Questions tagged [groups]
The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.
37
questions
19
votes
3
answers
58k
views
Is there a way to refresh computer group membership without rebooting?
I am using Windows Server 2008 R2 and have a windows service running under "network service" account in computer ComputerA. This windows service want to access a share folde (on another computer ...
21
votes
4
answers
43k
views
How to authenticate users in nested groups in Apache LDAP?
I've working LDAP authentication with the following setup
AuthName "whatever"
AuthType Basic
AuthBasicProvider ldap
AuthLDAPUrl "ldap://server/OU=SBSUsers,OU=Users,...
17
votes
4
answers
9k
views
Managing access to multiple linux system
A searched for answers but have found nothing on here...
Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
11
votes
2
answers
13k
views
SQL Server 2005 / 2008 - multiple files / filegroups - how many? Why?
I'm a developer at heart - but every now and then, a customer doesn't have a decent DBA to deal with these issues, so I'm called in to decide....
What are your strategies / best practices when it ...
5
votes
2
answers
8k
views
dn-based linux groups from ldap
Is there any way to use one of LDAP's DN-based groups for linux groups instead of using the uid-based posixGroup objectclass?
More broadly, is there any way I can avoid having one set of groups for ...
7
votes
3
answers
27k
views
How can I proxy multiple LDAP servers, and still have grouping of users on the proxy?
I have 2 problems that I'm hoping to find a common solution to.
First, I need to find a way to have multiple LDAP servers (Windows AD's across multiple domains) feed into a single source for ...
2
votes
1
answer
903
views
group policy in Windows Server 2008
One of the employee in the Enterprise changed the users setting in group policy which effects the login permissions for Administrators users.
Each time I tried to log in locally this message shown:
...
2
votes
1
answer
3k
views
Windows Server 2008 File Sharing for users in Administrators group
Ok here is probably dumbest question but I really dont understand how sharing works.
I shared a folder with name "Data" and I gave permission to "Administrators" group to everything in Network ...
21
votes
4
answers
226k
views
Domain Admins vs. Administrators in Windows AD DC [closed]
Having read in the Microsoft Docs article Default groups the description of these two groups:
Domain Admins
Members of this group have full control of the domain. By default, this
group is ...
18
votes
3
answers
46k
views
What User Should NGinx and PHP be running as?
Permissions are something that have confused for me a while with Linux. So at the minute both my NGinx and PHP-FPM instances are running with the user and group :
www-data
Is this standard? I run ...
15
votes
5
answers
243k
views
List All Groups and Their Members with PowerShell on Win2008r2
I am new to powershell, but I've been reading manuals and practiced a little bit.
My objective is to List all users in all Security Groups under specified path.
I have found the way to do it:
get-...
13
votes
2
answers
7k
views
Puppet: how to create and manage unix users and groups
This last week I spent all effort into learning Puppet. Now I suffer from a mental buffer overflow and little confidence of ever being able to tame this beast. I came across many annotated examples ...
8
votes
6
answers
22k
views
AD group membership changes not reflected in winbind information
I have inherited several RHEL5 servers that were set up to authenticate users against their AD accounts via winbind. Everything works fine until I update group membership in AD. For some users, the ...
7
votes
2
answers
4k
views
Windows 7 "Cryptographic Operators"
This TechNet blog states that:
Cryptographic Operators: FIPS 140-2 defines a “Crypto Officer” role, which is represented by the Cryptographic Operators group in Windows, first introduced in Windows ...
7
votes
1
answer
130
views
In what ways can access token update be triggered for administrator accounts on workstations?
This scenario emerged when changing the domain group membership that bestows membership in BUILTIN\Administrators. In particular, the group membership for the administrator did not update on the ...
7
votes
1
answer
26k
views
Granting Domain Admin privileges to a cross-forest user account?
Does anyone know of a way to [effectively] have a user or group in one forest acquire the privileges of the Domain Admin group in another forest?
The obvious approach of adding Domain Admins@...
6
votes
1
answer
4k
views
How can I generate a list of the security groups a set of users belong to?
I have been asked to generate a list of the security groups (so specifically not the distribution groups) that a list of approximately 50 users belong to.
I have a list of users, users.txt that ...
6
votes
2
answers
3k
views
AGDLP: global vs local groups for job/role groups
I believe I do understand the what I've read of AGDLP.
However, what I've read doesn't explain the advantage of using global groups for business role / job function or the disadvantage of using local ...
6
votes
5
answers
7k
views
Groups and Permissions: Nested UNIX groups
We are getting more and more outside developers (from different clients) and are beginning to need a better strategy than adhoc adding to our server and adding to them ourcompany group (which owns ...
6
votes
1
answer
16k
views
How do I add a domain user to a group on a non-domain server?
If we are running a server that is not attached to the domain, how would I go about adding a domain user to a local group on that server?
5
votes
1
answer
2k
views
How can a file moved to a directory with GID-bit set inherit the group ownership
Problem
I know that a file that is created in a directory with the GID-bit set it will inherit the diretory's group ownership.
This however doesn't work for files that are moved to that directory as ...
4
votes
4
answers
1k
views
List users in all specified unix groups
Is there an easy way to get a list of users who are in all specified groups?
For example, if I have the following users:
fred - rainbow, dell
jane - hp
zippy - rainbow, hp, dell
george - hp, dell
...
3
votes
2
answers
17k
views
AD Group and Distribution Group with O365
I have a O365 with Exchange, and a local AD.
I want to manage distribution groups and distribution groups members via PS scripts (that will run by scheduled task), that look users' AD attributes (don'...
3
votes
1
answer
2k
views
Write permission to a specific file without changing ownership
As I understand it, to give a write permission to a user I can either change the owner of the file to that user and give it "user write permission" (which I don't want to do), or keep the same owner ...
3
votes
3
answers
26k
views
Jenkins/Hudson - LDAP group *lookup* does not work
I'm trying to get Jenkins to authenticate users via our active directory groups.
If I insert users they are correctly looked up.
If I insert group names, they are not found.
Edit: Through trial &...
3
votes
1
answer
5k
views
Creating user groups and assigning users in Windows Server 2008
I'm setting up an FTP server on a Windows Server 2008 r2 system. Rather than deal with setting filesystem permissions for users manually, I would like to simply grant a single group read/write access ...
3
votes
1
answer
23k
views
"Failed at step EXEC spawning" even with proper group permissions
I'm setting up permissions for a basic web server, but having some difficulty with starting the server with systemd.
In my job description, I set the user and group to "foo", as follows:
[Service]
...
2
votes
4
answers
3k
views
Why cant a group member modify a file in a group he is part of?
-edit- i figured it out. I needed to use adduser username group instead.
I added a user with the command
useradd -G myapp_user newusername
then i changed the group on the public folder that i want ...
2
votes
1
answer
1k
views
How to list EC2 security group *rules* from within instance?
I have SSH root access to an EC2 instance but no access to the AWS Console / AWS KEY & SECRET.
My incoming traffic to this host on all TCP ports except 22 TCP seems to be blocked - I cannot ...
2
votes
1
answer
2k
views
Apply group policy to specific users (in an OU) on specific computers (not in an OU)
This has been bugging me for a while. Here's the setup:
We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
2
votes
2
answers
4k
views
How Can I Restrict FTP to a Particular Local Group?
I am running the FTP daemon VSFTPD. I'd like to control FTP access by adding users to a group such that only members of the defined group can access the FTP services. I am thinking I can do this by ...
2
votes
1
answer
3k
views
(Powershell) Method to return a list of groups where a specific user has 'write member' security
We use a piece of web-based software that users can log on to in order to manage access to shares controlled with AD groups. The list of groups a user can manage are the groups on which they have '...
2
votes
1
answer
3k
views
How many users can be in a AD LDS group?
Microsoft published the recommended maximum limits for users in an Active Directory group. It basically says :
Starting with Windows Server 2003, the ability to replicate discrete changes to linked ...
1
vote
1
answer
845
views
Exchange 2010 Distribution Group - Email Self
In exchange 2010 we have multiple distribution groups.
If i am a member of group TEST, and i send an email to this group, i will receive the email.
Is there a way of sending to everyone in the group ...
1
vote
1
answer
510
views
How to enable group-writable suexec-capable CGI scripts?
I have been asked to set up a shared webspace on our department webserver that may be accessed by multiple people and which might be running CGI or PHP scripts. The people maintaining the webspace ...
1
vote
2
answers
10k
views
Exchange 2010 distribution groups don't accept internal mails through smtp
In Exchange 2010 I have distribution group called [email protected]. It's allowed to be used only for internal mail. It works fine when sending emails thru OWA or directly thru Outlook RPC. However it ...
0
votes
1
answer
2k
views
Battling with Office 2007/2010 GPOs
I just set a GPO for the Shared Themes Path for the entire Office 2007 and 2010 suite using the Group Policy: User Policy --> Administrative Templates --> Microsoft Office 2007 System --> ...