Applies to: Centrify for Mobile

Problem:

When using a Service Account that has been granted full permissions to the OU specified for enrollment, device enrollment fails with the the following error found in the Cloud Connector log: 

 

​Cause: 

This error is presented due to a lack of permissions for the Service Account to the OU.  When a service account is specified to run the Cloud Connector service, the account is not automatically configured for proxy permissions on the OU.  


Resolution:

In order to grant the missing permissions for the account to the OU, the following steps will need to be taken:

1. Open up ADSI Edit:​
   • Start > All Programs > Administrative Tools > ADSI
2. ​Navigate to the OU in question, right-click on the OU and choose "Properties"
   • 
3. ​Navigate to > "Security" > "Advanced"
   • 
4. Under the "Permissions" tab navigate to the Service Account and click "Edit..."
   • 
5. In the "Apply to:" drop-down box, choose "This object and all descendant objects"
   • 
6. Click "OK" and then "Apply" on the Advanced Security Settings window.