Set Prevalidation Update Interval

Enable this policy to specify the interval, in hours, for refreshing the credentials for prevalidated user and group accounts. The credentials for prevalidated users must be periodically refreshed to ensure they are in sync with Active Directory and that prevalidation will continue working after password changes.

The parameter value should be a positive integer. A value of 0 disables all prevalidation of users. The default is 8 hours.

This group policy modifies the adclient.prevalidate.interval setting in the agent configuration file.

Refreshing Prevalidated Credentials

Prevalidated credentials are periodically refreshed at the interval defined by the Set prevalidation update interval policy to ensure that prevalidation will continue working after password changes. In addition, the credentials for prevalidated users and groups are periodically retrieved from Active Directory whenever you do the following:

• Reboot the local computer.
• Start or restart the agent (adclient).
• Run the adflush command to clear the cache.
• Change a password from the local system.