Adding Windows computers to a zone
To use identity and privilege management features, a Windows computer must have the Centrify agent for Windows installed, be joined to an Active Directory domain, and joined to a Centrify zone. Depending on your organization’s policies, you can either allow any authenticated user with a valid domain account to join a zone or require a domain administrator account to join a zone.
If you want to have individual users deploy the Centrify agent for Windows on their own computers and join a zone without administrative rights, you can prepare the zone in advance and let users know which zone to join. If only domain administrators are allowed to join computers to zones, you should log on to computers with the Centrify agent for Windows installed using an account that has appropriate administrative rights and provide a password.