Troubleshooting setup issues of the UNAB Unix Attribute Plugin for the Active Directory Users and Computers console

Document ID : KB000048313
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

This document demonstrates preparation, setup and troubleshooting steps for the UNAB Unix Attribute Plugin for the Active Directory Users and Computers console (dsa.msc) on a Windows 7 SP1 box.

Solution:

Do the following in your Win7 SP1 to successfully enable the UNAB plugin:

  • download latest version of RSAT (Remote Server Administration Tools)

    for Windows 7 with Service Pack 1 (SP1)
    http://www.microsoft.com/en-us/download/details.aspx?id=7887

  • logon as Domain Admin to your Win7 SP1 box and install the RSAT package you downloaded

  • open a powershell and submit these commands to enable the AD tools
    dism /online /enable-feature /featurename:RemoteServerAdministrationTools
    dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Roles
    dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Roles-AD
    dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Roles-AD-DS
    dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Roles-AD-DS-SnapIns
    dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Roles-AD-Powershell
    dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Roles-AD-DS-AdministrativeCenter
    dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Roles-AD-DS-NIS
    dism /online /enable-feature /featurename:RemoteServerAdministrationTools-Roles-AD-LDS

  • in the same shell verify all AD related RSAT roles are enabled with this command
    dism /online /get-features

  • you can also do the same in a GUI
    Control Panel \ All Control Panel Items \ Programs and Features \ Turn Windows features on or off
    drill down to Remote Server Administration Tools \ Role Administration Tools and check "AD DS and AD LDS Tools"

  • mount the CA ControlMinder 12.8 Endpoint Components for UNIX DVD (DVD11133913E.iso)

  • Install the CM Unix Attribute Plugin
    X:\ADTools\UnixADTabExt\<platform>\setup.exe

  • verify the installation logs
    %windir%\CA_AccessControl_UnixAttr_x86.log
    %windir%\AC_UNAB_TagRegistration.log

Open the Users and Computers console (dsa.msc), retrieve a user's property page and see if you have the "CA ControlMinder Unix Attributes" tab

Should there be any issue try running in a cmd to RegisterUnixAttrPlugin:
ACUnixAttributesTabRegistration.exe -admin "mulan04dom\administrator" -password ****** -file "C:\Windows\AC_UNAB_TagRegistration.log" -debug

(Note: this is one command in a single line)

to UnRegisterUnixAttrShell
regsvr32.exe /u "C:\Windows\system32\ACUnixAttributesShellExt.dll"

to RegisterUnixAttrShell
regsvr32.exe "C:\Windows\system32\ACUnixAttributesShellExt.dll"