Specify users to infinitely renew Kerberos credentials

Specify list of users whose Kerberos credentials require infinite renewal even after users have logged out. These users must be zone enabled (mapped users not supported).

If this policy is enabled, user credentials are renewed (or reissued) automatically. The default value is disabled.

User names should be in formats , , or e.g. "test_user", "test_user@example.com", "test_user_sam", "test_user_sam@example.com".

This group policy modifies the krb5.cache.infinite.renewal.batch.users setting in the Centrify DirectControl configuration file.

Supported on:

Skip items whose name contains

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Name{number}
Value TypeREG_DWORD
Default Value

centrifydc_settings.admx

Administrative Templates (Computers)

Administrative Templates (Users)