Force switching to different domain controller in the preferred site periodically

This group policy specifies whether Centrify DirectControl Agent should switch its ldap binding to different domain controller in the preferred site periodically.

Binding to a different domain controller in the same site periodically can help to facilitate load balancing between the domain controllers.

After switching to a different domain controller, Centrify DirectControl Agent has to rebuild its cache entirely from AD; and if there are many machines joined to a large domain, enabling this group policy could have adverse impact on the domain controllers.

If you select Enabled for this group policy, the Centrify DirectControl Agent will attempt to connect to another domain controller in the preferred site when the period specified by adclient.binding.refresh.interval setting in the Centrify DirectControl configuration file has expired.

If this group policy is not configured, the default value is Disabled, that is the ldap binding will not be refreshed periodically after switching to the closest site.

This group policy modifies the adclient.binding.refresh.force parameter in the Centrify DirectControl configuration file.

Supported on:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Timeouts
Value Nameadclient.binding.refresh.force
Value TypeREG_SZ
Enabled Valuetrue
Disabled Valuefalse

Delete mobile accounts at specified time after user's next login:

Time:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Timeouts
Value Nameadclient.binding.refresh.force
Value TypeREG_DWORD
Default Value5
Min Value0
Max Value
Time Unit:



Delete only after successful sync
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Timeouts
Value Nameadclient.binding.refresh.force
Value TypeREG_DWORD
Default Value1
True Value1
False Value0

centrifydc_settings.admx

Administrative Templates (Computers)

Administrative Templates (Users)