Specify users to infinitely renew Kerberos credentials

Specify list of users whose Kerberos credentials require infinite renewal even after users have logged out. These users must be zone enabled (mapped users not supported).

If this policy is enabled, user credentials are renewed (or reissued) automatically. The default value is disabled.

User names should be in formats , , or e.g. "test_user", "[email protected]", "test_user_sam", "[email protected]".

This group policy modifies the krb5.cache.infinite.renewal.batch.users setting in the Centrify DirectControl configuration file.

Supported on:

Skip items whose name contains

Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Kerberos
Value Name{number}
Default Value


Administrative Templates (Computers)

Administrative Templates (Users)