Installing group policy extensions separately from Centrify Access Manager

Centrify group policy extensions are packaged separately from Access Manager, enabling the following installation options:

  • You can install Centrify group policy extensions on any Windows domain computer without also installing Access Manager on the computer.
  • You can install Access Manager on any Windows domain computer without also installing Centrify group policy extensions on the computer.

The group policy extension package has its own .exe and .msi installer files, so that you can install group policy extensions interactively through an installation wizard (by executing the .exe file) or silently from the command line (by executing the .msi file). Additionally, you can select or de-select the group policy extensions for installation when you run the Access Manager installation wizard.

Note:   At the start of an installation, the group policy extension installer checks for previously installed versions of group policy extensions. If it detects a newer version than the version you are trying to install, the installation stops.

To install standalone group policy extensions interactively with the group policy installer:

  1. On the Windows domain computer where you will install group policy extensions, navigate to the Centrify ISO bundle containing the group policy extension installer file.

    The installer file is named CentrifyDC_GP_Extension-#.#.#-architecture.exe.

    For example:

    CentrifyDC_GP_Extension-5.2.3-win64.exe

    In most distributions, the installer file is located in the following folder in the ISO bundle:

    DirectManage\Group Policy Management Editor Extension
  2. Double-click the installer file to launch the Centrify Group Policy Management Editor Extension Setup Wizard.

  3. Follow the wizard installation instructions to install the group policy extensions.

To install standalone group policy extensions interactively with the Management Services installer:

  1. On the Windows domain computer where you will install group policy extensions, launch the setup program for Centrify Management Servicescomponents as described in Installing authentication, privilege elevation, and audit and monitoring services and updating Active Directory.
  2. Proceed through the setup program until you reach the wizard page in which to select individual components to install.
  3. De-select every component except for Group Policy Management Editor extension for managing Centrify group policies:

  4. Continue to follow the wizard installation instructions as described in Installing authentication, privilege elevation, and audit and monitoring services and updating Active Directory until you are finished with the installation.

To install standalone group policy extensions silently without installing Access Manager:

  1. Open a Command Prompt window.
  2. Execute the group policy extension .msi installer file from the command line.

    The installer file is named CentrifyDC_GP_Extension-#.#.#-architecture.msi.

    For example:

    CentrifyDC_GP_Extension-5.2.3-win64.msi

    In most distributions, the installer file is located in the following folder in the ISO bundle:

    DirectManage\Group Policy Management Editor Extension

    The following is a typical command to run the 64-bit .msi installer file:

    msiexec /qn /i "CentrifyDC_GP_Extension-5.2.3-win64.msi”

    For more information about installing with a .msi file, see Installing the Centrify Agent for Windows silently on remote Windows computers.

To install Access Manager interactively without installing group policies:

  1. On the Windows domain computer where you will install group policy extensions, launch the Centrify Management Services setup program and select Authentication & Privilege as described in Installing authentication, privilege elevation, and audit and monitoring services and updating Active Directory.
  2. Proceed through the setup program until you reach the wizard page in which to select individual components to install.
  3. De-select the Group Policy Management Editor extension component.
  4. Continue to follow the wizard installation instructions as described in Installing authentication, privilege elevation, and audit and monitoring services and updating Active Directory until you are finished with the installation.