The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

2
votes
2answers
38 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
0answers
7 views

Distribution Group is Not Working

I have 3 users in a domain. User1 is a member of Accounts Group, User2 is a member of HR Group and User3 is a member of IT Group. I have created a distribution group (named: All Staff) in Exchange ...
0
votes
1answer
19 views

Nested groups in active directory and permissions?

I created the image so you could understand what I'm asking: These are simple groups created in Active directory. Which permission will be apply on ALI. Full Control or Read Only
0
votes
1answer
3k views

Sync Active Directory Users in FreeNAS

This is for FreeNas-9.1.1, I am using active directory which appears to be connecting ok, since the following list users/groups from that server with no problems wbinfo -u wbinfo -g I can also join ...
0
votes
1answer
120 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
3
votes
5answers
8k views

AD group membership changes not reflected in winbind information

I have inherited several RHEL5 servers that were set up to authenticate users against their AD accounts via winbind. Everything works fine until I update group membership in AD. For some users, the ...
1
vote
1answer
44 views

Filter getent passwd output with SSSD

I am using ldap_access_filter in sssd.conf in order to limit access to users that are in a specific ldap group. However, when I do a "getent passwd" I still get a full list of the ldap users. How can ...
17
votes
4answers
16k views

Is a reboot required to refresh permissions after adding a user to a new group?

On ubuntu server, I've noticed more than once now that after adding a user to a group that user doesn't have group permissions until I reboot the system. For example: User 'hudson' needs permission ...
3
votes
2answers
2k views

How can a set a Security Group's email address using PowerShell?

I need to create many groups with email addresses. I would prefer to use Security Groups to reduce the number of groups we have to maintain, otherwise we'd have an identical Distribution Group for ...
0
votes
0answers
6 views

Create instance on specific ganeti group

There is a ganeti cluster with 2 ganeti groups on it. Both are working - one is purposed for one type of services, second for other. Is there any way to create instance on specific group using ...
0
votes
0answers
13 views

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)? I am working on a tool, which should monitor policies applied to specific set of users, ...
2
votes
1answer
229 views

Can't resize Folder properties window

I've opened the properties window of a folder to view it's security groups, but the security group names are too long to be fully readable in the security tab. There is no way to resize the window. ...
0
votes
1answer
30 views

Local logon script - check group membership and action

I need some help for a side project I'm working on. I hardly deal with any scripting so I thought you guys could help me out. The script should follow this algorithm: check if user is a member of ...
0
votes
0answers
24 views

List AD groups beginning with X on Linux

In the organization wide Active Directory we have user groups that all begin with a prefix blaha-, how do I list all groups with that prefix on a Linux machine? getent group only seems to list local ...
4
votes
1answer
7k views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
2
votes
1answer
6k views

SquidGuard and Active Directory: how to deal with multiple groups?

I'm setting up SquidGuard (1.4) to validate users against an Active Directory domain and apply ACLs based on group membership; this is an example of my squidGuard.conf: src AD_Group_A { ...
4
votes
1answer
154 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
5
votes
3answers
4k views

Prevent user “click-expansion” of Exchange distribution group?

I am a Unix guy who recently picked up powershell to help my Exchange admin coworkers implement a challenging project in Exchange 2010. (The requirements we've been given are challenging if not ...
-1
votes
2answers
79 views

Centos 6.5 /var/www/html/ User permissions

I have a dedicated server but only root can access my hosting directory. All other users get permission denied when I try access the directory with another user. I have created a new user, added the ...
1
vote
6answers
22k views

How to setup workstation “My Documents” to sync to DOMAIN on each logon/off

Me and a couple buddies started up a small business and we have a Domain + 5 workstation set up. A prof. IT guy helped me set it up a while back. Basics that I know of: 1)We have a K:\ main network ...
1
vote
2answers
532 views

Exchange 2010: Prevent Transport Rule applied to distribution group from listing all users in the list

We have Exchange 2010. Say I am trying to prohibit users from including large attachments on internal distribution groups. I have set up a transport rule that is something like the following: Apply ...
11
votes
4answers
13k views

How to authenticate users in nested groups in Apache LDAP?

I've working LDAP authentication with the following setup AuthName "whatever" AuthType Basic AuthBasicProvider ldap AuthLDAPUrl ...
2
votes
1answer
50 views

Should usergroups be enabled?

All our users are managed with a central LDAP. When my predecessor in managing the infrastructure created the ldap he decided against creating usergroups (meaning groups of the same name and GID as ...
-1
votes
1answer
148 views

What system-wide changes can a user make? [closed]

I work in an organization that uses Faronics Deep Freeze to prevent users from making changes to the computer. I had always been under the impression that a standard user (a user who is only a member ...
4
votes
5answers
19k views

How to add a domain user to the local admin group remotely?

I need to add a domain user in the local administrator group remotly and I have to the local admin password
-2
votes
1answer
25 views

group permissions in windows server 2008 r2 [closed]

Can read and write permissions be assigned to groups so that users in those groups will inherit the same properties. If yes, how to assign read permission to specific group.
2
votes
1answer
50 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
1
vote
2answers
76 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
1
vote
1answer
48 views

What is the advantage of moving Groups in Organization Units in AD environment beside organizing?

I know the advantage of using OUs (organizing and GPOs).with OUs you can organize your users and computers, assign group policy to them, and deligate control over a set of users and computers. But ...
0
votes
0answers
18 views

give serverprincipalname read write permissions to security group members

What are the settings for the group to make the following change? I need to create a group that can be used to grant: serviceprincipalname SELF Read serviceprincipalname SELF Write to its members. ...
4
votes
3answers
13k views

Creating a Dynamic Group in Active Directory with users from a OU

I would like to create a dynamic group with users from a specific OU in my Active Directory. I can do this perfectly using Exchange Dynamic Distribution List, but of course, Ex DDL's are only for ...
0
votes
1answer
45 views

AD Organization feedback requested

I'm taking over an AD domain (not large) administration but it looks like it needs some organization. For example, under the top domain "something.com" there is a folder named "User" with many ...
5
votes
2answers
39k views

List All Groups and Their Members with PowerShell on Win2008r2

I am new to powershell, but I've been reading manuals and practiced a little bit. My objective is to List all users in all Security Groups under specified path. I have found the way to do it: ...
0
votes
1answer
89 views

Port 53 in Amazon Security Group

Everything works as expected. This question is for learning purposes only. Using Amazon Security Groups in a VPC. Outbound rules are: 0.0.0.0/0 Port 80 0.0.0.0/0 Port 443 Iptables allows OUTPUT ...
0
votes
0answers
69 views

Port not opening even after adding security group rules on Amazon EC2 instance

I have an Amazon EC2 Linux instance. I recently installed SmartFoxServer in my instance. For that I needed to open 9933 port. So I just created inbound rules on Amazon EC2 Manager console website. My ...
1
vote
1answer
617 views

Exchange 2010 Distribution Group - Email Self

In exchange 2010 we have multiple distribution groups. If i am a member of group TEST, and i send an email to this group, i will receive the email. Is there a way of sending to everyone in the group ...
0
votes
1answer
49 views

How to list EC2 security group *rules* from within instance?

I have SSH root access to an EC2 instance but no access to the AWS Console / AWS KEY & SECRET. My incoming traffic to this host on all TCP ports except 22 TCP seems to be blocked - I cannot ...
1
vote
1answer
462 views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
1
vote
0answers
716 views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
1
vote
1answer
110 views

Addressing built-in groups and local policies in Windows independently of localized names

Recently I saw an application failing to do certain check/manipulation with built-in groups/local policies on localized version of Windows Server 2012 R2 (French, German). In localized versions of ...
-1
votes
1answer
37 views

Security group in ec2 linux instance need to be edited every time

I have created linux instance and installed wordpress on it. Every time I open my page after making change in code via commandline login , it shows this message - The connection has timed out ...
0
votes
2answers
152 views

CHMOD to make directory writable by group not working

I'm trying to make the node_modules directory writable by www-group, but chmod isn't working. vagrant (user) is part of the www-data group as seen with the groups command. Why can't I permit ...
6
votes
4answers
14k views

How do you force an update to a user's group membership in Windows 7?

I am writing a web application that uses .NET Windows Authentication and relies on a user's group membership to Authorize them to various areas of the website. Right now I'm on a dev machine that IS ...
0
votes
1answer
39 views

Dump users and group membership to file

I'm trying to get an oracle 6.2 system (same as redhat 6.2) to find all the users on the system, then take the username of each user discovered and query group membership of each user individually, ...
0
votes
1answer
43 views

Linux permissions for multiple groups

I have a directory (With sub directories and files) that I would like to setup so that: -Users of an 'editors' group can rw- any file and rwx any dirs. -Users of www-data can r-- files and r-x dirs. ...
2
votes
1answer
155 views

Difficulty Connecting To AWS EC2-VPC From Public Wifi

I've got an EC2 instance running on an AWS VPC (free tier), on top of which I'm running a website. I'm also using an RDS MySQL DB Instance for my database needs, and have set up security groups to ...
3
votes
1answer
157 views

Debian staff group causes problems

We have an (old and grown) infrastructure of linux machines (mostly debian). For user authentication we use LDAP where we have defined several groups with different access rights. Unluckily one of ...
0
votes
2answers
944 views

Group Policy - Software Restrictions

I've just set up a new server on a new Domain Controller. I have implemented my Group Policy too. However, I would like to implement a policy to restrict the installation of all software by users and ...
0
votes
1answer
304 views

Fix unknown sid security groups

I have the following situation: my security groups of the active directory I'm belonging to are not shown anymore in a "friendly name", but I have just the SID. When I run whoami /groups I see a list ...
1
vote
1answer
243 views

FreeBSD/FreeNAS: How to change group for multiple users?

I need to change group membership for a bunch of users. How do I list all users? change multiple users to nogroup primary group? add secondary/auxiliary groups to multiple users? Basically I need ...