Blacklist DNS DC hostnames

Specify the list of domain controllers that should be filtered out when resolving the domain controller to contact through DNS.

This policy enables you to prevent Centrify DirectControl Agent (adclient) from attempting to contact domain controllers that are known to be inaccessible, for example, because they reside behind a firewall, or domain controllers that shouldn't be contacted, for example, because of their physical location or because they are no longer valid domain controllers for the site.

DC hostname:
Fully qualified domain name of domain controller.

This group policy modifies the dns.block setting in the Centrify DirectControl configuration file.

Sync in the background:

Sync interval (minutes):

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\BlockDNS
Value Name
Value Type	REG_DWORD
Default Value	20
Min Value	0
Max Value

Show status in menu bar

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\BlockDNS
Value Name
Value Type	REG_DWORD
Default Value	1
True Value	1
False Value	0