The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

-1
votes
1answer
33 views

To give access to users in group for individual OU's

I have 6 users in my user group and my job is to allow each user to allow access to different OU's and not to whole Domain. And also to provide RDP access. Can anyone help me with this?
1
vote
1answer
469 views

Changing Password expiry date for limited users in Domain

I have 50 users in my domain. But i have to set password expiry days for 90 for only 10 users. How can i do it. How can this be done without affecting any other users Password Policy.
0
votes
1answer
66 views

Tips on organizing Active Directory for a global company with different departments [closed]

I have started to read and implement some of the basic domain architecture implementation, one of the question I have is what is the latest trend in organizing the active directory OU's, Groups and ...
0
votes
1answer
284 views

Multiple users, one public_html directory

New to creating users with linux. Trying to add users in a secure manner, limiting damage a user can do give all members of the webadmins group access to the public_html folder as projects are often ...
2
votes
2answers
94 views

How to make Groups as not readable to Users in AD

We are using taskpads to delegete tasks(such as reset password) to remote admins; the delegation is done at the OU level ; but unfortunately OU contains some special accounts/groups(such as ...
1
vote
1answer
464 views

Debian USER with read/write permissions for www

I have a Debian Squeeze server with an EasySCP admin panel. This panel set domain folders in /var/www/virtual/domain.name Every domain has a unique ID of vu2000, vu2001... Ownership of the files ...
1
vote
1answer
72 views

Additional groups for apache user

When configuring the user/group that apache runs under, does the process run only with permissions of the specified group, or also with those of which the user is a member? For example, if Apache ...
1
vote
0answers
58 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
2
votes
1answer
1k views

(Powershell) Method to return a list of groups where a specific user has 'write member' security

We use a piece of web-based software that users can log on to in order to manage access to shares controlled with AD groups. The list of groups a user can manage are the groups on which they have ...
2
votes
3answers
632 views

Automatically add ActiveSync users to AD group?

Is there a way that, upon first successful sync via ActiveSync, a user could be added to an Active Directory group?
1
vote
1answer
428 views

can i allow End Users to change the desktop background on Windows Server 2008 r2?

we are currnetly building a system consisting of windows server 2008 r2 (1 of 2 redundnacy) and 2 Win7 workstations. we would like to allow the customer (end users) to change the background at their ...
2
votes
2answers
2k views

Security Group vs Distribution Group

Within our AD set-up there are a lot of security groups, but only 1 distribution group (that a previous admin created). Both types of group contain lists of domain objects (users in the one I was ...
1
vote
0answers
237 views

Allowing Backup Operator group to use NetBackup

I have a Windows Server 2008 installed with Microsoft SQL Server 2008 and NetBackup. I have a local ID called bckopr1 and is a member of the Backup Operator group. Subsequently, this ID also able to ...
1
vote
1answer
228 views

Can users added to certain OU automatically be member of particular group

Windows Server 2008 R2. Can AD be set up so that any user added to a particular OU automatically be assigned to a particular user group?
2
votes
0answers
529 views

Group membership erratically lost after user logs in - Ubuntu, winbind, AD

I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
0
votes
1answer
975 views

Remote Administer Local Groups with PowerShell and WMI

How do I administer local groups on a remote server with PowerShell and WMI? For example, I would like to add and remove domain AD groups from the "Remote Desktop Users" group. This article provides ...
3
votes
3answers
483 views

Allow members of a group to be unlocked by a specific account on AD

Background I'm creating a service to allow support staff to enable their firecall accounts out of hours (i.e. if there's an issue in the night and we can't get hold of someone with admin rights, ...
0
votes
2answers
123 views

Logging into Linux server gives users 'domain users' for default group can it be changed?

I recently attached a RHEL 5 test box to our active directory server to try and get all of our users to not have to remember so many passowrds. I'm using winbind and samba and everything seems to be ...
0
votes
1answer
554 views

Folder rights doesn't work on group, but does on user

I've got this share where I want to restrict access to two folders so that only members of a group can get access to them. I've done this countless of times, but this time there's something odd going ...
1
vote
1answer
57 views

Win Group Overlap: Authenticated Users and System

I'm seeing some weird behaviour with a few of my ACEs at the minute, particularly when denying the Authenticated Users instead of the usual Domain\Domain Users. As a consequence of this, I can only ...
0
votes
1answer
219 views

Ubuntu - Group users create new files/directory always: -rwxrwxr-x / drwxrwxr-x

I got a directory in which my group is the owner. The group has two users, however, when a user create a directory the other user can't move the files. Why is that and how can I change so that the ...
3
votes
1answer
527 views

Dynamic group membership to work around no nested security group support for Active Directory

My problem is that I have a number of network administration applications like SAN switches that do not support nested groups from Active Directory Domain Services (AD DS). These legacy administration ...
1
vote
1answer
3k views

Cross-forest universal groups on Windows Server?

I would like to create a Universal Group whose members are a mix of cross-forests users and groups. In the following example, two forests are mentioned (US and UK) and two domains in each forest ...
1
vote
1answer
135 views

ADSIEdit freezes gettings properties of a group with hundred of thousands members

Doing performance testing on an AD-LDS (Server 2008 R2 64 bits), we created a milion user in a single OU. We also created a single group object and made those milion users member of that group. When ...
0
votes
1answer
86 views

Linux Permissions via group and user IDs

This is such an elementary question, and I can't believe I've been using Unix (Linux and Mac) for over 5 years without knowing this! The root user has group id 0 and user id 0. Hence lower group ids ...
1
vote
0answers
115 views

Hosted Exchange and distribution group segregation

To keep my question as simple as possible, this is what I would like to address Environment Exchange 2010Sp2 Give users the ability to manage distribution groups that they own through Outlook and ...
3
votes
2answers
246 views

Preferred method for allowing unprivileged UNIX/Linux users to view syslog information

I have some non-privileged "role accounts" that need the ability to view [some of] the local syslogs (eg. /var/log/messages) for debugging purposes. This is explicitly local log data, not remote ...
1
vote
1answer
792 views

How many users can be in a AD LDS group?

Microsoft published the recommended maximum limits for users in an Active Directory group. It basically says : Starting with Windows Server 2003, the ability to replicate discrete changes to ...
0
votes
2answers
600 views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
1
vote
2answers
339 views

Unix: how can I change Program's running user and running group?

I changed the APACHE_RUN_GROUP in /etc/apache2/envvars to APACHE_RUN_GROUP=web-content because I want Apache to run us www-data:web-content, insetad of www-data:www-data. I hate monotonous manual ...
0
votes
2answers
133 views

How can I make user and group ids the same on two servers?

I have two servers, one of which has a volume from the other mounted as an NFS device. I have an application on the mounter that creates files that must then be manipulated by an application on the ...
0
votes
1answer
605 views

Determine local group membership of an AD user?

I have several local groups on a Server 2008 instance. In this group are several members from our AD domain. Is there a way to determine all of the local groups a given AD domain user belongs to by ...
0
votes
1answer
83 views

Is it safe/secure to use NIS for user and group info (no password hashes)?

I have some systems which currently use Likewise Open to integrate into an AD environment, but this creates UIDs/GIDs which are not compatible with the Unix UIDs/GIDs which some other systems use. ...
0
votes
1answer
65 views

Where can I find a documented lists of permissions given when adding a user to stock groups in major distributions?

I am trying to work out a strategy to appropriately hand out certain levels of permissions to junior admins on the system across multiple distributions, especially Ubuntu Server and RedHat Enterprise ...
2
votes
2answers
1k views

How to Lock Down an Active Directory Remote Desktop User

Please advise me on how I can ensure that remote desktop users cannot install software onto the Active Directory Server they are logging into remotely. Some Background: I have a client whose Server ...
1
vote
3answers
885 views

Execute a command from another group

In Linux, I have the following id: uid=1005(username) gid=1005(username) groups=1005(username),33(www-data),1002(git) I'd like to change my effective gid to git so that everything I create will ...
2
votes
1answer
160 views

SSH jumpbox with group Authorisation

I'm trying to setup a SSH Jumpbox. Users logged on the Jumpbox needs to be able to authorize to another SSH servers depending on their group. (UserA is on group Project1, UserB is on group Project2, ...
4
votes
3answers
397 views

Apache multiple ldap groups

I am configuring Apache to authenticate against LDAP and require multiple groups to be present. I have done this with require statements, however I need the authentication to be successful if all ...
3
votes
1answer
2k views

Create group to restart services in CentOS

SYSTEM: CentOS release 6.2 (Final) I am attempting to allow only users of a certain group lets call it websupport access to restart 2 services: mysqld and httpd EDIT: I do not want to give these ...
1
vote
1answer
325 views

group permission not working

I'm installing gitlab at my server but I got a permission problem: I have two users, 'git' and 'gitlab', both are part of group 'git', the home dir of 'git' has the drwxr----- permissions. Therefore ...
1
vote
1answer
2k views

Automatically remove recipients from distribution lists when mailbox is deleted

I thought this was the default behavior in Exchange 2010 but apparently it is not - how can I ensure that when I mark a mailbox for removal in Exchange 2010 console, it will remove all instances of ...
0
votes
2answers
197 views

how to add groupOfEntries object class to openLDAP

I am working on the design of LDAP structure, that basically should hold users and groups. There should be support for nested groups (so I thought on using groupOfNames object class) and for the ...
3
votes
1answer
299 views

Restricting ssh tunnel port access by group

My understanding is when creating an ssh tunnel to a remote machine, the ports become open on that machine for anyone to use and connect back to my local box (not just the user who opened the tunnel). ...
1
vote
2answers
2k views

Ubuntu Server 12.04: Write Files via Samba with Group Ownership

I have a shared samba drive set up on my virtual machine guest running Ubuntu Server 12.04. \\ubuntu\www The file path /var/www has the permissions www-data:www-data set up. My user name abe is ...
1
vote
3answers
769 views

A user in multiple user groups not receiving correct permissons

A little intro: I'm not a server admin, but I do some tech support for a small software company whose product requires users to have full control permissions to a mapped drive on the server in order ...
2
votes
2answers
675 views

How are group ids assigned?

I want to create a developers group on my OS-X system. I'm executing: sudo dscl . -create /groups/developers sudo dscl . -append /groups/developers passwd 'blah' My understanding from reading ...
3
votes
1answer
228 views

Can active directory GPO's apply to a group object?

I know I can set up an OU, move user objects in to it, and link a GPO to that OU and that GPO will apply to those users. Is it possible to set up an OU, move a group in to the OU, and have a linked ...
11
votes
2answers
5k views

Puppet: how to create and manage unix users and groups

This last week I spent all effort into learning Puppet. Now I suffer from a mental buffer overflow and little confidence of ever being able to tame this beast. I came across many annotated examples ...
3
votes
2answers
193 views

Only a subset of groups available

I have installed RHEL 6.2 and configured for using LDAP with the setup utility and I can login. What is stange is that only three LDAP groups are recognized per user. It is different groups, even for ...
1
vote
2answers
2k views

Linux user group configuration for Git bare repository

I'm using a Ubuntu box to host my bare Git repositories for developers to work off. At the moment I'm creating a user account for each developer on the box because it doubles as a filestore and local ...