Renew Credentials Automatically

Specify whether to automatically reissue user credentials when they expire. If you enable this group policy, the Delinea Agent keeps a hash of the user’s password in memory indefinitely. If you do not enable this policy, or if you explicitly disable it, a user’s credentials periodically expire and the user must be reauthenticated by re-entering a valid password.

If you enable this policy, user credentials are automatically reissued, as needed, as long as the adclient process continues to run even if the computer is disconnected from Active Directory. If you stop or restart adclient, however, the user’s password hash is removed from memory. After stopping or restarting adclient, users must be re-authenticated by logging on with a valid user name and password.

The default value is false.

This group policy modifies the krb5.cache.infinite.renewal setting in the agent configuration file.