Zone information for managed computers

If you have authentication and privilege elevation features deployed, report Section 1 includes zone mode information in the “DirectControl/DirectAuthorize Agent Type” string shown in Example 2: Zone mode and number of agents.

Note:   Zone mode applies only to computers where authentication and privilege elevation features are installed. Zone mode does not apply to computers using audit and monitoring service licenses.

Depending on the nature of your deployment, the zone mode information displays one of the following values:

  • Auto Zone if the computer is in a Centrify Auto Zone.

    You cannot use Centrify rights and roles on computers joined to an Auto Zone.

    If the Zone mode for a computer is Auto Zone, the computer is included in the authentication service (DirectControl) license count.

  • Zoned if the computer is in a standard Centrify zone.

    All authentication and privilege elevation features are supported for computers in Centrify zones on most platforms. However, the Centrify agent for Mac OS does not support Centrify rights and roles.

    If the Zone mode for a computer is Zoned, the computer is included in the authentication service (DirectControl) license count.

  • Express if the computer has a Centrify Express agent installed.

    Computers with a Centrify Express agent have limited functionality. For example, you cannot apply group policies or use Centrify rights and roles on computers with the Centrify Express agent.

    If the Zone mode for a computer is Express, the computer is not included in the authentication service (DirectControl) license count.

  • Unmanaged if a computer has the Centrify agent installed but is not connected to a zone.

    This agent type is primarily for computers that use Centrify MFA for Windows login authentication.

    If the Zone mode for a computer is Unmanaged, the computer is not included in the authentication service (DirectControl) license count.

  • Null Zone if a computer is joined to the null zone.

    If the Zone mode for a computer is Null Zone, the computer is not included in the authentication service (DirectControl) license count.

See Example 2: Zone mode and number of agents for details about how zone mode information is displayed in the report.