Overriding and modifying group properties
If you are using hierarchical zones, group profile information is inherited from parent zones into any child zones you define. You can override the inherited profile attributes at any time to create a new group profile in a specific child zone or on individual computers, if needed.
You can also modify either the group profile or the Active Directory group properties for any group at any time using the tool of your choice. For example, you can use Access Manager, the Access Module for Windows PowerShell, ADEdit, Active Directory Users and Computers, or the Centrify Windows API to modify the zone profile or Active Directory properties for a selected group.