The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

0
votes
1answer
42 views

User privileges enumerating serial device

I'm trying to use the Java Simple Serial Connector on Arch Linux. I have a simple program listed below: import jssc._ object Main { def main(args:Array[String]):Unit = { println("Started") ...
-1
votes
1answer
60 views

apache restrict directory based on unix group

I have an apache server hosting a website with three main directories. Currently two of the directories are restricted to a subset of users with a group file. But for the third directory, I need to ...
-1
votes
1answer
122 views

What system-wide changes can a user make? [closed]

I work in an organization that uses Faronics Deep Freeze to prevent users from making changes to the computer. I had always been under the impression that a standard user (a user who is only a member ...
0
votes
0answers
32 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
0
votes
1answer
467 views

Linux permissions in /var/www: What settings can I use for good security practice and still maintain accessibility?

I'm primarily trying to set permissions inside of /var/www . We are using a project format which has the following structure in common for each project: /var /www /runtime /shared /project.com ...
3
votes
1answer
64 views

recomended order for changing AD groups?

I have a number of domain local resource groups that need: a) to be changed into Universal groups. b) renamed. c) have the users of their member groups collapsed into this group itself. d) remove the ...
1
vote
1answer
50 views

Is there an order that users appear in the /etc/group file?

I was wondering if anyone knew what determines the order of users in /etc/group entries? It does not appear to be alphabetical or by UID or chronologically by date added. I don't think this makes any ...
0
votes
1answer
107 views

Powershell - query non-standard group members in an OU?

I am looking to create a script which will only show users in an OU who are members of "non-standard" groups. For example, all users in the "Accounting" OU will be members of at least one group with ...
1
vote
1answer
213 views

Can I add a local linux user to a supplementary active directory group?

The Linux box in question is a CentOS 6.5 machine that is bound to active directory. I can change a local user's primary group to an active directory group. But i can't add the active directory group ...
-1
votes
1answer
42 views

Something removed a user's group memberships - How can I prevent this in the future?

I had a user say that he wasn't getting emails, so I got on the DC and made sure his account didn't have any obvious issues. I just happened to click on the Member of tab and saw that he was not a ...
7
votes
1answer
3k views

Granting Domain Admin privileges to a cross-forest user account?

Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest? The obvious approach of adding Domain ...
5
votes
1answer
679 views

PowerShell DSC Group Resource - “Could not find a principal with the provided name”

I am trying to use PowerShell DSC to add a domain group to the local administrators group. Here is the code: Configuration TestSetup { Node localhost { Group Administrators { ...
0
votes
1answer
652 views

Zentyal: “incorrect password” on login

I've installed Zentyal 3.3 on my virtual Ubuntu server (12.04.4 LTS (GNU/Linux 3.2.0-23-generic x86_64)) as package. But when I try to login, Zentyal throws "Incorrect password". I've added my user to ...
0
votes
2answers
156 views

Migrating server local groups (currently workgroup) to domain?

I have about ~30 workstations that I administer, plus a fileserver, all of which I inherited when I took this net admin job. The previous guy had been around forever from when the company was far ...
3
votes
1answer
1k views

How can a set a Security Group's email address using PowerShell?

I need to create many groups with email addresses. I would prefer to use Security Groups to reduce the number of groups we have to maintain, otherwise we'd have an identical Distribution Group for ...
1
vote
0answers
47 views

Is there a way for a user to temporarily remove its own group membership within a script?

I'm writing a script which will be used to "detect" whether a generic, no-frills, user account has access to certain files. Basically a user which only has membership in the "staff" group or ...
1
vote
1answer
61 views

Windows Server 2k8 - Adding User To Admin Group But Not True Admin?

It appears that adding a user to the Administrators group does not actually grant the user full Administrative privileges on the server. I am still not able to add users to the system (Access Denied) ...
2
votes
1answer
141 views

Windows 7 / 2008 connect to VPN at login with Group Policy

I am trying to find a way to have windows 7 VPN clients connect to the VPN server automatically via Group Policy. I tried using a login script but it looks like the scripts are shared from sysvol and ...
0
votes
2answers
175 views

Enable apache to create directory/files

I want to enable apache to automatically create files/directories. In some web hosts, for example, when I install wordpress, apache is able to automatically createwp-config.php file. But In my VPS, ...
10
votes
1answer
222 views

Can I “merge” two groups using SID history?

I have two AD groups which were erroneously created while there should instead have been only one group; they contain the exact same users. However, these groups have been assigned various permissions ...
1
vote
0answers
261 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
0
votes
2answers
671 views

Group Policy - Software Restrictions

I've just set up a new server on a new Domain Controller. I have implemented my Group Policy too. However, I would like to implement a policy to restrict the installation of all software by users and ...
4
votes
2answers
468 views

In LDAP is it best to nest groups under organizational units or create an organization unit directly under the root dn just for groups?

I'm not sure whether it's better to nest groups under each of my organizational units or to make an organization unit directly under the root DN just for groups. Is one considered best practice over ...
0
votes
0answers
2k views

Sync Active Directory Users in FreeNAS

This is for FreeNas-9.1.1, I am using active directory which appears to be connecting ok, since the following list users/groups from that server with no problems wbinfo -u wbinfo -g I can also join ...
1
vote
2answers
120 views

How can I list all of the domain machines that a domain user group can administer?

Over the years, there are many extra and duplicate user groups in my domain. So I need to identify which machine a particular group has administrative rights to. I've done a fair amount of searching ...
0
votes
1answer
33 views

Amazon RDS - Create a Security Group NOT in Virginia? [closed]

It seems as though the management console only allows security groups to be created while in the "Virginia" selection. Is there a way to create a security group for an Oregon (or other)-based ...
1
vote
0answers
133 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
1
vote
2answers
78 views

Group permissions (seemingly) ignored on Win2k3 fileserver

After 10+ years having our AD setup "one way," I'm looking at the permission structure and realized that our business has in fact changed enough to where we should match our current state rather than ...
1
vote
1answer
356 views

Puppet notice: current_value absent, should be present

I'm trying to add a user via puppet (v 3.2.4), and get this notice on --noop: Notice: /Stage[main]/Usergroup/Group[user_one]/ensure: current_value absent, should be present (noop) Here's my ...
1
vote
1answer
253 views

I want to find a way to visualise security groups and their members

I hope someone can help... I want to find a way to visualise security groups and their members, and be able to show that to users in a simple format for discussion. I have a simple matrix in Excel ...
1
vote
1answer
161 views

With sudoers, how can I allow a user to change the group of files/folders within their home directory?

I have a webserver where apache runs as www-data. Users are set up using chef, and some of their file/folder permissions are set to group: www-data, e.g. uploads folders. Deployments are done with ...
0
votes
1answer
105 views

Obfuscated Account Names in Windows Computer Management / Groups

So our security auditors sent me an email indicating there were a few AD groups and accounts in the administrators group of one of our servers that should not have admin access to the machine in ...
4
votes
2answers
26k views

List All Groups and Their Members with PowerShell on Win2008r2

I am new to powershell, but I've been reading manuals and practiced a little bit. My objective is to List all users in all Security Groups under specified path. I have found the way to do it: ...
2
votes
1answer
1k views

Powershell to add users to a group

I have written this bit of PS to add users from a text file to and AD group that the user inputs. It works fine except for the if statement. The if statement is supposed to check the group to see if ...
1
vote
1answer
140 views

Permissions to set on user to read from Active Directory only

I have to setup user accounts for applications to use to get a list of users and group memberships from our domain. As such, I'd like these applications to use credentials for user accounts with bare ...
2
votes
1answer
153 views

Puppet: Enumerating all users within a group

Is there any way to enumerate an array of all users within a group within Puppet, either as a fact or something so I can do something like this? $users = enumusers('wheel') each($users) |$user| { ...
4
votes
1answer
376 views

Still confused by Permissions - linux, nginx, php-fpm

I have read the canonical answer at What are the best linux permissions to use for my website? However I'm still stuck. My setup is: A developer user 'ade' who owns the directories and files that ...
11
votes
2answers
754 views

Temporary membership to AD group

We restrict the running of exe's across the organization. But based on justifications & approvals we add users to (specific) AD groups for 24 hours. Currently the process of removing the users ...
-1
votes
1answer
437 views

Purpose of primary group [closed]

Why do we need a primary group for users? Why is it mandatory to the users to have a primary group?
9
votes
4answers
999 views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
6
votes
1answer
690 views

Windows 7 “Cryptographic Operators”

This TechNet blog states that: Cryptographic Operators: FIPS 140-2 defines a “Crypto Officer” role, which is represented by the Cryptographic Operators group in Windows, first introduced in ...
3
votes
3answers
540 views

Puppet module to manage groups not working

I have configured a module to set up a new group using the following documentation: http://docs.puppetlabs.com/references/latest/type.html#group. [root@puppetmaster ~]# cat ...
1
vote
1answer
154 views

How to enable group-writable suexec-capable CGI scripts?

I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
1
vote
2answers
261 views

Linux user groups : how to create shared directory under home

I have created 3 users 'u1','u2','u3'. Now I want to provide access to u1's /home/u1/share directory users u2,u3. I don't want to create a new common group named 'shared' and add 3 users there. Is ...
0
votes
2answers
170 views

List linux users

I need to find a group in linux that doesn't appear in my /etc/groups file. I run the following command and get an error sudo adduser --disabled-login --gecos 'GitLab' git adduser: The group `git' ...
2
votes
1answer
419 views

Group hierarchy in Active Directory [closed]

Is it possible to get group hierarchy in AD? It's for managing permissions to a web app from there. I need to do this: Users Product Admin Task Subtask1 Subtask2 Subtask3 Task 2 So if you ...
3
votes
1answer
3k views

Mac OS X Server (10.8) - SMB sharing permissions don't update (when a user is removed from a group)

We're running a Mac OS 10.8.3 server using the File Sharing feature. We have both AFP and SMB sharing enabled. When we change a user's permissions, their permissions are set properly when accessing ...
3
votes
3answers
10k views

Creating a Dynamic Group in Active Directory with users from a OU

I would like to create a dynamic group with users from a specific OU in my Active Directory. I can do this perfectly using Exchange Dynamic Distribution List, but of course, Ex DDL's are only for ...
0
votes
3answers
557 views

Domain admin cannot change gpmc

Windows 2K8R2 domain. I created a GPO to restrict Domain User access to certain server components on an RDS Host. Now I cannot access the functions I restricted. I am a member of both the Domain ...
8
votes
2answers
2k views

What is the canonical use for the “sys” and “adm” groups?

Since the beginning of time (or as long as I remember anyway) linux systems have had a "sys" and an "adm" group. What is the canonical use for them? Would it be appropriate to use either for a "super ...