Set user's primary gid in Auto Zone

Specify the default primary group for all users in Auto Zone.

The group policy value can be a non-negative integer or -1. The GID can be specified by setting a non-negative integer.

When set to -1, the user AD primary group will be used as the user's GID. If the user does not have an AD primary group, then the user's GID will be set to the group "nobody". Users' primary GID would be generated by the scheme we choose, like APPLE, RID or AD_VALUE. The priority of these schemes is "APPLE > RID > AD_VALUE". The default scheme is RID, we can switch to Apple scheme by enabling the group policy "Generate new uid/gid using Apple scheme in Auto Zone".

This group policy will be ignored if the setting in the Centrify DirectControl configuration file is set to true.

By default, primary GID is set to 20 on Darwin, and -1 on Linux, Solaris, HPUX and AIX.

This policy modifies the auto.schema.primary.gid setting in the Centrify DirectControl configuration file.

Supported on:

Skip items whose partial path matches

Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Adclient
Value Name{number}
Default Value


Administrative Templates (Computers)

Administrative Templates (Users)