Applies to: All versions of Centrify DirectControl.
Problem:
Provisioning by executing the zoneupdate command failed with error
C:\Program Files\Centrify\Zone Provisioning Agent\cli\zoneupdate Temp ===== Temp ===== Error: Failed to retrieve zone object Temp
Cause:
This Active Directory environment has cross domain with one-way trust. The parent domain is abc.com and the child domain is us.abc.com. The domain us.abc.com trust the domain abc.com. The user executing the zoneupdate command is the zone provisioning agent service account from the domain abc.com with access to users in that domain, but the computer to be provisioned is in the domain us.abc.com .
Workaround:
Resolution:
In a cross domain with one-way trust. when provisioning manually using the zoneupdate command, please specify the target domain using the option /d:DomainName or /Domain:DomainName
zoneupdate.exe /p /d|Domain:DomainName <The FQDN of the target domain>
Example:
To preview: zoneupdate.exe /p /v /log:Verbose /d:us.abc.com temp
To provision: zoneupdate.exe /v /log:Verbose /d:us.abc.com temp
For more information about zoneupdate.exe command and its usage / options,