The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

2
votes
3answers
2k views

Deep Freeze Removing Group Policy?

I am having trouble applying group policies on computers with deep freeze installed on them. They are domain joined and pulling updates from our WSUS server before being frozen. When we freeze them ...
1
vote
1answer
371 views

Best way to control access?

I have a few servers that serve different purposes (and thus different users use each) that authenticate to an LDAP server (I do not have permission to modify content on the LDAP server). What is an ...
1
vote
1answer
299 views

How to build threaded web archive of all email sent to an Exchange distribution group?

We have an Exchange distribution group for dev@example.com that includes all the users on the development team, so mail sent to that address goes to everyone on the team. Is there an easy way to build ...
1
vote
1answer
2k views

Find orphaned foreign security principals and remove them from groups

We have a Windows 2008 R2 Domain with multiple outgoing trusts. In this domain we add the users from the trusted domains to domain local security groups. It seems that some or all deleted accounts ...
1
vote
1answer
255 views

Apache authenticate group of matching subdirectory

I have a unique scenario here - one that probably has come up in the past. I have a directory that is being protected by an LDAP authentication on my Apache server. In this directory (call it /svn - ...
0
votes
1answer
326 views

Dovecot LDA (deliver) and LDAP groups

I have a LDAP and a Dovecot running on my server, the Dovecot uses LDAP as userdb and authdb, postfix is using LDA (deliver) to deliver the mails to the user. Now I want to have group email addresses ...
6
votes
2answers
3k views

Is it ok to add users to the 'apache' group?

Are there any significant security concerns about adding users to the apache group? I am a programmer and I need access to all the files/directories in httpdocs - is there anything wrong with adding ...
1
vote
1answer
487 views

ubuntu mount nfs only if user is in group

I have basic-to-medium advanced network setup at my work. We run an ubuntu 10.04 fileserver serving a few different directories (including /home) over NFS and all client machines (various ubuntu ...
0
votes
2answers
83 views

User groups in Linux

Something is wrong. I've a user U which has primary group A and secondary B. Folder /www/dev is now 775 and set to user www-data and group B But my user U does not have writing permissions to that ...
7
votes
4answers
8k views

Preventing 'Reply-All' to Exchange Distribution Groups

This is another question in a short series regarding a challenging Exchange project my co-workers have been asked to implement. (I'm helping even though I'm primarily a Unix guy because I volunteered ...
5
votes
3answers
4k views

Prevent user “click-expansion” of Exchange distribution group?

I am a Unix guy who recently picked up powershell to help my Exchange admin coworkers implement a challenging project in Exchange 2010. (The requirements we've been given are challenging if not ...
-2
votes
1answer
78 views

Windows users and groups management software

I need software to manage a large number of groups for a FTP server. Ideally this software should also allow managing the associated NTFS rights for the folders on FTP (if they still match the ...
1
vote
2answers
8k views

Active directory list of users and “member of” from trusted domain

I've been trying to create a csv file of all the members of an AD but since some groups have members from another trusted domain, these users are not showing up. I also tried outputting users in a ...
1
vote
1answer
52 views

groups and owners with ftp

When a user "U" who is part of group "G" uploads a new file to the server with ftp , the permissions are set as U:U instead of U:G . I know the user is also part of his own group called "U" but how do ...
1
vote
0answers
219 views

can SECEDIT.exe be used to only add 1 group to 1 security policy? example?

I am assuming based on my research for using SECEDIT.exe -- that a template would be added to the exisitng security .SDB file. That this template would be very tiny... only naming the security policy ...
0
votes
1answer
34 views

Change group of only cache folders, recursive

I have a document root folder and I want to cange the group of only the cache directories. How can I do this recursive? The cache directories are always below templates/html, and I want to change it ...
0
votes
2answers
305 views

how to group return string by timestamp and display how many hits per group

I am parsing my httpd access logs, to grab out which of our Google appliance's crawlers are bombarding my web servers, and when. If I type the command: grep google /path/to/access_log | awk '{print ...
0
votes
1answer
1k views

why domain gpo wallpaper is getting applied to the desktops only after logoff or restart

I've appllied wallpaper to Win XP and Win7 PCs through group policy and it is getting applied to all these PCs. My problem is when I change wallpaper jpeg file in server, wallpaper is not ...
0
votes
1answer
2k views

Battling with Office 2007/2010 GPOs

I just set a GPO for the Shared Themes Path for the entire Office 2007 and 2010 suite using the Group Policy: User Policy --> Administrative Templates --> Microsoft Office 2007 System --> ...
0
votes
1answer
64 views

How to create special groups and give them special process

I have many admins on the network and I want to specify job for them for example I want to create group responsible for install and run yahoo messenger means I don't want to give them full admin ...
2
votes
1answer
2k views

Creating user groups and assigning users in Windows Server 2008

I'm setting up an FTP server on a Windows Server 2008 r2 system. Rather than deal with setting filesystem permissions for users manually, I would like to simply grant a single group read/write access ...
1
vote
2answers
8k views

Jenkins/Hudson - LDAP group *lookup* does not work

I'm trying to get Jenkins to authenticate users via our active directory groups. If I insert users they are correctly looked up. If I insert group names, they are not found. Edit: Through trial ...
1
vote
3answers
3k views

Managing Active Directory Group Membership with a Non-Administrator Account In Server 2008

I am running Server 2008 R2 in an Active Directory Domain Environment. I have created a group in Active Directory and I have delegated management authority to that group to a user. I want this user ...
3
votes
3answers
4k views

How do you discover what permissions an AD group has, if you have no documentation?

You just got hired at company A and the old administrator is no longer there. Requests start coming through for adding users to the internet restrict group. When you look at the groups none of the ...
3
votes
3answers
2k views

Active Directory Bulk Group Edit

Is there a way to update the "Managed By" field for every group in Active Directory? I would also need to check "Manager can update membership list" also.
0
votes
1answer
176 views

Linux group / user permission issue

Redhat 5.5, logged in as root I created a group dev-core groupadd dev-core Then I create a new user tony useradd tony I changed tony's password and added tony to group dev-core usermod -a -G ...
4
votes
1answer
2k views

Linux computer (Debian) in a Windows Active Directory Domain, Administrator of AD should have root permission after login

I managed to join my Debian machine (Squeeze) to an existing Active Directory (MS Windows 2008 R2 Server). Everything works fine, I can login using accounts from the Active Directory (NTP, Kerberos, ...
0
votes
1answer
121 views

Universal Distribution groups in WIN NT

we have a domain with "Mixed domain functional level". there are 3 DCs in this domain with (Win2003, Win2000 & WinNT) OSs. here we can create a "Universal Distribution group" on the DC with ...
11
votes
4answers
14k views

How to authenticate users in nested groups in Apache LDAP?

I've working LDAP authentication with the following setup AuthName "whatever" AuthType Basic AuthBasicProvider ldap AuthLDAPUrl ...
0
votes
1answer
61 views

Reuse old transform with new Java update?

We just started deploying Java through GPO. Currently have Java 6 update 23 being pushed out and I would like to move to update 25. Do I need to recreate the transform for each update or can I just ...
0
votes
2answers
4k views

How do I enable group enumeration on a Linux server that is using LDAP to connect to an AD server?

I've got a set of servers that I need to authenticate against a central Active Directory forest. The AD admins have kindly installed the UNIX AD extensions and the NIS ones as well, so I've got a lot ...
0
votes
2answers
124 views

Is it possible to configure a service to run as a group and add users to that group on Windows XP?

Is it possible to configure a service to run as a group and add users to that group on Windows XP? I need the service to have the permissions of the users in that group so that they can logonn, ...
1
vote
1answer
175 views

Planning sysadmin group permissions in Windows network

I need to set up a plan for organizing permissions for sysadmins in a 200-server Windows 2003/2008 network. The servers exist in 5 separate forests that are connected via 2-way trusts. At the moment, ...
0
votes
3answers
4k views

Unable to get the SSH access for a new user

I created a new user on ubuntu 10 username: codeuser There is an existing user called "admin". Now, my problem is that I cannot directly connect to the server using the codeuser credentials. But, I ...
1
vote
1answer
132 views

Would the AdminSDHolder security propegation affect group membership?

I'm having an issue where every time I add users to the Enterprise Admin group in AD they are shortly thereafter removed. I have Domain Admin rights. I'm wondering if this has anything to do with ...
0
votes
1answer
59 views

php server web user setup

I'm needing to setup a basic web user account on my ubuntu 10.10 server to host web pages. This account should be limited to access only the necessary directories on the machine. I setup the following ...
0
votes
1answer
205 views

`groups` ignores /etc/groups?

What could be going on here? dylan/var$ ls -ld www drwxrwxr-x 2 root webdev 4096 2011-03-19 05:13 www dylan/var$ grep webdev /etc/group webdev:x:1001:dylan dylan/var$ touch www/test touch: cannot ...
1
vote
1answer
2k views

usermod -g doesn't apply permissions right away?

I've noticed that when I add myself to a new group with usermod newgroup -g wayne I will have the group listed when I say groups, but if I were to do something such as sudo mkidr ...
0
votes
3answers
99 views

Fixing Broken Groups

I just got onto a new project with the student government at my University and we're trying to get our webserver into a more workable state. The current problem is that all of us for some reason have ...
2
votes
2answers
718 views

Adding the apache user to my default group doesn't give apache group access

The whole Linux user:group topic just gives me headaches again. Situation I have my document roots (httpdocs) and everything inside chown-ed to a certain user and a certain group, let's say ...
0
votes
1answer
468 views

ISA Server 2006 SP1 :: Any user group (even empty ones) applied to a rule - implements the rule for everyone

I have a rule to deny all access from internal and local host to external. I do no apply a user group and the rule is added to the configuration but obvious does not come into play. As soon as I add ...
4
votes
4answers
572 views

List users in all specified unix groups

Is there an easy way to get a list of users who are in all specified groups? For example, if I have the following users: fred - rainbow, dell jane - hp zippy - rainbow, hp, dell george - hp, dell ...
1
vote
2answers
2k views

How Can I Restrict FTP to a Particular Local Group?

I am running the FTP daemon VSFTPD. I'd like to control FTP access by adding users to a group such that only members of the defined group can access the FTP services. I am thinking I can do this by ...
2
votes
3answers
97 views

Splitting Servers into Two Groups

At our organization, we're looking at implementing some sort of informal internal policy for server maintenance. What we're looking at doing is completing maintenance on our entire server pool every ...
1
vote
1answer
787 views

Unable to change the Terminal Services Configuration as DOMAIN Admin from local console?

how to make the necessary changes in tscc - [Terminal Services Configuration\Connections] RDP-Tcp Properties | Client Settings tab Disable the following: [v] Clipboard mapping (selected and disabled ...
0
votes
1answer
668 views

Centos Apache and Permissions (Sudoers maybe)

OS: CentOS 5.5 I have a 2 users which are part of a group. I would like to allow that group to be able stop and start Apache, but not grant access as root. I have been looking at the Sudoers ...
0
votes
1answer
1k views

Cleaning Up Unused Users and Groups (Ubuntu 10.10 Server)

I'm very much a beginner when it comes to Ubuntu and I've been learning the ropes by diving in and writing a (backend-language independent) web app framework that relies on apache, some clever ...
1
vote
1answer
33 views

Discrepancies in `groups` output

why is it that when I execute groups the output doesn't contain the adm group, while the output of groups $USER has it? The user is supposed to be in that group.
4
votes
3answers
18k views

Using group policy preferences to push a file to C:\Windows on a restricted user

We have a really old Video learning program that we need to run from the network for our students. However it uses Director Player 6.0 and the students get the error: "Unable to copy the driver file ...
1
vote
1answer
642 views

Exchange 2010 Distribution Group - Email Self

In exchange 2010 we have multiple distribution groups. If i am a member of group TEST, and i send an email to this group, i will receive the email. Is there a way of sending to everyone in the group ...