Configuration options for Windows computers

The following sections describe multi-factor authentication configuration options for Centrify-managed Windows computers. In addition to these options, you can use group policies to customize basic operations for connecting to the Centrify Identity platform and multi-factor authentication on Windows computers. For more information on these group policies, please see the Group Policy Guide.

You can find the group policies for multi-factor authentication and the grace period on Windows computers in the Group Policy Management Editor under Computer Configuration > Centrify Settings > Windows Settings > MFA Settings.

To set the grace period, use the following group policies:

• Configure multi-factor authentication lock screen grace period. This group policy enables the grace period for lock screen.
• Configure multi-factor authentication user privilege elevation grace period
  This group policy allows the administrator to set the grace period for privilege elevation for users.