Specify whether to automatically reissue user credentials when they expire. If you enable this group policy, the Centrify Agent keeps a hash of the user’s password in memory indefinitely. If you do not enable this policy, or if you explicitly disable it, a user’s credentials periodically expire and the user must be re‑authenticated by re-entering a valid password.
If you enable this policy, user credentials are automatically reissued, as needed, as long as the
adclient process continues to run even if the computer is disconnected from Active Directory. If you stop or restart
adclient, however, the user’s password hash is removed from memory. After stopping or restarting
adclient, users must be re-authenticated by logging on with a valid user name and password.
The default value is
This group policy modifies the
krb5.cache.infinite.renewal setting in the agent configuration file.