One of the most powerful features in the Centrify platform is the ability to centrally push out Group Policy to Linux systems. Centrify recommends deploying at least 1 GPO to your systems so you have the means to centrally configure the agent behavior in your environment. Group policy settings are documented in the . In the event a change to the Centrify parameters is needed for the environment, a GPO change can quickly deploy the change to the systems.
Customers should use the “Set crontab entries” GPO, explained page 186 of the guide, to deploy a crontab entry that runs the program /usr/share/centrifydc/adedit/adsyncignore every week. This will assure Centrify is not looking up in AD local users, not defined in AD. This is a very strong recommendation. Customers can choose another mechanism to deploy the crontab entry to systems if that makes more sense for their environment.