Set user name and UID conflict message

Specify the message displayed if there are both user name and user ID conflicts detected during login. This message is displayed if there are two local account conflicts.

For example, this message is displayed if there is a local user and the Active Directory user that have the same UID but different user names, and there is also another local account with the same user name as the Active Directory user but the two accounts have different UID values.

When the message is displayed, the %s token in the message string is replaced with the name of the first conflicting local account, and the %d token is replaced with the UID of the second conflicting local account. The message string you define must contain exactly one %s token and exactly one %d token, in that order, and no other string replacement (%) characters.

The default message is "Accounts with conflicting name (%s) and UID (%d) exist locally"

This group policy modifies the pam.account.conflict.both.mesg setting in the Centrify DirectControl configuration file.

Supported on:

AD users that require multi-factor authentication (enter the comma-separated user or group names, e.g. [email protected], [email protected], or use * to include all AD users):

Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Pam
Value Name
Default Value


Administrative Templates (Computers)

Administrative Templates (Users)