CCM is integrated with Active Directory, passwords of CCMadministrator and CCMsysuser are syncronized.
When users try to login into extension mobility service they receive error  which is:
Proxy Authentication Not Allowed: the appID that is specified does not have rights to log in or log out other users.
I guess that appID is CCMSysUser here, so where could these right could possibly be turned on? I've tried looking in the attributes of CCMSysuser in Active Directory - no luck, nothing like proxy rights/auth found.
Are you getting this error “Installer User Interface Mode Not Supported. The installer cannot run in this UI mode. To specify the interface mode, use the -i command-line option, followed by the UI mode identifier. The value UI mode identifiers...
The below trick might come handy when you have to add a new node to a cluster but you don't have or is unsure of the security password for the publisher. This procedure has been around for ages.
1) Login into the CLI of the Publisher.