Specify Denied Users for Prevalidation
Enable this policy and enter a comma-separated list of users to prevent prevalidation of specific users for access Centrify-managed computers. If you allow any groups or users to be prevalidated, you can use this policy to define exceptions for any users who should be prevented from prevalidation. In most cases, you would use this policy to exclude a subset of users that are members of an allowed group.
This group policy modifies the following setting in the agent configuration file:
adclient.prevalidate.deny.users