The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

3
votes
3answers
2k views

What are the consequences of an AD group that has as its member a group, that is already a member (Cyclic references)

I have been looking at an Active Directory that has several thousand groups, where pairs of groups are members of each other. GroupA has GroupB as a Member. GroupB has GroupA as a Member. Oy. I am ...
0
votes
1answer
498 views

External recipients in internal distribution groups

Just some backgroud, we have several users that are contracted to highly secure 3rd party locations they are not able to access webmail! Instead they are given temp user accounts and email address to ...
6
votes
1answer
180 views

Directory with read and write for a user is permission denied, but fine with execute permissions

I have some weirdness with my users/permissions. I currently have a user named world that has the groups world www-data admin. I have a directory at /var/abc which has the permissions 0644 or ...
2
votes
3answers
1k views

Assign log on as local admin to domain account

What I would like to do is grant permission for a domain account to log on to any server/workstation and be a local administrator with having to add this account to domain admin group? This account ...
5
votes
4answers
10k views

How do you force an update to a user's group membership in Windows 7?

I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...
2
votes
1answer
2k views

mrepo and grouplist/groupinstall?, mrepo not working as expected with group

All, I'm trying to set up mrepo so we can have internal repositories. After quite the slog, things seem to be working as expected EXCEPT for groups. From man createrepo: EXAMPLES Here is an ...
2
votes
3answers
122 views

Machine/Computer Groups in Active Directory

I was curious when a person should use Machine Groups within Active Directory? What are the common uses cases for them? How does one keep them up to date as machines are shuffled by a multi-tiered ...
0
votes
1answer
489 views

Maximum number of groups in Linux

I have several questions about linux groups Is there a limit to the number of groups a user can create? Is there a limit to the total number of groups in a system? Is there a limit to the number of ...
2
votes
3answers
759 views

Cross-group file permissions in Linux

I have 2 users: Alice and Bob and 2 groups: Management and Personnel. Alice has primary group Management, and secondary groups Personnel and Alice. Bob has primary group Personnel and secondary group ...
0
votes
1answer
89 views

How can I set up a single user that can edit multiple sites' files with correct default permissions?

How can I achieve this setup: There is a primary user that I use to ssh into the server and edit all files for multiple sites. The various sites are stored in the /srv/www directory, so ...
0
votes
3answers
294 views

is there a good tool for viewing the permissions in AD?

I want to be able to see a nice picture of nested groups in AD. Are there any products that do that for me?
2
votes
1answer
106 views

Exchange 2003 - Internal only group allow external delivery

I have a situation, where there are users in a group, who are only allowed to email internally. I have created an external domain, which i need to allow that internal group to be able to send to, but ...
1
vote
1answer
1k views

Find orphaned foreign security principals and remove them from groups

We have a Windows 2008 R2 Domain with multiple outgoing trusts. In this domain we add the users from the trusted domains to domain local security groups. It seems that some or all deleted accounts ...
1
vote
1answer
473 views

ubuntu mount nfs only if user is in group

I have basic-to-medium advanced network setup at my work. We run an ubuntu 10.04 fileserver serving a few different directories (including /home) over NFS and all client machines (various ubuntu ...
5
votes
2answers
3k views

Prevent user “click-expansion” of Exchange distribution group?

I am a Unix guy who recently picked up powershell to help my Exchange admin coworkers implement a challenging project in Exchange 2010. (The requirements we've been given are challenging if not ...
1
vote
1answer
52 views

groups and owners with ftp

When a user "U" who is part of group "G" uploads a new file to the server with ftp , the permissions are set as U:U instead of U:G . I know the user is also part of his own group called "U" but how do ...
0
votes
1answer
64 views

How to create special groups and give them special process

I have many admins on the network and I want to specify job for them for example I want to create group responsible for install and run yahoo messenger means I don't want to give them full admin ...
2
votes
1answer
2k views

Creating user groups and assigning users in Windows Server 2008

I'm setting up an FTP server on a Windows Server 2008 r2 system. Rather than deal with setting filesystem permissions for users manually, I would like to simply grant a single group read/write access ...
1
vote
2answers
6k views

Jenkins/Hudson - LDAP group *lookup* does not work

I'm trying to get Jenkins to authenticate users via our active directory groups. If I insert users they are correctly looked up. If I insert group names, they are not found. Edit: Through trial ...
1
vote
3answers
3k views

Managing Active Directory Group Membership with a Non-Administrator Account In Server 2008

I am running Server 2008 R2 in an Active Directory Domain Environment. I have created a group in Active Directory and I have delegated management authority to that group to a user. I want this user ...
3
votes
3answers
3k views

How do you discover what permissions an AD group has, if you have no documentation?

You just got hired at company A and the old administrator is no longer there. Requests start coming through for adding users to the internet restrict group. When you look at the groups none of the ...
3
votes
3answers
1k views

Active Directory Bulk Group Edit

Is there a way to update the "Managed By" field for every group in Active Directory? I would also need to check "Manager can update membership list" also.
4
votes
1answer
2k views

Linux computer (Debian) in a Windows Active Directory Domain, Administrator of AD should have root permission after login

I managed to join my Debian machine (Squeeze) to an existing Active Directory (MS Windows 2008 R2 Server). Everything works fine, I can login using accounts from the Active Directory (NTP, Kerberos, ...
7
votes
3answers
11k views

How to authenticate users in nested groups in Apache LDAP?

I've working LDAP authentication with the following setup AuthName "whatever" AuthType Basic AuthBasicProvider ldap AuthLDAPUrl ...
0
votes
2answers
3k views

How do I enable group enumeration on a Linux server that is using LDAP to connect to an AD server?

I've got a set of servers that I need to authenticate against a central Active Directory forest. The AD admins have kindly installed the UNIX AD extensions and the NIS ones as well, so I've got a lot ...
0
votes
2answers
122 views

Is it possible to configure a service to run as a group and add users to that group on Windows XP?

Is it possible to configure a service to run as a group and add users to that group on Windows XP? I need the service to have the permissions of the users in that group so that they can logonn, ...
1
vote
1answer
171 views

Planning sysadmin group permissions in Windows network

I need to set up a plan for organizing permissions for sysadmins in a 200-server Windows 2003/2008 network. The servers exist in 5 separate forests that are connected via 2-way trusts. At the moment, ...
0
votes
3answers
4k views

Unable to get the SSH access for a new user

I created a new user on ubuntu 10 username: codeuser There is an existing user called "admin". Now, my problem is that I cannot directly connect to the server using the codeuser credentials. But, I ...
1
vote
1answer
129 views

Would the AdminSDHolder security propegation affect group membership?

I'm having an issue where every time I add users to the Enterprise Admin group in AD they are shortly thereafter removed. I have Domain Admin rights. I'm wondering if this has anything to do with ...
0
votes
1answer
56 views

php server web user setup

I'm needing to setup a basic web user account on my ubuntu 10.10 server to host web pages. This account should be limited to access only the necessary directories on the machine. I setup the following ...
0
votes
1answer
205 views

`groups` ignores /etc/groups?

What could be going on here? dylan/var$ ls -ld www drwxrwxr-x 2 root webdev 4096 2011-03-19 05:13 www dylan/var$ grep webdev /etc/group webdev:x:1001:dylan dylan/var$ touch www/test touch: cannot ...
1
vote
1answer
2k views

usermod -g doesn't apply permissions right away?

I've noticed that when I add myself to a new group with usermod newgroup -g wayne I will have the group listed when I say groups, but if I were to do something such as sudo mkidr ...
0
votes
3answers
93 views

Fixing Broken Groups

I just got onto a new project with the student government at my University and we're trying to get our webserver into a more workable state. The current problem is that all of us for some reason have ...
0
votes
1answer
431 views

ISA Server 2006 SP1 :: Any user group (even empty ones) applied to a rule - implements the rule for everyone

I have a rule to deny all access from internal and local host to external. I do no apply a user group and the rule is added to the configuration but obvious does not come into play. As soon as I add ...
4
votes
4answers
518 views

List users in all specified unix groups

Is there an easy way to get a list of users who are in all specified groups? For example, if I have the following users: fred - rainbow, dell jane - hp zippy - rainbow, hp, dell george - hp, dell ...
1
vote
2answers
1k views

How Can I Restrict FTP to a Particular Local Group?

I am running the FTP daemon VSFTPD. I'd like to control FTP access by adding users to a group such that only members of the defined group can access the FTP services. I am thinking I can do this by ...
0
votes
1answer
591 views

Centos Apache and Permissions (Sudoers maybe)

OS: CentOS 5.5 I have a 2 users which are part of a group. I would like to allow that group to be able stop and start Apache, but not grant access as root. I have been looking at the Sudoers ...
0
votes
1answer
1k views

Cleaning Up Unused Users and Groups (Ubuntu 10.10 Server)

I'm very much a beginner when it comes to Ubuntu and I've been learning the ropes by diving in and writing a (backend-language independent) web app framework that relies on apache, some clever ...
1
vote
1answer
33 views

Discrepancies in `groups` output

why is it that when I execute groups the output doesn't contain the adm group, while the output of groups $USER has it? The user is supposed to be in that group.
1
vote
1answer
553 views

Exchange 2010 Distribution Group - Email Self

In exchange 2010 we have multiple distribution groups. If i am a member of group TEST, and i send an email to this group, i will receive the email. Is there a way of sending to everyone in the group ...
1
vote
4answers
988 views

Jail Linux user to directory for FTP login

I'm planning on using vsftpd to act as a secure ftp server, but I am having difficulty controlling the linux users that will be used as ftp logins. The users are required to be "jailed" into a ...
3
votes
2answers
3k views

dn-based linux groups from ldap

Is there any way to use one of LDAP's DN-based groups for linux groups instead of using the uid-based posixGroup objectclass? More broadly, is there any way I can avoid having one set of groups for ...
1
vote
1answer
442 views

Managing Internal Yum Repository Groups

What is the best method for handling yum groups dependencies? For example, take this comps.xml file <comps> <group> <id>production</id> ...
0
votes
5answers
279 views

Recommend a web file sharing software please [closed]

I'm looking for a web platform to put company files at. My requirements are: should be accessible via a browser should be open source must be installable (dropbox is a no-go) must have an option to ...
0
votes
1answer
219 views

List Groups Common to a set of Users

I need a way to find the set of groups common to a list of users. I have a list of about 4 users I want to compare and find which groups they are all members of. Is there a quick way to do this in ...
2
votes
4answers
14k views

How to add a domain user to the local admin group remotely?

I need to add a domain user in the local administrator group remotly and I have to the local admin password
0
votes
2answers
278 views

Access a folder owned by another user from a windows machine using Samba

I have a Centos VM with Samba server and a user on that machine called smbuser in group smbuser. I can connect to my samba share /home/smbuser from my Windows 7 PC no problem. Also on the Centos VM I ...
0
votes
1answer
103 views

Need to Create Login for groups in SQL SERVER 2005

Can anyone help me on this regarding by providing the exact code? I need to create two Logins named (Groups) 1. Dev_S 2. Dev_T Each Group has exactly fifty (50) Users (as Dev_S1, ...
1
vote
1answer
1k views

rfc2307bis and posix groups

I've needed to configure LDAP authentication for Joomla! and the only way to get it to work together (with LDAP group based was by using groupOfUniqueNames, not the posixGroup. In other words, Joomla ...
2
votes
3answers
712 views

Block Active Directory Group

I have a touch-screen machine available to the public running under a domain account. This domain account is a member of an AD group for which I have denied all access at the folder level for our ...