If you have Authentication Services installed as well as Privilege Manager for Sudo or Privilege Manager for Unix, you can use a group policy to push out the pm.settings file.
1 - Open Group policy Management console.
2 - Create or edit a new policy
3 - Navigate to computer configuration | Policies | Unix Settings | Quest Privilige Manager
4 - Then to Privilege Manager Configuration Properties and set the desired settings
5 - After the policy is set go to the Authentication Services client and run the command: /opt/quest/bin/vgptool apply
It should show the following in the output:
Modifying pm.settings Configuration: /etc/opt/quest/qpm4u/pm.settings
Note: if this vgptool apply is not run the policy will be pushed out accorrding to the VGP refresh interval.