Enable User Lookup and Login by displayName
Specify whether you want to allow users to be found by their display name (displayName
) attribute.
By default, Delinea allows users to login using their Linux, UNIX, or Mac OS X profile name. In addition, Linux and Unix users can use their Active Directory displayName
or Active Directory cn attribute (default value is disabled for Mac OS X users). Allowing users to log on using these additional attributes can require the agent to perform multiple searches to locate a user account in Active Directory. In environments with domain controllers under heavy load or with large user populations, searching Active Directory multiple times may negatively impact performance.
If you want to prevent the Delinea Agent from attempting to access to user information by the display name, you can disable this policy.
This group policy modifies the adclient.user.lookup.display
setting in the agent configuration file.