Require dzdo Command Validation Check

Specify whether to enforce the validation check for dzdo privileged commands.

If you set this group policy to Enabled, privileged commands will run only after being validated by the dzdo validator. If a command fails validation, or if the dzdo validator does not exist, is not available, or is not trusted—for example because it is not owned by root or is group or world writeable—the command will not run.

If you set this group policy to Not configured or Disabled, no attempt is made to validate privileged commands, and the commands will run without validation.

This group policy modifies the dzdo.validator.required setting in the agent configuration file.

The dzdo validator is located and configured as described in Set dzdo Validator later in this section.