The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

1
vote
2answers
38 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
0
votes
0answers
9 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
1
vote
1answer
35 views

What is the advantage of moving Groups in Organization Units in AD environment beside organizing?

I know the advantage of using OUs (organizing and GPOs).with OUs you can organize your users and computers, assign group policy to them, and deligate control over a set of users and computers. But ...
0
votes
0answers
10 views

give serverprincipalname read write permissions to security group members

What are the settings for the group to make the following change? I need to create a group that can be used to grant: serviceprincipalname SELF Read serviceprincipalname SELF Write to its members. ...
-1
votes
0answers
18 views

Groups in CentOS 5/6

I have 15 CentOS servers running a mix of version 5 and 6. Each of these servers are integrated with a Microsoft Active Directory with a tool called VAS/QAS (ventella Authentication Services /Quest ...
0
votes
0answers
16 views

Port not opening even after adding security group rules on Amazon EC2 instance

I have an Amazon EC2 Linux instance. I recently installed SmartFoxServer in my instance. For that I needed to open 9933 port. So I just created inbound rules on Amazon EC2 Manager console website. My ...
0
votes
1answer
39 views

AD Organization feedback requested

I'm taking over an AD domain (not large) administration but it looks like it needs some organization. For example, under the top domain "something.com" there is a folder named "User" with many ...
0
votes
1answer
25 views

How to list EC2 security group *rules* from within instance?

I have SSH root access to an EC2 instance but no access to the AWS Console / AWS KEY & SECRET. My incoming traffic to this host on all TCP ports except 22 TCP seems to be blocked - I cannot ...
1
vote
0answers
79 views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
1
vote
1answer
96 views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
0
votes
0answers
22 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
-1
votes
1answer
23 views

Security group in ec2 linux instance need to be edited every time

I have created linux instance and installed wordpress on it. Every time I open my page after making change in code via commandline login , it shows this message - The connection has timed out ...
0
votes
2answers
66 views

CHMOD to make directory writable by group not working

I'm trying to make the node_modules directory writable by www-group, but chmod isn't working. vagrant (user) is part of the www-data group as seen with the groups command. Why can't I permit ...
0
votes
1answer
24 views

Dump users and group membership to file

I'm trying to get an oracle 6.2 system (same as redhat 6.2) to find all the users on the system, then take the username of each user discovered and query group membership of each user individually, ...
0
votes
1answer
37 views

Linux permissions for multiple groups

I have a directory (With sub directories and files) that I would like to setup so that: -Users of an 'editors' group can rw- any file and rwx any dirs. -Users of www-data can r-- files and r-x dirs. ...
1
vote
1answer
45 views

Addressing built-in groups and local policies in Windows independently of localized names

Recently I saw an application failing to do certain check/manipulation with built-in groups/local policies on localized version of Windows Server 2012 R2 (French, German). In localized versions of ...
1
vote
1answer
68 views

Difficulty Connecting To AWS EC2-VPC From Public Wifi

I've got an EC2 instance running on an AWS VPC (free tier), on top of which I'm running a website. I'm also using an RDS MySQL DB Instance for my database needs, and have set up security groups to ...
2
votes
1answer
45 views

Should usergroups be enabled?

All our users are managed with a central LDAP. When my predecessor in managing the infrastructure created the ldap he decided against creating usergroups (meaning groups of the same name and GID as ...
0
votes
1answer
116 views

Fix unknown sid security groups

I have the following situation: my security groups of the active directory I'm belonging to are not shown anymore in a "friendly name", but I have just the SID. When I run whoami /groups I see a list ...
1
vote
1answer
101 views

FreeBSD/FreeNAS: How to change group for multiple users?

I need to change group membership for a bunch of users. How do I list all users? change multiple users to nogroup primary group? add secondary/auxiliary groups to multiple users? Basically I need ...
0
votes
1answer
52 views

Port 53 in Amazon Security Group

Everything works as expected. This question is for learning purposes only. Using Amazon Security Groups in a VPC. Outbound rules are: 0.0.0.0/0 Port 80 0.0.0.0/0 Port 443 Iptables allows OUTPUT ...
-1
votes
1answer
28 views

how do I add an account into the built-in courier administrator group? [closed]

In the documentation it says that there is a built in administrators group, but how do i add an account to that administrator group http://www.courier-mta.org/authlib/README_authlib.html The access ...
0
votes
1answer
61 views

Correctly assigning permissions & groups

So my nginx is using www-data:www-data, and I want to deploy files to my server with Beanstalk through sftp properly. So I've created an user called beanstalk and added him to www-data group. $ id ...
3
votes
1answer
80 views

Debian staff group causes problems

We have an (old and grown) infrastructure of linux machines (mostly debian). For user authentication we use LDAP where we have defined several groups with different access rights. Unluckily one of ...
4
votes
2answers
127 views

Adding an Active Directory to a computer-local group - which scope to choose?

I am aware of the "AGDLP" rule of thumb when it comes to group nesting inside an AD strcture. But now I am wondering if there are any best practises when it comes to adding Active Directory groups to ...
2
votes
2answers
43 views

How can I use Puppet to Enforce Local Group Membership?

Cross posting this from Ask@PuppetLabs. (There simply isn't enough traffic there.) I've seen a number of examples for adding users to %wheel with Augeas. These are all variations of the same thing; ...
2
votes
1answer
66 views

mkgroup command not found on Ec2 RedHat?

I'm converting some environment scripts from Ubuntu to Red Hat 6.5. The mkgroup command for adding user groups seems to be not found: [the-user@xxxxxxxxx ~]$ mkgroup myGroup mkgroup: command not ...
1
vote
2answers
273 views

Exchange 2010: Prevent Transport Rule applied to distribution group from listing all users in the list

We have Exchange 2010. Say I am trying to prohibit users from including large attachments on internal distribution groups. I have set up a transport rule that is something like the following: Apply ...
0
votes
1answer
21 views

Give su permission to LDAP group

I created an LDAP environment and i'm trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: ...
2
votes
1answer
48 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
1
vote
1answer
28 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
1
vote
1answer
72 views

Group Policy WMI Filter query

I'm putting in place a policy to install AV software but only want it to apply when the computer has no AV software installed, I know WMI can be used for this but don't have a clue how it can be done. ...
0
votes
1answer
79 views

Wrong owner/group with SSHFS

I mounted a remote with SSHFS and everything works as expected, except the owner/group information. No matter what file's owner/group I check, it's always root:root. I'm mounting the remote like this ...
2
votes
1answer
25 views

Exchange distribution group behavior when two groups have the same member

I'm using Exchange 2013 and I have two distribution groups, DistA and DistB. Each group has UserA and UserB as members. If someone sends an email to DistA and DistB as recipients, UserA and UserB ...
6
votes
1answer
380 views

How can I generate a list of the security groups a set of users belong to?

I have been asked to generate a list of the security groups (so specifically not the distribution groups) that a list of approximately 50 users belong to. I have a list of users, users.txt that ...
2
votes
2answers
522 views

Authenticated Users builtin group in AD deleted

I have a large-ish AD setup, where one of the already fired admins, for reasons unknown deleted the subject group. Been googling for a while, but besides explanations what the group is for and ...
1
vote
2answers
55 views

Office365 - cannot email DynamicDistributionGroup

I created a dynamic distribution group in O365 using PowerShell and PSSession. I can see my group, and see users that are member of this group. but when I email my group, I received an error. If I ...
-1
votes
2answers
166 views

Add ssh public key to group instead of users on centos 6.5

I am a newbie to linux administration. I have a box with centos 6.5 x64. Ive been configuring ssh access via public/private key. Ive been wondering if I could add the public key to a user group ...
0
votes
1answer
86 views

Automated third party software for Active Directory administration [closed]

I have a situation where there are multiple Active Directory (AD) groups that each account is added to but each group have different expiration dates. For example, user1 will be in groupA and ...
0
votes
0answers
84 views

Why does samba include seemingly bogus “supplementary groups”?

Our environment is subject to the "16 group limit" with Samba. We are using Samba version 3.6.12. Basically if a user is in more than 16 groups, the whole system gets hosed and things go haywire. ...
0
votes
0answers
864 views

you must have read permissions to view the properties of this object, administrators group

I think I'm having some difficulty understanding NTFS permissions. My understanding is that when possible you want to avoid assigning a specific user account to NTFS and instead use a group. So I set ...
2
votes
2answers
2k views

AD Group and Distribution Group with O365

I have a O365 with Exchange, and a local AD. I want to manage distribution groups and distribution groups members via PS scripts (that will run by scheduled task), that look users' AD attributes ...
0
votes
1answer
42 views

Can't remove a user from a group

When I list the groups I'm in, it says web. But when I try leave this group, it says I'm not in...
1
vote
3answers
633 views

SaltStack targeting minions with *

I am using SaltStack on my linux boxes and want to define nodegroups. I know about compound matching and minion lists, etc. This is what I need, and it works this way, but that's hard to maintain ...
0
votes
1answer
19 views

How are the security groups injected in an image in OpenStack?

I have been using OpenStack for some time and was just wondering how the security groups are injected in an image file. I browsed on the internet but I could not find a solution.
4
votes
1answer
4k views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
2
votes
1answer
59 views

Permission to files owned by group denied

I think the easiest way to describe is using these pictures: click for image I also tested using chmod -R a+rw minecraft2 What is the problem here?
0
votes
2answers
650 views

/etc/passwd shows user in a group, but /etc/group does not

I want to verify that the user account filesender_1 is a member of the group valid_senders. When I look at /etc/group, filesender_1 is not there: valid_senders:x:12345:production_1 I read this as ...
0
votes
1answer
83 views

Reload VIAccounts list with PowerCli to select a newly created group

I'm using a script that creates groups in Active Directory, and links them to my vCenter server using New-VIPermission. The trick is that it doesn't find the groups created unless I restart the script ...
2
votes
1answer
1k views

Can't FTP to /var/www/html on Ubuntu (groups set…)

So I'm having some issues with vsftpd. I need the webroot to be in /var/www/public because I have multiple users accessing it, so I can't put it in a users directory. Now that directory has "chown -R ...