Require dzdo command validation check

Specify whether to enforce the validation check for dzdo privileged commands.

If dzdo validator exists and is trusted, then whether to execute privileged commands or not depends on the result of dzdo validator (which in turn configurable by group policy "Set dzdo validator").

If dzdo validator does not exist or is not trusted, then whether execute privileged commands or not depends on this group policy. When disabled, dzdo will execute the privileged commands. When enabled, dzdo will not execute the privileged commands.

This policy modifies the dzdo.validator.required setting in the Centrify DirectControl configuration file.

Supported on:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Dzdo
Value Namedzdo.validator.required
Value TypeREG_SZ
Enabled Valuetrue
Disabled Valuefalse

Label and text for the snippet keys

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Dzdo
Value Namedzdo.validator.required
Value TypeREG_DWORD
Default Value['0:Onboard\\nHome:https\\://launchpad.net/onboard', '1:Example:Create your macros here.']

centrifydc_settings.admx

Administrative Templates (Computers)

Administrative Templates (Users)