The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

0
votes
0answers
7 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
0
votes
2answers
46 views

CHMOD to make directory writable by group not working

I'm trying to make the node_modules directory writable by www-group, but chmod isn't working. vagrant (user) is part of the www-data group as seen with the groups command. Why can't I permit ...
0
votes
1answer
22 views

Dump users and group membership to file

I'm trying to get an oracle 6.2 system (same as redhat 6.2) to find all the users on the system, then take the username of each user discovered and query group membership of each user individually, ...
-1
votes
0answers
14 views

Common user to modify files owned by 'other' users [migrated]

I would like to understand how to use the permission system in CentOS to achieve the following: The system has the following users: user1 user2 user3 And the following directory structure.. ...
0
votes
1answer
37 views

Linux permissions for multiple groups

I have a directory (With sub directories and files) that I would like to setup so that: -Users of an 'editors' group can rw- any file and rwx any dirs. -Users of www-data can r-- files and r-x dirs. ...
1
vote
1answer
57 views

FreeBSD/FreeNAS: How to change group for multiple users?

I need to change group membership for a bunch of users. How do I list all users? change multiple users to nogroup primary group? add secondary/auxiliary groups to multiple users? Basically I need ...
3
votes
1answer
67 views

Debian staff group causes problems

We have an (old and grown) infrastructure of linux machines (mostly debian). For user authentication we use LDAP where we have defined several groups with different access rights. Unluckily one of ...
4
votes
2answers
105 views

Adding an Active Directory to a computer-local group - which scope to choose?

I am aware of the "AGDLP" rule of thumb when it comes to group nesting inside an AD strcture. But now I am wondering if there are any best practises when it comes to adding Active Directory groups to ...
2
votes
1answer
41 views

mkgroup command not found on Ec2 RedHat?

I'm converting some environment scripts from Ubuntu to Red Hat 6.5. The mkgroup command for adding user groups seems to be not found: [the-user@xxxxxxxxx ~]$ mkgroup myGroup mkgroup: command not ...
2
votes
1answer
44 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
1
vote
1answer
25 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
6
votes
1answer
245 views

How can I generate a list of the security groups a set of users belong to?

I have been asked to generate a list of the security groups (so specifically not the distribution groups) that a list of approximately 50 users belong to. I have a list of users, users.txt that ...
2
votes
2answers
369 views

Authenticated Users builtin group in AD deleted

I have a large-ish AD setup, where one of the already fired admins, for reasons unknown deleted the subject group. Been googling for a while, but besides explanations what the group is for and ...
0
votes
1answer
81 views

Automated third party software for Active Directory administration [closed]

I have a situation where there are multiple Active Directory (AD) groups that each account is added to but each group have different expiration dates. For example, user1 will be in groupA and ...
0
votes
0answers
70 views

Why does samba include seemingly bogus “supplementary groups”?

Our environment is subject to the "16 group limit" with Samba. We are using Samba version 3.6.12. Basically if a user is in more than 16 groups, the whole system gets hosed and things go haywire. ...
0
votes
0answers
711 views

you must have read permissions to view the properties of this object, administrators group

I think I'm having some difficulty understanding NTFS permissions. My understanding is that when possible you want to avoid assigning a specific user account to NTFS and instead use a group. So I set ...
2
votes
2answers
2k views

AD Group and Distribution Group with O365

I have a O365 with Exchange, and a local AD. I want to manage distribution groups and distribution groups members via PS scripts (that will run by scheduled task), that look users' AD attributes ...
0
votes
1answer
41 views

Can't remove a user from a group

When I list the groups I'm in, it says web. But when I try leave this group, it says I'm not in...
1
vote
3answers
515 views

SaltStack targeting minions with *

I am using SaltStack on my linux boxes and want to define nodegroups. I know about compound matching and minion lists, etc. This is what I need, and it works this way, but that's hard to maintain ...
0
votes
1answer
18 views

How are the security groups injected in an image in OpenStack?

I have been using OpenStack for some time and was just wondering how the security groups are injected in an image file. I browsed on the internet but I could not find a solution.
2
votes
1answer
58 views

Permission to files owned by group denied

I think the easiest way to describe is using these pictures: click for image I also tested using chmod -R a+rw minecraft2 What is the problem here?
0
votes
2answers
471 views

/etc/passwd shows user in a group, but /etc/group does not

I want to verify that the user account filesender_1 is a member of the group valid_senders. When I look at /etc/group, filesender_1 is not there: valid_senders:x:12345:production_1 I read this as ...
0
votes
1answer
59 views

Reload VIAccounts list with PowerCli to select a newly created group

I'm using a script that creates groups in Active Directory, and links them to my vCenter server using New-VIPermission. The trick is that it doesn't find the groups created unless I restart the script ...
2
votes
1answer
1k views

Can't FTP to /var/www/html on Ubuntu (groups set…)

So I'm having some issues with vsftpd. I need the webroot to be in /var/www/public because I have multiple users accessing it, so I can't put it in a users directory. Now that directory has "chown -R ...
0
votes
1answer
40 views

User privileges enumerating serial device

I'm trying to use the Java Simple Serial Connector on Arch Linux. I have a simple program listed below: import jssc._ object Main { def main(args:Array[String]):Unit = { println("Started") ...
-1
votes
1answer
116 views

What system-wide changes can a user make? [closed]

I work in an organization that uses Faronics Deep Freeze to prevent users from making changes to the computer. I had always been under the impression that a standard user (a user who is only a member ...
0
votes
0answers
29 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
3
votes
1answer
55 views

recomended order for changing AD groups?

I have a number of domain local resource groups that need: a) to be changed into Universal groups. b) renamed. c) have the users of their member groups collapsed into this group itself. d) remove the ...
1
vote
1answer
46 views

Is there an order that users appear in the /etc/group file?

I was wondering if anyone knew what determines the order of users in /etc/group entries? It does not appear to be alphabetical or by UID or chronologically by date added. I don't think this makes any ...
1
vote
1answer
170 views

Can I add a local linux user to a supplementary active directory group?

The Linux box in question is a CentOS 6.5 machine that is bound to active directory. I can change a local user's primary group to an active directory group. But i can't add the active directory group ...
-1
votes
1answer
40 views

Something removed a user's group memberships - How can I prevent this in the future?

I had a user say that he wasn't getting emails, so I got on the DC and made sure his account didn't have any obvious issues. I just happened to click on the Member of tab and saw that he was not a ...
7
votes
1answer
2k views

Granting Domain Admin privileges to a cross-forest user account?

Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest? The obvious approach of adding Domain ...
5
votes
1answer
601 views

PowerShell DSC Group Resource - “Could not find a principal with the provided name”

I am trying to use PowerShell DSC to add a domain group to the local administrators group. Here is the code: Configuration TestSetup { Node localhost { Group Administrators { ...
0
votes
2answers
142 views

Migrating server local groups (currently workgroup) to domain?

I have about ~30 workstations that I administer, plus a fileserver, all of which I inherited when I took this net admin job. The previous guy had been around forever from when the company was far ...
3
votes
1answer
895 views

How can a set a Security Group's email address using PowerShell?

I need to create many groups with email addresses. I would prefer to use Security Groups to reduce the number of groups we have to maintain, otherwise we'd have an identical Distribution Group for ...
1
vote
0answers
46 views

Is there a way for a user to temporarily remove its own group membership within a script?

I'm writing a script which will be used to "detect" whether a generic, no-frills, user account has access to certain files. Basically a user which only has membership in the "staff" group or ...
1
vote
1answer
56 views

Windows Server 2k8 - Adding User To Admin Group But Not True Admin?

It appears that adding a user to the Administrators group does not actually grant the user full Administrative privileges on the server. I am still not able to add users to the system (Access Denied) ...
1
vote
0answers
248 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
4
votes
2answers
389 views

In LDAP is it best to nest groups under organizational units or create an organization unit directly under the root dn just for groups?

I'm not sure whether it's better to nest groups under each of my organizational units or to make an organization unit directly under the root DN just for groups. Is one considered best practice over ...
1
vote
0answers
129 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
1
vote
2answers
75 views

Group permissions (seemingly) ignored on Win2k3 fileserver

After 10+ years having our AD setup "one way," I'm looking at the permission structure and realized that our business has in fact changed enough to where we should match our current state rather than ...
1
vote
1answer
315 views

Puppet notice: current_value absent, should be present

I'm trying to add a user via puppet (v 3.2.4), and get this notice on --noop: Notice: /Stage[main]/Usergroup/Group[user_one]/ensure: current_value absent, should be present (noop) Here's my ...
1
vote
1answer
150 views

With sudoers, how can I allow a user to change the group of files/folders within their home directory?

I have a webserver where apache runs as www-data. Users are set up using chef, and some of their file/folder permissions are set to group: www-data, e.g. uploads folders. Deployments are done with ...
0
votes
1answer
97 views

Obfuscated Account Names in Windows Computer Management / Groups

So our security auditors sent me an email indicating there were a few AD groups and accounts in the administrators group of one of our servers that should not have admin access to the machine in ...
3
votes
2answers
22k views

List All Groups and Their Members with PowerShell on Win2008r2

I am new to powershell, but I've been reading manuals and practiced a little bit. My objective is to List all users in all Security Groups under specified path. I have found the way to do it: ...
1
vote
1answer
112 views

Permissions to set on user to read from Active Directory only

I have to setup user accounts for applications to use to get a list of users and group memberships from our domain. As such, I'd like these applications to use credentials for user accounts with bare ...
2
votes
1answer
133 views

Puppet: Enumerating all users within a group

Is there any way to enumerate an array of all users within a group within Puppet, either as a fact or something so I can do something like this? $users = enumusers('wheel') each($users) |$user| { ...
4
votes
1answer
358 views

Still confused by Permissions - linux, nginx, php-fpm

I have read the canonical answer at What are the best linux permissions to use for my website? However I'm still stuck. My setup is: A developer user 'ade' who owns the directories and files that ...
11
votes
2answers
666 views

Temporary membership to AD group

We restrict the running of exe's across the organization. But based on justifications & approvals we add users to (specific) AD groups for 24 hours. Currently the process of removing the users ...
-1
votes
1answer
349 views

Purpose of primary group [closed]

Why do we need a primary group for users? Why is it mandatory to the users to have a primary group?