In Centrify's Express mode, the UNIX attributes for AD users are automatically derived by convering the SID of the AD user or AD group to a guaranteed to be unique UID or GID. Since the UID/GIDs are derived, they cannot be manipulated.
Centrify's Standard or Enterprise Edition customers have the ability of leveraging Centrify's zoning technology to centrally define and manage the UNIX namespace. Customers can use adedit on UNIX, Powershell on Windows or the Centrify Windows administrative console to manage the UNIX data.
Regards,