hi,
I have finally got Centrify Express to work for most cases on Ubuntu laptops. Facing two different sets of problems and would be great to get some advice on them.
1. The laptops connect to AD through VPNs but they are not always on VPN. From what I have seen if the VPN is on and a login session is simulated, the latest settings are always fetched. But when VPN is off, it uses cached credentials. The question I had was other than the login event, when does the client fetch the settings? I assume adgpupdate is not supported for Express - so is there some standard periodicity for refresh? The problem I have is when users log out and log back in, their VPN is gone and so if that is the only event triggering a refresh it may never work for some users.
2. I am having a tough time understanding which all policies get applied on Ubuntu laptops. I did some searching and saw many posts around group-policies/templates etc. But our requirement is fairly basic - for eg, locking screen with idle time of 2 minutes and forcing a password-unlock. If I set those policies in AD through "Group Policy Management Editor > User configuration > Policies > Administrative Templates > Control Panel > Personalization > Screensaver timeout" I do not see them getting applied on Ubuntu. I do not have a /var/centrifydc/reg folder too. So does it mean these kind of policies will not work in the Express edition? Password length etc constraints seem to work fine. Hence the confusion. Please let me know if there are other ways of enforcing a screen lock if not through these group policies.
Thanks,
Vikram