Disabling Apple’s built-in Active Directory plug-in

Apple provides a built-in Apple Directory plug-in that may interfere with the Centrify DirectControl Agent for Macinstallation and operation. Therefore, before installing the agent, disable Apple’s built-in Active Directory plug-in. In addition, remove Active Directory from the Authentication and Contacts search paths. If this plug-in is enabled and the Centrify DirectControl Agent for Mac has been installed, disable the plug-in, then reboot the Macintosh computer for reliable Centrify operation.

To disable the Apple Directory plug-in and remove Apple Directory from the Authentication and Contacts search paths:

On a Mac computer, open the Directory Utility.
You can find the Directory Utility in one of these folders depending on the operating system that you are running:
- /System/Library/CoreServices
- /Applications/Utilities
Click the lock icon and enter credentials to allow you to make changes.
Click the Search Policy icon.
Click the Authentication tab, then select Custom path in the Search box.

If Active Directory was previously enabled, Active Directory appears in the Directory Domains box; for example:
```
/Active Directory/All Domains
```
Select /Active Directory/All Domains and click Remove — or select the minus (‑) sign). Then click Apply.
Click the Contacts tab, then select Custom path in the Search box. If Active Directory was previously enabled, Active Directory shows (in red font) in the Directory Domains box; for example:
```
/Active Directory/All Domains
```
Select /Active Directory/All Domains and click Remove. Then click Apply.
Close the window.
If you have already installed the Centrify DirectControl Agent for Mac, reboot the computer.