Questions tagged [groups]

The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

Filter by
Sorted by
Tagged with
19 votes
3 answers
58k views

Is there a way to refresh computer group membership without rebooting?

I am using Windows Server 2008 R2 and have a windows service running under "network service" account in computer ComputerA. This windows service want to access a share folde (on another computer ...
pkuneal's user avatar
  • 191
21 votes
4 answers
43k views

How to authenticate users in nested groups in Apache LDAP?

I've working LDAP authentication with the following setup AuthName "whatever" AuthType Basic AuthBasicProvider ldap AuthLDAPUrl "ldap://server/OU=SBSUsers,OU=Users,...
mark's user avatar
  • 1,526
17 votes
4 answers
9k views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
Swartz's user avatar
  • 304
11 votes
2 answers
13k views

SQL Server 2005 / 2008 - multiple files / filegroups - how many? Why?

I'm a developer at heart - but every now and then, a customer doesn't have a decent DBA to deal with these issues, so I'm called in to decide.... What are your strategies / best practices when it ...
marc_s's user avatar
  • 1,172
5 votes
2 answers
8k views

dn-based linux groups from ldap

Is there any way to use one of LDAP's DN-based groups for linux groups instead of using the uid-based posixGroup objectclass? More broadly, is there any way I can avoid having one set of groups for ...
Brad Mace's user avatar
  • 1,024
7 votes
3 answers
27k views

How can I proxy multiple LDAP servers, and still have grouping of users on the proxy?

I have 2 problems that I'm hoping to find a common solution to. First, I need to find a way to have multiple LDAP servers (Windows AD's across multiple domains) feed into a single source for ...
user avatar
2 votes
1 answer
3k views

Windows Server 2008 File Sharing for users in Administrators group

Ok here is probably dumbest question but I really dont understand how sharing works. I shared a folder with name "Data" and I gave permission to "Administrators" group to everything in Network ...
Akash Kava's user avatar
2 votes
1 answer
903 views

group policy in Windows Server 2008

One of the employee in the Enterprise changed the users setting in group policy which effects the login permissions for Administrators users. Each time I tried to log in locally this message shown: ...
Ahmad Al-Ghamdy's user avatar
21 votes
4 answers
226k views

Domain Admins vs. Administrators in Windows AD DC [closed]

Having read in the Microsoft Docs article Default groups the description of these two groups: Domain Admins Members of this group have full control of the domain. By default, this group is ...
Gennady Vanin Геннадий Ванин's user avatar
18 votes
3 answers
46k views

What User Should NGinx and PHP be running as?

Permissions are something that have confused for me a while with Linux. So at the minute both my NGinx and PHP-FPM instances are running with the user and group : www-data Is this standard? I run ...
The Pixel Developer's user avatar
15 votes
5 answers
243k views

List All Groups and Their Members with PowerShell on Win2008r2

I am new to powershell, but I've been reading manuals and practiced a little bit. My objective is to List all users in all Security Groups under specified path. I have found the way to do it: get-...
Alec T's user avatar
  • 463
13 votes
2 answers
7k views

Puppet: how to create and manage unix users and groups

This last week I spent all effort into learning Puppet. Now I suffer from a mental buffer overflow and little confidence of ever being able to tame this beast. I came across many annotated examples ...
drumfire's user avatar
  • 1,709
8 votes
6 answers
22k views

AD group membership changes not reflected in winbind information

I have inherited several RHEL5 servers that were set up to authenticate users against their AD accounts via winbind. Everything works fine until I update group membership in AD. For some users, the ...
user avatar
7 votes
1 answer
26k views

Granting Domain Admin privileges to a cross-forest user account?

Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest? The obvious approach of adding Domain Admins@...
HopelessN00b's user avatar
7 votes
2 answers
4k views

Windows 7 "Cryptographic Operators"

This TechNet blog states that: Cryptographic Operators: FIPS 140-2 defines a “Crypto Officer” role, which is represented by the Cryptographic Operators group in Windows, first introduced in Windows ...
Sadeq Dousti's user avatar
7 votes
1 answer
130 views

In what ways can access token update be triggered for administrator accounts on workstations?

This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the ...
alx9r's user avatar
  • 1,653
6 votes
1 answer
4k views

How can I generate a list of the security groups a set of users belong to?

I have been asked to generate a list of the security groups (so specifically not the distribution groups) that a list of approximately 50 users belong to. I have a list of users, users.txt that ...
NaOH's user avatar
  • 411
6 votes
2 answers
3k views

AGDLP: global vs local groups for job/role groups

I believe I do understand the what I've read of AGDLP. However, what I've read doesn't explain the advantage of using global groups for business role / job function or the disadvantage of using local ...
burgergold's user avatar
6 votes
5 answers
7k views

Groups and Permissions: Nested UNIX groups

We are getting more and more outside developers (from different clients) and are beginning to need a better strategy than adhoc adding to our server and adding to them ourcompany group (which owns ...
user avatar
6 votes
1 answer
16k views

How do I add a domain user to a group on a non-domain server?

If we are running a server that is not attached to the domain, how would I go about adding a domain user to a local group on that server?
Michael Todd's user avatar
5 votes
1 answer
2k views

How can a file moved to a directory with GID-bit set inherit the group ownership

Problem I know that a file that is created in a directory with the GID-bit set it will inherit the diretory's group ownership. This however doesn't work for files that are moved to that directory as ...
Jdz's user avatar
  • 53
4 votes
4 answers
1k views

List users in all specified unix groups

Is there an easy way to get a list of users who are in all specified groups? For example, if I have the following users: fred - rainbow, dell jane - hp zippy - rainbow, hp, dell george - hp, dell ...
Rich's user avatar
  • 1,353
3 votes
2 answers
17k views

AD Group and Distribution Group with O365

I have a O365 with Exchange, and a local AD. I want to manage distribution groups and distribution groups members via PS scripts (that will run by scheduled task), that look users' AD attributes (don'...
Nico's user avatar
  • 302
3 votes
1 answer
23k views

"Failed at step EXEC spawning" even with proper group permissions

I'm setting up permissions for a basic web server, but having some difficulty with starting the server with systemd. In my job description, I set the user and group to "foo", as follows: [Service] ...
Nathan's user avatar
  • 161
3 votes
3 answers
26k views

Jenkins/Hudson - LDAP group *lookup* does not work

I'm trying to get Jenkins to authenticate users via our active directory groups. If I insert users they are correctly looked up. If I insert group names, they are not found. Edit: Through trial &...
Martin's user avatar
  • 599
3 votes
1 answer
2k views

Write permission to a specific file without changing ownership

As I understand it, to give a write permission to a user I can either change the owner of the file to that user and give it "user write permission" (which I don't want to do), or keep the same owner ...
black's user avatar
  • 133
3 votes
1 answer
5k views

Creating user groups and assigning users in Windows Server 2008

I'm setting up an FTP server on a Windows Server 2008 r2 system. Rather than deal with setting filesystem permissions for users manually, I would like to simply grant a single group read/write access ...
user avatar
2 votes
1 answer
3k views

How many users can be in a AD LDS group?

Microsoft published the recommended maximum limits for users in an Active Directory group. It basically says : Starting with Windows Server 2003, the ability to replicate discrete changes to linked ...
ixe013's user avatar
  • 1,066
2 votes
1 answer
3k views

(Powershell) Method to return a list of groups where a specific user has 'write member' security

We use a piece of web-based software that users can log on to in order to manage access to shares controlled with AD groups. The list of groups a user can manage are the groups on which they have '...
nlseven's user avatar
  • 21
2 votes
1 answer
2k views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
Martin's user avatar
  • 61
2 votes
4 answers
3k views

Why cant a group member modify a file in a group he is part of?

-edit- i figured it out. I needed to use adduser username group instead. I added a user with the command useradd -G myapp_user newusername then i changed the group on the public folder that i want ...
user avatar
2 votes
1 answer
1k views

How to list EC2 security group *rules* from within instance?

I have SSH root access to an EC2 instance but no access to the AWS Console / AWS KEY & SECRET. My incoming traffic to this host on all TCP ports except 22 TCP seems to be blocked - I cannot ...
Greg Dubicki's user avatar
  • 1,331
2 votes
2 answers
4k views

How Can I Restrict FTP to a Particular Local Group?

I am running the FTP daemon VSFTPD. I'd like to control FTP access by adding users to a group such that only members of the defined group can access the FTP services. I am thinking I can do this by ...
Aaron Copley's user avatar
  • 12.7k
1 vote
1 answer
845 views

Exchange 2010 Distribution Group - Email Self

In exchange 2010 we have multiple distribution groups. If i am a member of group TEST, and i send an email to this group, i will receive the email. Is there a way of sending to everyone in the group ...
medoix's user avatar
  • 222
1 vote
1 answer
510 views

How to enable group-writable suexec-capable CGI scripts?

I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
asciiphil's user avatar
  • 3,146
1 vote
2 answers
10k views

Exchange 2010 distribution groups don't accept internal mails through smtp

In Exchange 2010 I have distribution group called [email protected]. It's allowed to be used only for internal mail. It works fine when sending emails thru OWA or directly thru Outlook RPC. However it ...
MadBoy's user avatar
  • 3,745
0 votes
1 answer
2k views

Battling with Office 2007/2010 GPOs

I just set a GPO for the Shared Themes Path for the entire Office 2007 and 2010 suite using the Group Policy: User Policy --> Administrative Templates --> Microsoft Office 2007 System --> ...
Kenny Bones's user avatar