Force dzdo re-authentication when relogin

Force dzdo re-authentication when relogin.

When users authenticate with dzdo once, a ticket will be temporarily created per tty. This ticket allows dzdo commands to run without re-authentication in a short period (e.g. 5 minutes), and this ticket will be re-used when user login again.

If this setting is enabled, the tickets will be removed when user logout. Thus users are forced to authenticate again once relogin and call dzdo. Default is false, i.e. dzdo tickets are not cleared when user logout.

This group policy modifies the adclient.dzdo.clear.passwd.timestamp setting in the Centrify DirectControl configuration file.

Set as user default keychain

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\Dzdo
Value Name	adclient.dzdo.clear.passwd.timestamp
Value Type	REG_DWORD
Default Value	1
True Value	1
False Value	0

Delete the Password protected 'Login' Keychain after login

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\Dzdo
Value Name	adclient.dzdo.clear.passwd.timestamp
Value Type	REG_DWORD
Default Value	0
True Value	1
False Value	0