Computer Configuration > Policies > Centrify Settings > Mac OS X Settings > Security & Privacy > Require password to unlock each secure system preference
Lock sensitive system preferences to prevent users who aren’t administrators from changing them. This group policy requires users to provide an administrator’s password to unlock each secure system preference before they can make changes.
If you enable this policy, users must provide an administrator password to access any secure system preference. If the current user is logged on as an administrator and this policy is not configured or disabled, the user can access and change secure system preferences without providing the administrator password.
This policy can take effect dynamically at the next group policy refresh interval.