Return
-
Title
Unix tab not available or grayed out -
Description
Using the "Find..." function from the "Action" menu (or right-clicking the domain name) in Active Directory Users and Computers and then opening a user or group object does not display the Unix tab or the Unix tab is currently grayed out.However, when browsing the OU structure and locating the object the "Unix Account" tab is available. -
Cause
Display specifiers are Active Directory objects that provide information about how other objects in the directory display in client applications.Because it is common to use the Find dialog in ADUC to manage users and groups, One Identity recommends that you register display specifiers with Active Directory.Registering display specifiers provides the following benefits:- Unix Account properties appear in ADUC Find dialog results.- Unix Personality objects are displayed correctly in ADUC. This only applies if the Unix Personality schema has been installed.Note: You must have Enterprise Administrator rights to register display specifiers.You can inspect exactly which changes are made during the display specifier registration process by viewing the DsReg.vbs script found in the Safeguard Authentication Services installation directory. You can use this script to unregister display specifiers at a later time. -
Resolution
To register display specifiers with Active DirectoryFrom a Windows management workstation with Safeguard Authentication Services installed, navigate to Start | Quest Software | Authentication Services | Control Center.Click Preferences on the left navigation panel.Expand the Display Specifiers section.Note: The Register Display Specifiers link only displays in the Control Center when display specifiers are not already registered with Active Directory. If the display specifiers are registered, Control Center does not display the link.Click the Register Display Specifiers link to register display specifiers with Active Directory.While it is registering the display specifiers with Active Directory, Control Center displays a progress indicator. When the process is complete, Control Center indicates that display specifiers are registered.Alternatively, you can register display specifiers from the command line, as follows:Log in as a user with Enterprise Administrator rights.Open a command prompt, navigate to the Safeguard Authentication Services installation directory, and run this command:DsReg.vbs /addNote: To register One Identity Active Roles Server display specifiers with One Identity Active Roles Server, navigate to the installed location for Safeguard Authentication Services and run the following command:DsReg.vbs /add /provider:EDMSYou must install the One Identity Active Roles Server management package locally or DsReg.vbs returns an "Invalid Syntax" error.To see all the DsReg.vbs options, run the following command:DsReg.vbs /help -
Additional Information
The account that performs the registration of Display Specifiers or the Schema Optimization must be a member of Enterprise Admins.