Applies to: All versions of Centrify DirectControl Console/DirectManage Access Manager
Question:
How to verify if a Notification Handler has been enabled?
Answer:
If a Notification Handler is setup properly, when deleting an AD user that was added to a Zone, the following should be seen:
To verify it in detail, check the following two locations:
1) AD display specifier
Using ADSI Edit, browse to
domain/Configuration/DisplaySpecifiers/
LanguageID/DS-UI-Default-Settings
Note:
The default naming context of ADSIEdit may not show the Configuration container. You can, however, specify it manually.
- Select Action -> Connect to... In the "Connection Point" frame,
- choose "Select a well known Naming Context".
- Choose "Configuration" from the drop-down box.
- Hit OK,
The Configuration container, and its sub-containers such as CN=Services and CN=Sites, will now be visible.
For example, if the Active Directory domain is ajax.org and the language support is US-English (CN=409), the entry to this object would be found in:
ajax.org/Configuration/DisplaySpecifiers/409/DS-UI-Default-Settings
object path: CN=DS-UI-Default-Settings,CN=<localeID>,CN=DisplaySpecifiers,CN=Configuration,DC=domain,DC=com
Check if the dSUIAdminNotification attribute of the above object contains the following values by right clicking on the object (DS-UI-Default-settings), and choosing properties:
<any number>,{D0D2C2AE-C143-4C81-A61C-BE95C3C5EEDF}
<any number>,{DD3941B8-CD2E-4759-AE77-02E9CCD84BD6}
2) COM objects is installed
Check if the following keys exist in the registry: (On machine where ADUC Notification Handler is needed)
HKEY_CLASSES_ROOT\CLSID\{D0D2C2AE-C143-4C81-A61C-BE95C3C5EEDF}
HKEY_CLASSES_ROOT\CLSID\{DD3941B8-CD2E-4759-AE77-02E9CCD84BD6}
In the "InprocServer32" key under the above keys, the value of "CodeBase" should be the path of the installed aduc.mmc.dll.