Commands available for users

Many of the Centrify command-line programs require root privileges because they enable you to perform administrative tasks or operations that must be kept secure. In some cases, commands support different options or produce different results if run using an administrative account than when run using a standard user account.

The following table displays a brief description of the commands you can run when you are logged on as a standard user without elevated privileges.

Use this command To do this

Check the operating system, network, and Active Directory connections to verify that a computer is ready to join an Active Directory domain.

The syntax for the adcheck program is:

adcheck domain_name [options]

The domain_name should be a fully-qualified domain name.


Display the domain controller associated with the Active Directory domain you specify.

The syntax for the adfinddomain program is:

adfinddomain [options] domain_name

Retrieve group policies from the Active Directory domain controller and apply the policy settings to the local computer and current user immediately.

The syntax for the adgpupdate program is:

adgpupdate [options]

Display the real and effective UIDs and GIDs for the current user or a specified user.

The syntax for the adid program is:

adid [option] [username|uid]

Display detailed Active Directory, network, and diagnostic information for a local computer. Options control the type of information and level of detail displayed.

The syntax for the adinfo program is:

adinfo [options] [--user username[@domain]] [--password password]

Display the current status of agent features on the local computer. Agent features can be licensed or express if unlicensed.


Change your Active Directory password.

After you change your password, you must use the new password for all activities that are authenticated through Active Directory, including logging on to the UNIX shell, logging on to Windows computers, and accessing applications on both UNIX and Windows computers.


Query Active Directory for information about users and groups.

This command is provided for backward compatibility. In most cases, you should use ADEdit (adedit) commands or scripts to perform administrative tasks in Active Directory from Linux or UNIX computers.

The syntax for the adquery program is as follows:

adquery user|group [options] [username|groupname]

View or change the list of groups of which you are a member.

The syntax for the adsetgroups program is:

adsetgroups [options] group

Perform file operations, such as get a file, write a file, or display the contents of a directory using the Centrify smb stack.

The syntax for the adsmb program is:

adsmb file_operation -s share [options]

The valid file_operations are get, getnew, put, putnew, dir, delete, mkdir, and rmdir.


Execute a privileged command as root or another specified user.

The syntax for using the dzdo program is:

dzdo [options]

Display detailed information about the configuration of rights and roles for one or more specified users on the local computer. If you do not specify a user, the command returns information for the currently logged on user.

The syntax for the dzinfo command is:

dzinfo [options]

Run commands in a restricted environment shell. This shell is a customized Bourne shell that provides environment variables, job control, command history, and access to specific commands defined by roles.

For information about the additional commands available if you have root or root-equivalent privileges on a computer, see the Administrator’s Guide for Linux and UNIX or the Centrify Command Reference Guide.