The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

3
votes
1answer
35 views

recomended order for changing AD groups?

I have a number of domain local resource groups that need: a) to be changed into Universal groups. b) renamed. c) have the users of their member groups collapsed into this group itself. d) remove the ...
1
vote
1answer
20 views

Is there an order that users appear in the /etc/group file?

I was wondering if anyone knew what determines the order of users in /etc/group entries? It does not appear to be alphabetical or by UID or chronologically by date added. I don't think this makes any ...
1
vote
1answer
53 views

Can I add a local linux user to a supplementary active directory group?

The Linux box in question is a CentOS 6.5 machine that is bound to active directory. I can change a local user's primary group to an active directory group. But i can't add the active directory group ...
-1
votes
1answer
37 views

Something removed a user's group memberships - How can I prevent this in the future?

I had a user say that he wasn't getting emails, so I got on the DC and made sure his account didn't have any obvious issues. I just happened to click on the Member of tab and saw that he was not a ...
5
votes
1answer
60 views

Granting Domain Admin privileges to a cross-forest user account?

Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest? The obvious approach of adding Domain ...
4
votes
1answer
95 views

PowerShell DSC Group Resource - “Could not find a principal with the provided name”

I am trying to use PowerShell DSC to add a domain group to the local administrators group. Here is the code: Configuration TestSetup { Node localhost { Group Administrators { ...
0
votes
2answers
26 views

Migrating server local groups (currently workgroup) to domain?

I have about ~30 workstations that I administer, plus a fileserver, all of which I inherited when I took this net admin job. The previous guy had been around forever from when the company was far ...
3
votes
1answer
59 views

How can a set a Security Group's email address using PowerShell?

I need to create many groups with email addresses. I would prefer to use Security Groups to reduce the number of groups we have to maintain, otherwise we'd have an identical Distribution Group for ...
1
vote
0answers
30 views

Is there a way for a user to temporarily remove its own group membership within a script?

I'm writing a script which will be used to "detect" whether a generic, no-frills, user account has access to certain files. Basically a user which only has membership in the "staff" group or ...
1
vote
1answer
42 views

Windows Server 2k8 - Adding User To Admin Group But Not True Admin?

It appears that adding a user to the Administrators group does not actually grant the user full Administrative privileges on the server. I am still not able to add users to the system (Access Denied) ...
1
vote
0answers
62 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
3
votes
2answers
78 views

In LDAP is it best to nest groups under organizational units or create an organization unit directly under the root dn just for groups?

I'm not sure whether it's better to nest groups under each of my organizational units or to make an organization unit directly under the root DN just for groups. Is one considered best practice over ...
0
votes
0answers
81 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
1
vote
2answers
41 views

Group permissions (seemingly) ignored on Win2k3 fileserver

After 10+ years having our AD setup "one way," I'm looking at the permission structure and realized that our business has in fact changed enough to where we should match our current state rather than ...
1
vote
1answer
129 views

Puppet notice: current_value absent, should be present

I'm trying to add a user via puppet (v 3.2.4), and get this notice on --noop: Notice: /Stage[main]/Usergroup/Group[user_one]/ensure: current_value absent, should be present (noop) Here's my ...
1
vote
1answer
64 views

With sudoers, how can I allow a user to change the group of files/folders within their home directory?

I have a webserver where apache runs as www-data. Users are set up using chef, and some of their file/folder permissions are set to group: www-data, e.g. uploads folders. Deployments are done with ...
0
votes
1answer
40 views

Obfuscated Account Names in Windows Computer Management / Groups

So our security auditors sent me an email indicating there were a few AD groups and accounts in the administrators group of one of our servers that should not have admin access to the machine in ...
2
votes
1answer
4k views

List All Groups and Their Members with PowerShell on Win2008r2

I am new to powershell, but I've been reading manuals and practiced a little bit. My objective is to List all users in all Security Groups under specified path. I have found the way to do it: ...
1
vote
1answer
57 views

Permissions to set on user to read from Active Directory only

I have to setup user accounts for applications to use to get a list of users and group memberships from our domain. As such, I'd like these applications to use credentials for user accounts with bare ...
2
votes
1answer
75 views

Puppet: Enumerating all users within a group

Is there any way to enumerate an array of all users within a group within Puppet, either as a fact or something so I can do something like this? $users = enumusers('wheel') each($users) |$user| { ...
3
votes
1answer
234 views

Still confused by Permissions - linux, nginx, php-fpm

I have read the canonical answer at What are the best linux permissions to use for my website? However I'm still stuck. My setup is: A developer user 'ade' who owns the directories and files that ...
9
votes
2answers
337 views

Temporary membership to AD group

We restrict the running of exe's across the organization. But based on justifications & approvals we add users to (specific) AD groups for 24 hours. Currently the process of removing the users ...
-1
votes
1answer
60 views

Purpose of primary group [closed]

Why do we need a primary group for users? Why is it mandatory to the users to have a primary group?
9
votes
4answers
429 views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
6
votes
1answer
334 views

Windows 7 “Cryptographic Operators”

This TechNet blog states that: Cryptographic Operators: FIPS 140-2 defines a “Crypto Officer” role, which is represented by the Cryptographic Operators group in Windows, first introduced in ...
3
votes
3answers
187 views

Puppet module to manage groups not working

I have configured a module to set up a new group using the following documentation: http://docs.puppetlabs.com/references/latest/type.html#group. [root@puppetmaster ~]# cat ...
0
votes
0answers
156 views

How would I make ProFTPd allow members of a group to change permissions on files owned by the group?

I have set up my web server to handle php requests as the user/group 'www-data'(30000) and proftpd set to have virtual users started at 30001 in the 'www-data' group. I know that you should not be ...
0
votes
1answer
104 views

How to enable group-writable suexec-capable CGI scripts?

I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
1
vote
2answers
112 views

Linux user groups : how to create shared directory under home

I have created 3 users 'u1','u2','u3'. Now I want to provide access to u1's /home/u1/share directory users u2,u3. I don't want to create a new common group named 'shared' and add 3 users there. Is ...
0
votes
2answers
107 views

List linux users

I need to find a group in linux that doesn't appear in my /etc/groups file. I run the following command and get an error sudo adduser --disabled-login --gecos 'GitLab' git adduser: The group `git' ...
2
votes
1answer
2k views

Mac OS X Server (10.8) - SMB sharing permissions don't update (when a user is removed from a group)

We're running a Mac OS 10.8.3 server using the File Sharing feature. We have both AFP and SMB sharing enabled. When we change a user's permissions, their permissions are set properly when accessing ...
8
votes
2answers
782 views

What is the canonical use for the “sys” and “adm” groups?

Since the beginning of time (or as long as I remember anyway) linux systems have had a "sys" and an "adm" group. What is the canonical use for them? Would it be appropriate to use either for a "super ...
0
votes
1answer
63 views

Tips on organizing Active Directory for a global company with different departments [closed]

I have started to read and implement some of the basic domain architecture implementation, one of the question I have is what is the latest trend in organizing the active directory OU's, Groups and ...
2
votes
2answers
81 views

How to make Groups as not readable to Users in AD

We are using taskpads to delegete tasks(such as reset password) to remote admins; the delegation is done at the OU level ; but unfortunately OU contains some special accounts/groups(such as ...
1
vote
1answer
59 views

Additional groups for apache user

When configuring the user/group that apache runs under, does the process run only with permissions of the specified group, or also with those of which the user is a member? For example, if Apache ...
2
votes
3answers
398 views

Automatically add ActiveSync users to AD group?

Is there a way that, upon first successful sync via ActiveSync, a user could be added to an Active Directory group?
1
vote
2answers
278 views

Security Group vs Distribution Group

Within our AD set-up there are a lot of security groups, but only 1 distribution group (that a previous admin created). Both types of group contain lists of domain objects (users in the one I was ...
1
vote
0answers
159 views

Allowing Backup Operator group to use NetBackup

I have a Windows Server 2008 installed with Microsoft SQL Server 2008 and NetBackup. I have a local ID called bckopr1 and is a member of the Backup Operator group. Subsequently, this ID also able to ...
0
votes
1answer
474 views

Remote Administer Local Groups with PowerShell and WMI

How do I administer local groups on a remote server with PowerShell and WMI? For example, I would like to add and remove domain AD groups from the "Remote Desktop Users" group. This article provides ...
0
votes
2answers
99 views

Logging into Linux server gives users 'domain users' for default group can it be changed?

I recently attached a RHEL 5 test box to our active directory server to try and get all of our users to not have to remember so many passowrds. I'm using winbind and samba and everything seems to be ...
0
votes
1answer
221 views

Folder rights doesn't work on group, but does on user

I've got this share where I want to restrict access to two folders so that only members of a group can get access to them. I've done this countless of times, but this time there's something odd going ...
1
vote
1answer
41 views

Win Group Overlap: Authenticated Users and System

I'm seeing some weird behaviour with a few of my ACEs at the minute, particularly when denying the Authenticated Users instead of the usual Domain\Domain Users. As a consequence of this, I can only ...
3
votes
1answer
373 views

Dynamic group membership to work around no nested security group support for Active Directory

My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS). These legacy administration ...
1
vote
1answer
2k views

Cross-forest universal groups on Windows Server?

I would like to create a Universal Group whose members are a mix of cross-forests users and groups. In the following example, two forests are mentioned (US and UK) and two domains in each forest ...
1
vote
1answer
110 views

ADSIEdit freezes gettings properties of a group with hundred of thousands members

Doing performance testing on an AD-LDS (Server 2008 R2 64 bits), we created a milion user in a single OU. We also created a single group object and made those milion users member of that group. When ...
2
votes
2answers
184 views

Preferred method for allowing unprivileged UNIX/Linux users to view syslog information

I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg. /var/log/messages) for debugging purposes. This is explicitly local log data, not remote ...
1
vote
1answer
533 views

How many users can be in a AD LDS group?

Microsoft published the recommended maximum limits for users in an Active Directory group. It basically says : Starting with Windows Server 2003, the ability to replicate discrete changes to ...
0
votes
2answers
281 views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
3
votes
2answers
273 views

Apache groups & users web administration

I am looking for a web administration interface to manage my Apache users & groups. Basically, I would like to be able to : List all users Add a new user Remove a user Create a new group Delete ...
0
votes
1answer
397 views

Determine local group membership of an AD user?

I have several local groups on a Server 2008 instance. In this group are several members from our AD domain. Is there a way to determine all of the local groups a given AD domain user belongs to by ...