Active Directory-based authentication, access control and role-based privilege management for Windows, Linux & UNIX
Standard Edition + privileged user auditing
Enterprise Edition + encryption of data-in-motion and server isolation
Any Edition + single sign-on for SAP, Apache and J2EE/Java applications
Single sign-on for cloud apps + mobile device supportMac Edition
Active Directory-based authentication and Group Policy management for Macs + mobile device supportPremium Edition
SaaS and Mac Editions + mobile device supportCentrify for Samsung KNOX
Active Directory-based SSO, MCM and MDM for KNOX-enabled devices
Centrify DirectManage, an integrated set of deployment, configuration and management tools, is included with all editions of the Centrify Suite. The Centrify Suite also works with a number of third-party deployment and identity management solutions as well, described below.
In organizations where the IT department must centrally manage a large number of Mac systems, Apple Remote Desktop is commonly used to install software on one or more remote Mac OS systems. Software must be correctly packaged in order to be deployed via Apple Remote Desktop. Centrify DirectControl has been packaged for easy deployment using Apple Remote Desktop. Centrify provides an application note with deployment instructions.
The Centrify DirectControl NIS Service enables UNIX admins to securely store, distribute, and deploy NIS maps through Active Directory, ensuring that all systems within a Zone share a common set of maps. The goal is to enable systems that need specific NIS functionality, such as automount map information, to continue to function but to be serviced through the centralized Active Directory system rather than a separate NIS service infrastructure. Centrify provides NIS with all editions of the Centrify Suite.
The adfixid tool enables administrators to change the UNIX namespace used within the file system of a UNIX computer joined to Active Directory. This command aligns the UNIX namespace on that computer with a centrally defined and typically globally unique UNIX namespace (often referred to as a rationalized namespace) as represented by the DirectControl profile within Active Directory.
The adfixid command changes the ownership of local files and directories to match the user and group namespace defined by the DirectControl Zone that the computer has joined. This tool compares the local password database with the password entries managed within the Zone to find user accounts with conflicting UID and GID assignments. It can report on files that need to be changed, or it can update the ownership of files as required and also track the changes made to the file system. The adfixid command also provides the ability to roll back changes that it has made to the file system if required. It is included in the DirectControl system Agent installation packages, which are available to customers and those evaluating DirectControl who have a login account for the Centrify Download Center.