Home Products DirectControl DirectControl for Systems DirectControl for UNIX and Linux

Centrify DirectControl for UNIX and Linux

Centrify DirectControl enables secure, centralized account administration, authentication and access control for UNIX and Linux systems via Active Directory. Click one of the following topics to learn more:

Features and Benefits

With Centrify DirectControl for UNIX and Linux, organizations with diverse IT environments can leverage their investment in Active Directory to:

Move to a central directory with a single point of administration for user accounts and security policy.  By centralizing user account management and security policy in Active Directory, organizations can improve IT efficiency and move toward a more secure, connected infrastructure for their heterogeneous environment. Using DirectControl they can eliminate redundant identity stores, provide administrators and end-users with a single sign-on account, standardize on a single set of tools and processes, and enforce enterprisewide security and configuration policies for their heterogeneous environment.

Use DirectControl Zones to provide secure, granular access control and delegated administration.  Only DirectControl, with its patent-pending Zone technology, delivers the granular access control that real-world enterprises need to securely manage their heterogeneous environments. Any logical collection of mixed UNIX, Linux or Mac systems can be segregated within Active Directory as a DirectControl Zone. Each Zone can have a unique set of users, a unique set of administrators, and a unique set of security policies.

Simplify compliance with regulatory requirements.  DirectControl greatly simplifies the administrative, reporting and auditing tasks brought on by Sarbanes-Oxley, PCI, HIPPA and other government and industry regulations by providing IT managers with a single point of administration from which to reliably manage user accounts, set access controls and enforce security policies. DirectControl Zones enable "need to know" access controls, and out-of-the-box reports verify who has access to what.

Deploy quickly without intrusive changes to existing infrastructure.  DirectControl's support for open standards and its unified architecture make it far easier to deploy than any other Active Directory-based solution. Certified for Windows 2003 Server, DirectControl does not require proprietary schema changes in order to store UNIX identity data or to enable advanced features.

^ back to top

How DirectControl for Systems Works

Centrify DirectControl's core feature is its ability to enable UNIX, Linux and Mac servers and workstations to participate in an Active Directory domain. The Centrify DirectControl Agent effectively turns the host system into an Active Directory client, enabling organizations to secure that system using the same authentication, access control and Group Policy services currently deployed for their Windows systems. To learn more about how DirectControl works:

^ back to top

Integrated Group Policy Support

CTO Paul Moore explains how DirectControl enables you to secure and manage non-Windows systems using Microsoft Active Directory Group Policy.

DirectControl is the only solution that provides authentication, access control, and Group Policy for non-Microsoft systems as a single, seamlessly integrated agent. Group Policy support is built into the core DirectControl agent; there is no additional software to license, install or configure.

DirectControl's Group Policy feature has been designed so that it integrates seamlessly with existing Group Policy features in Active Directory. Your policies for UNIX and Linux computers and users will work just like Windows policies do in terms of how they are linked to targets (sites, domains, organizational units, groups and individual users or computers), how these settings are inherited, and so on within Active Directory. The Windows default administrative template even has some settings, particularly those that specify refresh intervals for policy updates, that DirectControl will apply to the UNIX and Linux it manages for a consistent global policy.

^ back to top