The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

2
votes
1answer
26 views

Cannot SSH After Adding Another User to Group of SSH Target User

I'm trying to make a web interface for a game server. I have a user/group "gameserver" that has game files and configurations (not a sudoer). And a user/group "www-data" that you all know is for web ...
0
votes
0answers
10 views

Add alias to Office 365 Group

We're trying to add an email alias (with a period, e.g. my.email@domain.com) to a Office 365 Group. Does anyone know if that is possible? We're trying out the new Office 365 Groups in Office 365 and ...
1
vote
1answer
12 views

How to setup exim/dovecot for emailing groups?

I want to migrate from Axigen to exim/dovecot. Axigen has section named "Groups". So I can create new group, add there few accounts. After when I send email to this group, all members get this message....
10
votes
2answers
413 views

What are the implications of converting all my groups to universal groups?

In Exchange 2010 distribution groups must be universal. This is supported by documentation You can create or mail-enable only universal distribution groups. I am trying to create a role based ...
0
votes
0answers
21 views

CentOS 7 group permissions not allowing access to folder

I have a CentOS7 box, "box1", domain joined using Winbind + RID method. I have a folder (NFS mount) @ /shares/share. The permissions are: root@box1:/shares# ls -n /shares/ total 8 drwxrws--- 2 0 ...
0
votes
1answer
8 views

Ubuntu - accessing folder with two groups

I have a two groups: www-data and editors groups. Consider I have a folder /home/mydata/ and I need to allow access folder both groups. I have tried: chown -R www-data;editors /home/mydata But www-...
0
votes
2answers
30 views

Can I add existing AD groups to Exchange

We are using an Office365 Hyrbid deployment with Exchange 2016 on premise. The Hybrid setup was deployed after our users and groups were created and synced from AD, so they do not currently appear in ...
-3
votes
1answer
48 views

How many members can be added to a group in AD?

How many members can be added to a Security group in AD ? Nesting or members .The total count that a group can hold the AD users.
0
votes
1answer
34 views

How to add an AD user the right to administer groups in AD

I search google without luck. Basically I need to enable to 4 users to our domain do add and remove members to some of the AD groups. But only that, they must not have any other right. I know it ...
1
vote
1answer
26 views

Is there a way to configure sudo to not need to lookup group names / or speed up sssd group name resolution?

I've got a large number of Linux hosts that are connected using sssd to a windows active directory domain for user/group lookup. That mostly works fine except for one problem; sudo From what I'...
0
votes
0answers
11 views

add ability for users in group to see and attach to screen sessions - Debian Wheezy

I'm trying to add the ability for users in a group to be able to list and attach to eachothers screen sessions. I've been pretty unsuccessful so far. I know about multiuser but I'm kind of throwing ...
2
votes
3answers
312 views

Identifying certain Active Directory accounts as “IsHuman”

I'd like to flag certain Active Directory accounts to indicate that they represent individual, physical people as opposed to groups, service accounts, built-in accounts, etc. This could be via a ...
0
votes
0answers
25 views

Find Active Directory Groups for a specific location

I am a system admin for a site that I inherited from a previous admin. I am currently trying to determine what AD Groups are associated with this site (access to servers, other resources) so I can do ...
-1
votes
1answer
24 views

Allow run /sbin/ifconfig to user

So, I want to allow some user to execute ifconfig. I'd created a special group "if" and done user to own this group. And now I'm going to do "chown root:if ifconfig". But I think: What wrong thing ...
-1
votes
1answer
31 views

Samba PDC - Create groups

I'm researching on Samba and have created a PDC using it. I have created user and computer accounts and things are working. I'm having problems, however, in finding how to create groups and add users ...
0
votes
1answer
12 views

Client applied to group policy object but cant find in WSUS

My client is subscribed to my group policy, But I cant find the computer in my WSUS when I look under All Computers. When I typed the command gpresult /r on my client it shows: computer settings ----...
0
votes
1answer
49 views

Grant local group local admininstrator perms

I am not "allowed" to add users directly to the administrators or remote desktop user groups due to internal reasons (This is all local). I have successfully created the new local group and added my ...
3
votes
3answers
112 views

List top users in the most AD groups

In a Windows domain environment, how could I count the top N users with more group membership than others? I'd like to know both the indirect and direct groups. So, I'd like this count to include the ...
7
votes
1answer
189 views

Reset GID/UID auto-increment numbers

I created a virtual mail user for postfix virtual mailboxes with a gid/uid of 5555, but now every new user I create starts at > 5555, is it possible to reset the autonumbering so normal users will be ...
0
votes
2answers
84 views

Permission denied for cd command

I have created a group for developers, to give them access to: /var/lib/dev, a folder which already have some folders and files inside. The commands I've introduced are: $ sudo useradd -d /var/dev -...
1
vote
0answers
11 views

samba issue when files or directories created

I have a samba server setup on debian 7 / samba 3.6.6, the problem is as follows; If one creates a file or a directory in a share from a linux client box, the file or directory has the proper ...
2
votes
1answer
34 views

What is the “parent” global group?

I've been reading about Group Scope for Groups within Microsoft's Active Directory from https://technet.microsoft.com/en-au/library/cc755692(v=ws.10).aspx. However, I find the following in relation to ...
2
votes
0answers
40 views

Active directory “negative” group membership - group of groups minus some users

I feel like this must be a faq but I've not been able to figure out the right terminology to find the answer. I've got a large active directory group-of-groups that contains 101% of the users I ...
1
vote
1answer
11 views

Shared group directory with individual user files

I have a mounted NFS partition in which a specific group, say nfsgroup, has rwx for the directory (call it nfsdir). If my user brian is a member of nfsgroup and creates a file in nfsdir, then I chgrp ...
3
votes
2answers
505 views

Exporting All Groups and Group Members from Active Directory

I am relatively new to powershell and am trying to get a list of all groups in the domain with their respective members. Here's what I'm working with now: Import-Module ActiveDirectory $OutPutFile = ...
0
votes
2answers
364 views

Can't add built-in Remote Desktop Users group on DC to Remote Desktop Users on 2012 server

I have new 2012 servers and so far its only set to allow administrator to remote in. In Computer Management/Remote Desktop Users, the only member is administrator. When I try to add the built-in ...
0
votes
1answer
19 views

Show user which Group is required for Apache Basic Auth page

Is it possible to show which 'group' is required for access to a web page protected with Apache Basic Auth? Ideally, the pop-up requesting username and password would pass the 'group' required as a ...
0
votes
0answers
234 views

Freeradius authentication: LDAP group and SSID matching

I'm running a freeradius v3 instance with an LDAP backend for the authentication.The backend is working fine but I'v issues with my users.conf file.In this file, I'm trying to implement some rules to ...
0
votes
1answer
61 views

Must the name of an ldap group be unique?

As we are setting up an openldap with multiple locations. Must the names of the groups be unique? For example the vpn , adm, sudo group will be in NL but also in BE. What is best practice? Could the ...
0
votes
0answers
25 views

Nested Active Directory Groups causes user unable to authenticate against application

User is placed in a global group called site.gg1 site.gg1 is a member of a global group called region.gg1 region1 has been added to the server local group, which is mapped to the application role. ...
1
vote
2answers
46 views

OpenLDAP Server nested Group search string

i got a small problem here regarding OpenLDAP. The problem is to search for the member of nested groups. Lets say i have this construct: dn=domain,dn=local ou=people cn=marvyn (inetOrgPerson) ...
0
votes
1answer
86 views

“groups USERNAME” and “getent group” results different outputs

I found that there is a user named speech-dispatcher that belongs to group audio (based on groups speech-dispatcher output). But it is not listed under getent group command! What is the problem? $ ...
0
votes
0answers
39 views

Empty events for AWS VPC logs?

I have an AWS VPC instance (AMI Linux), and I'd like to see the event logs for insight into its traffic. So, I can run a command as follows: sudo aws logs get-log-events --log-group-name <my-...
0
votes
1answer
19 views

Make usergroups able to authorize User Account Control Prompt

I was wondering how you could make a group in Active Directory that is allowed to elevate/authorize programs with their credentials without setting them as the built in administrator? Windows server ...
0
votes
1answer
94 views

Can you include an AD distribution group in a security group?

I have a security group SG-SomeResource providing access to a network resource. I also have a distribution group DG-MyOrg that describes an organizational unit. Can I include DG-MyOrg as a member of ...
-3
votes
1answer
56 views

CentOS root+nologin [closed]

Can I somehow get access to root account after changing /etc/passwd file? Similar problems: Lost root access possibility /sbin/nologin How do I regain access to root after accidental chsh ...
2
votes
1answer
96 views

Write permission to a specific file without changing ownership

As I understand it, to give a write permission to a user I can either change the owner of the file to that user and give it "user write permission" (which I don't want to do), or keep the same owner ...
0
votes
0answers
51 views

How can multiple users share their (uwsgi) sockets with nginx, but not with each other?

On a shared domain, currently, each linux user sets up his website through his www-data-writable directory + uwsgi socket - one nginx instance serves them all. However, I do not like the idea of one ...
0
votes
1answer
484 views

I see my clients in AD but not in WSUS

I set up a WSUS but dont see any clients in the Unassigned Computers group. I can find my clients in the ADAC, when I select myWSUS (local) > computers. My group policy management got a domain myWSUS....
0
votes
2answers
136 views

Permissions, owner, group inheritance? [duplicate]

I don't understand restrictions in terms of directories nesting. For example, /var/www/folder/index.html directories. What permissions, owner, group should every directory and file have? Is there such ...
2
votes
2answers
106 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
1answer
57 views

Nested groups in active directory and permissions?

I created the image so you could understand what I'm asking: These are simple groups created in Active directory. Which permission will be apply on ALI. Full Control or Read Only
1
vote
1answer
242 views

Filter getent passwd output with SSSD

I am using ldap_access_filter in sssd.conf in order to limit access to users that are in a specific ldap group. However, when I do a "getent passwd" I still get a full list of the ldap users. How can ...
0
votes
1answer
80 views

Local logon script - check group membership and action

I need some help for a side project I'm working on. I hardly deal with any scripting so I thought you guys could help me out. The script should follow this algorithm: check if user is a member of -...
0
votes
0answers
222 views

List AD groups beginning with X on Linux

In the organization wide Active Directory we have user groups that all begin with a prefix blaha-, how do I list all groups with that prefix on a Linux machine? getent group only seems to list local ...
5
votes
2answers
2k views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
-1
votes
2answers
425 views

Centos 6.5 /var/www/html/ User permissions

I have a dedicated server but only root can access my hosting directory. All other users get permission denied when I try access the directory with another user. I have created a new user, added the ...
-2
votes
1answer
39 views

group permissions in windows server 2008 r2 [closed]

Can read and write permissions be assigned to groups so that users in those groups will inherit the same properties. If yes, how to assign read permission to specific group.
1
vote
2answers
206 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
2
votes
1answer
96 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...