Adding Policies from XML Files

In most cases, you should add IBM policies from XML templates to the Group Policy Object you are using for IBM settings. The XML-based format is the current standard for group policy templates.

To add IBM group policies from IBM XML templates:

  1. Click Start > Administrative Tools > Group Policy Management.

  2. Expand the appropriate site, domain, or organizational unit to select Group Policy Object you want to use for IBM policies, right-click, then click Edit.

    For example, expand the top-level IBM organizational unit to select the Centrify Policy object, right-click, then click Edit.

  3. In the Group Policy Management Editor, expand Computer Configuration and Policies.

  4. Select IBM Settings, right-click, then click Add/Remove Templates.

  5. In the Add/Remove Templates dialog box, click Add.

  6. In most cases, the directory with the templates is already selected and the following IBM templates are listed:

    • centrify_gnome_settings
    • centrify_linux_settings
    • centrify_mac_settings
    • centrify_unix_settings
    • centrifydc_fips
    • centrifydc_settings
    • centrifyds_settings

    If the templates are not listed, navigate to the group policy directory under the Access Manager installation directory. For example, if you installed files in the default location, navigate to the following directory:

    C:\Program Files\Common Files\Centrify Shared\Group Policy Management Editor Extension\policy

    If you want to add templates for auditing, navigate to the IBM Audit & Monitoring Service installation directory. For example, if you installed files in the default location, navigate to the following directory:

    C:\Program Files\Centrify\Audit\AuditManager

  7. Select the IBM templates you want to use, then click Open.

  8. In the Add/Remove Templates dialog box, click OK to add the new templates.

    Group policies for access control and privilege management are listed under IBM Settings. You can expand this node and the categories below it to explore the group policies available.

    Group policies for auditing are listed under IBM Audit Settings. You can expand this node and the categories below it to explore the group policies available.

    By default, all group policies are set to “Not configured.”

Adding Templates after an Upgrade

To make any new policies available after you upgrade Verify Privilege Server Suitesoftware, you must add new versions of the templates you use after you upgrade the Access Manager or the auditing console. To add new versions of the templates after an upgrade, repeat Linking a Group Policy Object to an Organizational Unit to Adding IBM Policies from XML Files. If you see the message, The selected XML file already exists. Do you want to overwrite it?, click Yes to overwrite the old template file with the new template and make any new or modified group policies available. Overwriting the template does not affect any configuration settings that have been applied. Policies that you have enabled remain enabled.