Enable MFA for dzdo in classic zone

Dzdo MFA for classic zone.

If this is enabled and MFA is enabled for the classic zone, when dzdo needs the re-authentication as self for invoking user who is already set to require MFA, it will try MFA for such user.

Default is disabled

This policy modifies the dzdo.legacyzone.mfa.enabled setting in the Centrify DirectControl configuration file.

Supported on:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Dzdo
Value Namedzdo.legacyzone.mfa.enabled
Value TypeREG_SZ
Enabled Valuetrue
Disabled Valuefalse

Inactive transparency delay

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Dzdo
Value Namedzdo.legacyzone.mfa.enabled
Value TypeREG_DWORD
Default Value1.0

centrifydc_settings.admx

Administrative Templates (Computers)

Administrative Templates (Users)