How to retrieve GPO centrify setting from other than AD

Showing results for 
Search instead for 
Do you mean 
Reply
Participant III
Posts: 12
Registered: ‎10-10-2018
#1 of 8 1,753

How to retrieve GPO centrify setting from other than AD

Hello Sir,

I want to apply Centrify GPO setting "Set Login Password Prompt"  in Group Policy Management. My Century Suite(GP applied) and AD are on different machines. while doing putty I didn't achieve my required GP setting. Can you help me regarding how I achieve my required setting result, For understanding purpose, I also attached my GPO and putty snapshots link

 

https://ibb.co/hqT2w9
https://ibb.co/g3dfip
https://ibb.co/mU10ip

Centrify Guru I
Posts: 2,430
Registered: ‎07-26-2012
#2 of 8 1,749

Re: How to retrieve GPO centrify setting from other than AD

Please make sure:

  • That the GPO being edited is linked to the OU that contains the computers in scope.
  • That you run the adgpupdate command after applying GPOs andI
  • If using over SSH, that the ChallengeResponseAuthentication directive under your OpenSSH configuration is set to yes.  Note that after changing this configuration parameter you may have to restart the sshd service.
Want to learn more about practical Centrify examples? Check out my blog at http://centrifying.blogspot.com
Follow Centrify:
Participant III
Posts: 12
Registered: ‎10-10-2018
#3 of 8 1,734

Re: How to retrieve GPO centrify setting from other than AD

Thanks for such quick reply. Much appreciated. I'm away from my stagging env, I will test these steps in morning.

 

However, when 

  • adgpupdate  --Target Computer xyz.test.com 

where xyz is a domain joined machine NOT AD/DC and has GPME extension installed and CSP running. If I run 'adgupdate' as it , it goes to AD/DC which doesn't have a group policy extension added.

 

  • That the GPO being edited is linked to the OU that contains the computers in scope.      

          where is this setting managed?

 

see screenshot

 

/t5/image/serverpage/image-id/248i7505B8362F76E651/image-size/original?v=mpbl-1&px=-1

 

 

Centrify Guru I
Posts: 2,430
Registered: ‎07-26-2012
#4 of 8 1,726

Re: How to retrieve GPO centrify setting from other than AD

Can you please tell me:

- Operating system version(s)

- Centrify client version

- Type of deployment (commercial or freemium)

- Type of access:  Zone based or auto zone

 

Here's the output of adgpupdate:

adgp.JPG

Note that there's no need to run adgpupdate if you wait for the policy refresh interval.

 

Here's the output of adgpresult:

adgpre.JPG

 

The settings for group policies are managed via the Group Policy Management MMC, edited via Group Policy Editor in a system that has the Centrify tooling installed (e.g. Access Manager).

 

Moderation notice:  Note that I won't click on the URLs/Pics you're submitting.  You can de-identify the output and paste it in this thread.  This will benefit all future readers.

Want to learn more about practical Centrify examples? Check out my blog at http://centrifying.blogspot.com
Follow Centrify:
Participant III
Posts: 12
Registered: ‎10-10-2018
#5 of 8 1,724

Re: How to retrieve GPO centrify setting from other than AD

Much thanks. I will try to include image inline, I was having troubling doing normal attachment. 

 

Participant III
Posts: 12
Registered: ‎10-10-2018
#6 of 8 1,692

Re: How to retrieve GPO centrify setting from other than AD

Hi Robertson,

Thanks for your response, I shared my status of adgpupdate and adgpresult but still I am facing same issue Centrify GPO setting "Set Login Password Prompt"  in Group Policy Management not shown on a putty terminal, Kindly guide me regarding this.

 

[IMG]http://i67.tinypic.com/bhhez7.jpg[/IMG]

 

[IMG]http://i67.tinypic.com/xc7uxk.jpg[/IMG]

[IMG]http://i68.tinypic.com/wwg46w.jpg[/IMG]
Participant II
Posts: 4
Registered: ‎10-11-2018
#7 of 8 1,690

Re: How to retrieve GPO centrify setting from other than AD

Nice one keeps post like this.

Highlighted
Participant III
Posts: 12
Registered: ‎10-10-2018
#8 of 8 1,663

Re: How to retrieve GPO centrify setting from other than AD

Can you please tell me:

- Operating system version(s)

- Centrify client version

- Type of deployment (commercial or freemium)

- Type of access:  Zone based or auto zone

 

-Linux ubuntu1 4.15.0-36-generic #39-Ubuntu SMP Mon Sep 24 16:19:09 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

-adinfo (CentrifyDC 5.5.1-400)

-commerical 

-zone