The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

11
votes
2answers
1k views

Temporary membership to AD group

We restrict the running of exe's across the organization. But based on justifications & approvals we add users to (specific) AD groups for 24 hours. Currently the process of removing the users ...
-1
votes
1answer
837 views

Purpose of primary group [closed]

Why do we need a primary group for users? Why is it mandatory to the users to have a primary group?
11
votes
4answers
1k views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
6
votes
1answer
910 views

Windows 7 “Cryptographic Operators”

This TechNet blog states that: Cryptographic Operators: FIPS 140-2 defines a “Crypto Officer” role, which is represented by the Cryptographic Operators group in Windows, first introduced in ...
3
votes
3answers
778 views

Puppet module to manage groups not working

I have configured a module to set up a new group using the following documentation: http://docs.puppetlabs.com/references/latest/type.html#group. [root@puppetmaster ~]# cat ...
1
vote
1answer
184 views

How to enable group-writable suexec-capable CGI scripts?

I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
1
vote
2answers
315 views

Linux user groups : how to create shared directory under home

I have created 3 users 'u1','u2','u3'. Now I want to provide access to u1's /home/u1/share directory users u2,u3. I don't want to create a new common group named 'shared' and add 3 users there. Is ...
0
votes
2answers
203 views

List linux users

I need to find a group in linux that doesn't appear in my /etc/groups file. I run the following command and get an error sudo adduser --disabled-login --gecos 'GitLab' git adduser: The group `git' ...
2
votes
1answer
546 views

Group hierarchy in Active Directory [closed]

Is it possible to get group hierarchy in AD? It's for managing permissions to a web app from there. I need to do this: Users Product Admin Task Subtask1 Subtask2 Subtask3 Task 2 So if you ...
3
votes
1answer
3k views

Mac OS X Server (10.8) - SMB sharing permissions don't update (when a user is removed from a group)

We're running a Mac OS 10.8.3 server using the File Sharing feature. We have both AFP and SMB sharing enabled. When we change a user's permissions, their permissions are set properly when accessing ...
4
votes
3answers
16k views

Creating a Dynamic Group in Active Directory with users from a OU

I would like to create a dynamic group with users from a specific OU in my Active Directory. I can do this perfectly using Exchange Dynamic Distribution List, but of course, Ex DDL's are only for ...
0
votes
3answers
819 views

Domain admin cannot change gpmc

Windows 2K8R2 domain. I created a GPO to restrict Domain User access to certain server components on an RDS Host. Now I cannot access the functions I restricted. I am a member of both the Domain ...
8
votes
2answers
3k views

What is the canonical use for the “sys” and “adm” groups?

Since the beginning of time (or as long as I remember anyway) linux systems have had a "sys" and an "adm" group. What is the canonical use for them? Would it be appropriate to use either for a "super ...
-1
votes
1answer
34 views

To give access to users in group for individual OU's

I have 6 users in my user group and my job is to allow each user to allow access to different OU's and not to whole Domain. And also to provide RDP access. Can anyone help me with this?
1
vote
1answer
612 views

Changing Password expiry date for limited users in Domain

I have 50 users in my domain. But i have to set password expiry days for 90 for only 10 users. How can i do it. How can this be done without affecting any other users Password Policy.
0
votes
1answer
69 views

Tips on organizing Active Directory for a global company with different departments [closed]

I have started to read and implement some of the basic domain architecture implementation, one of the question I have is what is the latest trend in organizing the active directory OU's, Groups and ...
0
votes
1answer
323 views

Multiple users, one public_html directory

New to creating users with linux. Trying to add users in a secure manner, limiting damage a user can do give all members of the webadmins group access to the public_html folder as projects are often ...
2
votes
2answers
99 views

How to make Groups as not readable to Users in AD

We are using taskpads to delegete tasks(such as reset password) to remote admins; the delegation is done at the OU level ; but unfortunately OU contains some special accounts/groups(such as ...
1
vote
1answer
486 views

Debian USER with read/write permissions for www

I have a Debian Squeeze server with an EasySCP admin panel. This panel set domain folders in /var/www/virtual/domain.name Every domain has a unique ID of vu2000, vu2001... Ownership of the files ...
1
vote
1answer
75 views

Additional groups for apache user

When configuring the user/group that apache runs under, does the process run only with permissions of the specified group, or also with those of which the user is a member? For example, if Apache ...
1
vote
0answers
60 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
2
votes
1answer
1k views

(Powershell) Method to return a list of groups where a specific user has 'write member' security

We use a piece of web-based software that users can log on to in order to manage access to shares controlled with AD groups. The list of groups a user can manage are the groups on which they have ...
2
votes
3answers
720 views

Automatically add ActiveSync users to AD group?

Is there a way that, upon first successful sync via ActiveSync, a user could be added to an Active Directory group?
1
vote
1answer
444 views

can i allow End Users to change the desktop background on Windows Server 2008 r2?

we are currnetly building a system consisting of windows server 2008 r2 (1 of 2 redundnacy) and 2 Win7 workstations. we would like to allow the customer (end users) to change the background at their ...
3
votes
2answers
4k views

Security Group vs Distribution Group

Within our AD set-up there are a lot of security groups, but only 1 distribution group (that a previous admin created). Both types of group contain lists of domain objects (users in the one I was ...
1
vote
0answers
283 views

Allowing Backup Operator group to use NetBackup

I have a Windows Server 2008 installed with Microsoft SQL Server 2008 and NetBackup. I have a local ID called bckopr1 and is a member of the Backup Operator group. Subsequently, this ID also able to ...
1
vote
1answer
290 views

Can users added to certain OU automatically be member of particular group

Windows Server 2008 R2. Can AD be set up so that any user added to a particular OU automatically be assigned to a particular user group?
2
votes
0answers
615 views

Group membership erratically lost after user logs in - Ubuntu, winbind, AD

I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
0
votes
1answer
1k views

Remote Administer Local Groups with PowerShell and WMI

How do I administer local groups on a remote server with PowerShell and WMI? For example, I would like to add and remove domain AD groups from the "Remote Desktop Users" group. This article provides ...
3
votes
3answers
538 views

Allow members of a group to be unlocked by a specific account on AD

Background I'm creating a service to allow support staff to enable their firecall accounts out of hours (i.e. if there's an issue in the night and we can't get hold of someone with admin rights, ...
0
votes
2answers
139 views

Logging into Linux server gives users 'domain users' for default group can it be changed?

I recently attached a RHEL 5 test box to our active directory server to try and get all of our users to not have to remember so many passowrds. I'm using winbind and samba and everything seems to be ...
0
votes
1answer
819 views

Folder rights doesn't work on group, but does on user

I've got this share where I want to restrict access to two folders so that only members of a group can get access to them. I've done this countless of times, but this time there's something odd going ...
1
vote
1answer
58 views

Win Group Overlap: Authenticated Users and System

I'm seeing some weird behaviour with a few of my ACEs at the minute, particularly when denying the Authenticated Users instead of the usual Domain\Domain Users. As a consequence of this, I can only ...
0
votes
1answer
240 views

Ubuntu - Group users create new files/directory always: -rwxrwxr-x / drwxrwxr-x

I got a directory in which my group is the owner. The group has two users, however, when a user create a directory the other user can't move the files. Why is that and how can I change so that the ...
3
votes
1answer
603 views

Dynamic group membership to work around no nested security group support for Active Directory

My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS). These legacy administration ...
1
vote
1answer
4k views

Cross-forest universal groups on Windows Server?

I would like to create a Universal Group whose members are a mix of cross-forests users and groups. In the following example, two forests are mentioned (US and UK) and two domains in each forest ...
1
vote
1answer
148 views

ADSIEdit freezes gettings properties of a group with hundred of thousands members

Doing performance testing on an AD-LDS (Server 2008 R2 64 bits), we created a milion user in a single OU. We also created a single group object and made those milion users member of that group. When ...
0
votes
1answer
88 views

Linux Permissions via group and user IDs

This is such an elementary question, and I can't believe I've been using Unix (Linux and Mac) for over 5 years without knowing this! The root user has group id 0 and user id 0. Hence lower group ids ...
1
vote
0answers
121 views

Hosted Exchange and distribution group segregation

To keep my question as simple as possible, this is what I would like to address Environment Exchange 2010Sp2 Give users the ability to manage distribution groups that they own through Outlook and ...
3
votes
2answers
283 views

Preferred method for allowing unprivileged UNIX/Linux users to view syslog information

I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg. /var/log/messages) for debugging purposes. This is explicitly local log data, not remote ...
1
vote
1answer
919 views

How many users can be in a AD LDS group?

Microsoft published the recommended maximum limits for users in an Active Directory group. It basically says : Starting with Windows Server 2003, the ability to replicate discrete changes to ...
0
votes
2answers
758 views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
1
vote
2answers
383 views

Unix: how can I change Program's running user and running group?

I changed the APACHE_RUN_GROUP in /etc/apache2/envvars to APACHE_RUN_GROUP=web-content because I want Apache to run us www-data:web-content, insetad of www-data:www-data. I hate monotonous manual ...
0
votes
2answers
150 views

How can I make user and group ids the same on two servers?

I have two servers, one of which has a volume from the other mounted as an NFS device. I have an application on the mounter that creates files that must then be manipulated by an application on the ...
0
votes
1answer
691 views

Determine local group membership of an AD user?

I have several local groups on a Server 2008 instance. In this group are several members from our AD domain. Is there a way to determine all of the local groups a given AD domain user belongs to by ...
0
votes
1answer
87 views

Is it safe/secure to use NIS for user and group info (no password hashes)?

I have some systems which currently use Likewise Open to integrate into an AD environment, but this creates UIDs/GIDs which are not compatible with the Unix UIDs/GIDs which some other systems use. ...
0
votes
1answer
79 views

Where can I find a documented lists of permissions given when adding a user to stock groups in major distributions?

I am trying to work out a strategy to appropriately hand out certain levels of permissions to junior admins on the system across multiple distributions, especially Ubuntu Server and RedHat Enterprise ...
2
votes
2answers
2k views

How to Lock Down an Active Directory Remote Desktop User

Please advise me on how I can ensure that remote desktop users cannot install software onto the Active Directory Server they are logging into remotely. Some Background: I have a client whose Server ...
1
vote
3answers
1k views

Execute a command from another group

In Linux, I have the following id: uid=1005(username) gid=1005(username) groups=1005(username),33(www-data),1002(git) I'd like to change my effective gid to git so that everything I create will ...
2
votes
1answer
168 views

SSH jumpbox with group Authorisation

I'm trying to setup a SSH Jumpbox. Users logged on the Jumpbox needs to be able to authorize to another SSH servers depending on their group. (UserA is on group Project1, UserB is on group Project2, ...