
 
The property sheet hosting all the property pages is owned by our MMC snapin.   That's why we can add whatever property page we like *IF* the property page is launched from the user node in our MMC console's result pane.
 
In order to provide a consistent user experience, when we are finding an object from Active Directory, Centrify console is calling Microsoft's object picker.  Within the object picker, user can also launch the property dialog from the searched results.  However, the property dialog launched in this way is actually owned by Microsoft's object picker.  Microsoft only allows third party to extend the property page by using display specifier. 
 
http://msdn.microsoft.com/en-us/library/ms676902(v=VS.85).aspx
 
The display specifier by default can only be updated by the domain administrator of the root domain or the enterprise admin.  You can also ask enterprise admin to grant you permission on the display specifier container. 
Then, you can use your own account to run that VBscript.
 
The update of the display specifier is reversible.  The only purpose of updating the display specifier is to tell the client component what plugin it should load when displaying a particular AD object.  If the plugins cannot be
found, it will just skip it.
 
Resolution:
displayspecifier.vbs script needs to be run in order to resolve the problem. Please follow the instructions below:

1. Log on using an enterprise administrator account or a domain administrator for the forest root domain.
2. Open a Command Prompt window and change to the Centrify DirectControl directory. For example:
cd C:\Program Files\Centrify\Centrify DirectControl
3. Run the displayspecifier.vbs script.
 

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.