The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

0
votes
0answers
20 views

you must have read permissions to view the properties of this object, administrators group

I think I'm having some difficulty understanding NTFS permissions. My understanding is that when possible you want to avoid assigning a specific user account to NTFS and instead use a group. So I set ...
1
vote
1answer
13 views

AD Group and Distribution Group with O365

I have a O365 with Exchange, and a local AD. I want to manage distribution groups and distribution groups members via PS scripts (that will run by scheduled task), that look users' AD attributes ...
0
votes
1answer
36 views

Can't remove a user from a group

When I list the groups I'm in, it says web. But when I try leave this group, it says I'm not in...
0
votes
2answers
43 views

SaltStack targeting minions with *

I am using SaltStack on my linux boxes and want to define nodegroups. I know about compound matching and minion lists, etc. This is what I need, and it works this way, but that's hard to maintain ...
0
votes
1answer
16 views

How are the security groups injected in an image in OpenStack?

I have been using OpenStack for some time and was just wondering how the security groups are injected in an image file. I browsed on the internet but I could not find a solution.
2
votes
1answer
54 views

Permission to files owned by group denied

I think the easiest way to describe is using these pictures: click for image I also tested using chmod -R a+rw minecraft2 What is the problem here?
0
votes
2answers
56 views

/etc/passwd shows user in a group, but /etc/group does not

I want to verify that the user account filesender_1 is a member of the group valid_senders. When I look at /etc/group, filesender_1 is not there: valid_senders:x:12345:production_1 I read this as ...
0
votes
1answer
13 views

Reload VIAccounts list with PowerCli to select a newly created group

I'm using a script that creates groups in Active Directory, and links them to my vCenter server using New-VIPermission. The trick is that it doesn't find the groups created unless I restart the script ...
2
votes
1answer
278 views

Can't FTP to /var/www/html on Ubuntu (groups set…)

So I'm having some issues with vsftpd. I need the webroot to be in /var/www/public because I have multiple users accessing it, so I can't put it in a users directory. Now that directory has "chown -R ...
0
votes
1answer
19 views

User privileges enumerating serial device

I'm trying to use the Java Simple Serial Connector on Arch Linux. I have a simple program listed below: import jssc._ object Main { def main(args:Array[String]):Unit = { println("Started") ...
-1
votes
1answer
72 views

What system-wide changes can a user make? [closed]

I work in an organization that uses Faronics Deep Freeze to prevent users from making changes to the computer. I had always been under the impression that a standard user (a user who is only a member ...
0
votes
0answers
26 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
3
votes
1answer
41 views

recomended order for changing AD groups?

I have a number of domain local resource groups that need: a) to be changed into Universal groups. b) renamed. c) have the users of their member groups collapsed into this group itself. d) remove the ...
1
vote
1answer
27 views

Is there an order that users appear in the /etc/group file?

I was wondering if anyone knew what determines the order of users in /etc/group entries? It does not appear to be alphabetical or by UID or chronologically by date added. I don't think this makes any ...
1
vote
1answer
79 views

Can I add a local linux user to a supplementary active directory group?

The Linux box in question is a CentOS 6.5 machine that is bound to active directory. I can change a local user's primary group to an active directory group. But i can't add the active directory group ...
-1
votes
1answer
38 views

Something removed a user's group memberships - How can I prevent this in the future?

I had a user say that he wasn't getting emails, so I got on the DC and made sure his account didn't have any obvious issues. I just happened to click on the Member of tab and saw that he was not a ...
5
votes
1answer
383 views

Granting Domain Admin privileges to a cross-forest user account?

Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest? The obvious approach of adding Domain ...
4
votes
1answer
252 views

PowerShell DSC Group Resource - “Could not find a principal with the provided name”

I am trying to use PowerShell DSC to add a domain group to the local administrators group. Here is the code: Configuration TestSetup { Node localhost { Group Administrators { ...
0
votes
2answers
45 views

Migrating server local groups (currently workgroup) to domain?

I have about ~30 workstations that I administer, plus a fileserver, all of which I inherited when I took this net admin job. The previous guy had been around forever from when the company was far ...
3
votes
1answer
235 views

How can a set a Security Group's email address using PowerShell?

I need to create many groups with email addresses. I would prefer to use Security Groups to reduce the number of groups we have to maintain, otherwise we'd have an identical Distribution Group for ...
1
vote
0answers
36 views

Is there a way for a user to temporarily remove its own group membership within a script?

I'm writing a script which will be used to "detect" whether a generic, no-frills, user account has access to certain files. Basically a user which only has membership in the "staff" group or ...
1
vote
1answer
45 views

Windows Server 2k8 - Adding User To Admin Group But Not True Admin?

It appears that adding a user to the Administrators group does not actually grant the user full Administrative privileges on the server. I am still not able to add users to the system (Access Denied) ...
1
vote
0answers
119 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
3
votes
2answers
131 views

In LDAP is it best to nest groups under organizational units or create an organization unit directly under the root dn just for groups?

I'm not sure whether it's better to nest groups under each of my organizational units or to make an organization unit directly under the root DN just for groups. Is one considered best practice over ...
0
votes
0answers
93 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
1
vote
2answers
57 views

Group permissions (seemingly) ignored on Win2k3 fileserver

After 10+ years having our AD setup "one way," I'm looking at the permission structure and realized that our business has in fact changed enough to where we should match our current state rather than ...
1
vote
1answer
186 views

Puppet notice: current_value absent, should be present

I'm trying to add a user via puppet (v 3.2.4), and get this notice on --noop: Notice: /Stage[main]/Usergroup/Group[user_one]/ensure: current_value absent, should be present (noop) Here's my ...
1
vote
1answer
79 views

With sudoers, how can I allow a user to change the group of files/folders within their home directory?

I have a webserver where apache runs as www-data. Users are set up using chef, and some of their file/folder permissions are set to group: www-data, e.g. uploads folders. Deployments are done with ...
0
votes
1answer
59 views

Obfuscated Account Names in Windows Computer Management / Groups

So our security auditors sent me an email indicating there were a few AD groups and accounts in the administrators group of one of our servers that should not have admin access to the machine in ...
2
votes
1answer
9k views

List All Groups and Their Members with PowerShell on Win2008r2

I am new to powershell, but I've been reading manuals and practiced a little bit. My objective is to List all users in all Security Groups under specified path. I have found the way to do it: ...
1
vote
1answer
66 views

Permissions to set on user to read from Active Directory only

I have to setup user accounts for applications to use to get a list of users and group memberships from our domain. As such, I'd like these applications to use credentials for user accounts with bare ...
2
votes
1answer
96 views

Puppet: Enumerating all users within a group

Is there any way to enumerate an array of all users within a group within Puppet, either as a fact or something so I can do something like this? $users = enumusers('wheel') each($users) |$user| { ...
3
votes
1answer
282 views

Still confused by Permissions - linux, nginx, php-fpm

I have read the canonical answer at What are the best linux permissions to use for my website? However I'm still stuck. My setup is: A developer user 'ade' who owns the directories and files that ...
9
votes
2answers
420 views

Temporary membership to AD group

We restrict the running of exe's across the organization. But based on justifications & approvals we add users to (specific) AD groups for 24 hours. Currently the process of removing the users ...
-1
votes
1answer
68 views

Purpose of primary group [closed]

Why do we need a primary group for users? Why is it mandatory to the users to have a primary group?
9
votes
4answers
565 views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
6
votes
1answer
422 views

Windows 7 “Cryptographic Operators”

This TechNet blog states that: Cryptographic Operators: FIPS 140-2 defines a “Crypto Officer” role, which is represented by the Cryptographic Operators group in Windows, first introduced in ...
3
votes
3answers
303 views

Puppet module to manage groups not working

I have configured a module to set up a new group using the following documentation: http://docs.puppetlabs.com/references/latest/type.html#group. [root@puppetmaster ~]# cat ...
0
votes
1answer
120 views

How to enable group-writable suexec-capable CGI scripts?

I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
1
vote
2answers
120 views

Linux user groups : how to create shared directory under home

I have created 3 users 'u1','u2','u3'. Now I want to provide access to u1's /home/u1/share directory users u2,u3. I don't want to create a new common group named 'shared' and add 3 users there. Is ...
0
votes
2answers
127 views

List linux users

I need to find a group in linux that doesn't appear in my /etc/groups file. I run the following command and get an error sudo adduser --disabled-login --gecos 'GitLab' git adduser: The group `git' ...
3
votes
1answer
2k views

Mac OS X Server (10.8) - SMB sharing permissions don't update (when a user is removed from a group)

We're running a Mac OS 10.8.3 server using the File Sharing feature. We have both AFP and SMB sharing enabled. When we change a user's permissions, their permissions are set properly when accessing ...
8
votes
2answers
1k views

What is the canonical use for the “sys” and “adm” groups?

Since the beginning of time (or as long as I remember anyway) linux systems have had a "sys" and an "adm" group. What is the canonical use for them? Would it be appropriate to use either for a "super ...
0
votes
1answer
63 views

Tips on organizing Active Directory for a global company with different departments [closed]

I have started to read and implement some of the basic domain architecture implementation, one of the question I have is what is the latest trend in organizing the active directory OU's, Groups and ...
2
votes
2answers
84 views

How to make Groups as not readable to Users in AD

We are using taskpads to delegete tasks(such as reset password) to remote admins; the delegation is done at the OU level ; but unfortunately OU contains some special accounts/groups(such as ...
1
vote
1answer
62 views

Additional groups for apache user

When configuring the user/group that apache runs under, does the process run only with permissions of the specified group, or also with those of which the user is a member? For example, if Apache ...
2
votes
3answers
458 views

Automatically add ActiveSync users to AD group?

Is there a way that, upon first successful sync via ActiveSync, a user could be added to an Active Directory group?
1
vote
2answers
357 views

Security Group vs Distribution Group

Within our AD set-up there are a lot of security groups, but only 1 distribution group (that a previous admin created). Both types of group contain lists of domain objects (users in the one I was ...
1
vote
0answers
181 views

Allowing Backup Operator group to use NetBackup

I have a Windows Server 2008 installed with Microsoft SQL Server 2008 and NetBackup. I have a local ID called bckopr1 and is a member of the Backup Operator group. Subsequently, this ID also able to ...
0
votes
1answer
571 views

Remote Administer Local Groups with PowerShell and WMI

How do I administer local groups on a remote server with PowerShell and WMI? For example, I would like to add and remove domain AD groups from the "Remote Desktop Users" group. This article provides ...