Centrify policy limitations

Some Centrify group policies allow you to select values from a list when you enable the group policy. Depending on how the list is configured, in some cases you cannot select more than 999 items from the list.

For example, if you enable the Specify AD users allowed in Auto Zone group policy, you are prompted to specify the names of AD users. You can specify AD user names by typing them, by specifying a file containing a predefined list of user names, or by selecting them from the list of all AD users. Because of the way in which the AD user list is configured, you cannot select more than 999 users from it. If you attempt to select more than 999 users, the following message is displayed:

Please enter 0 to 999 entries for User

This limitation applies to several other group policies in addition to Specify AD users allowed in Auto Zone.

It is generally not advisable to select 1000 or more items from a list to define a data set in a group policy. Instead, whenever possible you should use groups or a file containing a predefined list of items to define a large data set.