Generate the forwardable tickets

Specify whether you want Centrify DirectControl Agent to create forwardable Kerberos user tickets.

Creating a forwardable ticket allows a user's logon ticket to be sent to another computer and used to access to additional systems and resources.

If you select Enabled for this group policy, service tickets can be forwarded from one service or resource to another. If you do not want tickets to be forwarded, you can uncheck this option to prevent Centrify DirectControl Agent from creating forwardable tickets.

This group policy modifies the krb5.forwardable.user.tickets setting in the Centrify DirectControl configuration file.

--- FileVault ---

Encrypt contents with FileVault

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Name	krb5.forwardable.user.tickets
Value Type	REG_DWORD
Default Value	0
True Value	1
False Value	0

Configure mobile account options

--- Size ---

Restrict size

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Name	krb5.forwardable.user.tickets
Value Type	REG_DWORD
Default Value	0
True Value	1
False Value	0

fixed size (MB):

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Name	krb5.forwardable.user.tickets
Value Type	REG_DWORD
Default Value	250
Min Value	0
Max Value

Home folder location:

Path:

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Name	krb5.forwardable.user.tickets
Value Type	REG_DWORD
Default Value