After upgrading Quest Authentication Services the product version in operatingSystemVersion is still showing the old version.
This attribute is set with the credentials of the account used during the join. After the join process, the computer object does not have sufficient privileges to modify these attributes. QAS will periodically attempt to update the operatingSystem and operatingSystemVersion attributes with the current OS and VAS version information, silently failing in most case.
If this behavior is desired then the default privileges for these attributes must be modified to allow the computer object to modify the values.
Step by step instructions for delegating permissions to a Unix Computer object to update it's own settings.
- Open ADUC
- Right click on OU holding UNIX objects
- Click Delegate Control
- Click Next
- Click Add
- Type Domain Computers in search box, click OK
- Click Next
- Click radio button "Create a custom task to delegate
- Click radio button "Only the following objects in the folder"
- Pace checks next to "Computer Objects"
- Click next
- Uncheck General
- Check Property-specific
- Place checks in following attributes:
Read OperatingSystem
Write OperatingSystem
Read OperatingSystemVersion
Write OperatingSystemVersion
- Click Next
- Click Finish
- Repeat on all OUs where UNIX objects are
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback 使用条款 隐私 Cookie Preference Center