vastool status Or MCU message: FAILURE: 619 The default search policy is NOT configure for QAS! or WARNING 620 search policy is configured to include (4267909)

The check being run is designed to ensure that OSX is configured to use QAS properly. The message is being returned on OSX from Management Console for Unix (MCU)  or when the following command is run /opt/quest/bin/vastool status 

FAILURE: 619 The default search policy is NOT configure for QAS!

WARNING: 620 The default search policy is configured to include $directory.

If OpenDirectory is configured the 620 warning appears that conflicts with Authentication Services.  Only one directory service should be used.

WARNING: 620 The default search policy is configured to include $directory.

The 619 message means Authentication Services  is  not configured properly 

FAILURE: 619 The default search policy is NOT configure for QAS!

RESOLUTION:

1. Go to System Preferences

2 - Click on Users & Groups

3 - Click the lock to make changes and enter in password

4 - Click Login Options

3 - Click Join button next to Network Account Server

4 - Cick the Open Directory Utility button

5 - Click the lock to make changes and enter in admin password when asked

6 - On this screen you should see directory services for both Native Apple AD which says just Active Directory ensure this is not joined to the domain.    Right below you should see Active Directory + Group Policy (QAS)  this should be joined to the domain.

To Delete Native Apple AD do the following steps:

7 - Click the Search Policy Tab

8 - Delete the Active Directory search path

9 - Click the contents tab 

10 - Delete the Active Direcotory Search path

11- Go to terminal and run the comman:  sudo /opt/quest/bin/vastool status   

Note the warning message and failure should no longer appear.