Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-7447: During Cloud Connector installation, the following error is displayed: "Failed to modify display specifier. Access is denied."

App Access Service ,   App Gateway Service ,   Privileged Access Service ,  

16 September,16 at 05:00 PM

Applies to: Centrify Identity Service


We are trying to complete installation of the Centrify Cloud connector software on 2 servers for use with single sign-on and right at the very end of the installation wizard, we receive the following error:

          Failed to modify display specifier. Access is denied.

How do we address this error and complete the connector installation?


This scenario is generally caused by required permissions that are not currently associated with the account attempting to perform the cloud connector installation. The installation package contains bits for both the cloud connector service in addition to optional extensions for Active Directory Users and Computers (ADUC) and Group Policy Management templates. The cloud connector service will require Domain Admin permissions (or equivalent) while installation of the ADUC and GP extensions will require Enterprise admin permissions per our online help.


If the installation account does not have the needed permissions or do not wish to install the optional components, administrators can simply deselect them from the installation wizard as shown in the below image. This should allow the installation wizard to continue. After the installation wizard completes, the registration wizard will launch automatically so be sure to have the default cloud admin account received with the tenant registration welcome email handy as administrators will be asked to enter the account details in order to register the service.


connector install.jpg


Once an administrator registers for the Identity Service and receives a welcome email, the cloud tenant is ready to manage both cloud users and policy settings – no additional installation is needed to leverage our solution in a “cloud only” configuration. This can be a great first step with testing or for smaller organizations.

For additional information not covered in this guide or troubleshooting assistance, please review Centrify Online Help or visit the Customer Support Portal at

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.