Generate the forwardable tickets

Specify whether you want Centrify DirectControl Agent to create forwardable Kerberos user tickets.

Creating a forwardable ticket allows a user's logon ticket to be sent to another computer and used to access to additional systems and resources.

If you select Enabled for this group policy, service tickets can be forwarded from one service or resource to another. If you do not want tickets to be forwarded, you can uncheck this option to prevent Centrify DirectControl Agent from creating forwardable tickets.

This group policy modifies the krb5.forwardable.user.tickets setting in the Centrify DirectControl configuration file.

Supported on:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Namekrb5.forwardable.user.tickets
Value TypeREG_SZ
Enabled Valuetrue
Disabled Valuefalse

--- FileVault ---

Encrypt contents with FileVault
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Namekrb5.forwardable.user.tickets
Value TypeREG_DWORD
Default Value0
True Value1
False Value0
Configure mobile account options



--- Size ---

Restrict size
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Namekrb5.forwardable.user.tickets
Value TypeREG_DWORD
Default Value0
True Value1
False Value0
fixed size (MB):

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Namekrb5.forwardable.user.tickets
Value TypeREG_DWORD
Default Value250
Min Value0
Max Value
Home folder location:



Path:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Namekrb5.forwardable.user.tickets
Value TypeREG_DWORD
Default Value

centrifydc_settings.admx

Administrative Templates (Computers)

Administrative Templates (Users)