The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

1
vote
3answers
332 views

Best and Proper Permissions Settings for Directory

I am interested in knowing the proper, yet security-conscious settings for a directory. Here's my scenario: I have a username for FTP access to my server called "user". For the purpose of the ...
0
votes
3answers
498 views

On Windows Server 2003, permissions are not propagating to a group that is a member of a group

Windows Server 2003 on i386. FTP server is running as the SYSTEM user/group. Some files we want served (read and write) are owned by the group 'ftp.' ftp has full read/write/whatever permissions on ...
1
vote
2answers
86 views

Script adding domain groups to local groups fails 50% of the time

We have a script that automatically adds a freshly imaged computer to the domain. The functionality of joining the domain is always successful. However, when the script attempts to add the domain ...
0
votes
2answers
104 views

CHMOD to make directory writable by group not working

I'm trying to make the node_modules directory writable by www-group, but chmod isn't working. vagrant (user) is part of the www-data group as seen with the groups command. Why can't I permit ...
0
votes
2answers
638 views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
0
votes
2answers
335 views

Deployment and Ownership issues

As an extreme newbie, I am having difficulty managing ownership and permissions on my first box. What I can't figure out is how to deploy using one user, we will call him deploy and operate my php ...
2
votes
1answer
41 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
1
vote
1answer
322 views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
1
vote
1answer
272 views

I want to find a way to visualise security groups and their members

I hope someone can help... I want to find a way to visualise security groups and their members, and be able to show that to users in a simple format for discussion. I have a simple matrix in Excel ...
1
vote
1answer
481 views

ubuntu mount nfs only if user is in group

I have basic-to-medium advanced network setup at my work. We run an ubuntu 10.04 fileserver serving a few different directories (including /home) over NFS and all client machines (various ubuntu ...
1
vote
1answer
172 views

Planning sysadmin group permissions in Windows network

I need to set up a plan for organizing permissions for sysadmins in a 200-server Windows 2003/2008 network. The servers exist in 5 separate forests that are connected via 2-way trusts. At the moment, ...
0
votes
1answer
73 views

Correctly assigning permissions & groups

So my nginx is using www-data:www-data, and I want to deploy files to my server with Beanstalk through sftp properly. So I've created an user called beanstalk and added him to www-data group. $ id ...
0
votes
1answer
23 views

Give su permission to LDAP group

I created an LDAP environment and i'm trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: ...
0
votes
1answer
19 views

How are the security groups injected in an image in OpenStack?

I have been using OpenStack for some time and was just wondering how the security groups are injected in an image file. I browsed on the internet but I could not find a solution.
0
votes
1answer
103 views

Reload VIAccounts list with PowerCli to select a newly created group

I'm using a script that creates groups in Active Directory, and links them to my vCenter server using New-VIPermission. The trick is that it doesn't find the groups created unless I restart the script ...
0
votes
1answer
593 views

Folder rights doesn't work on group, but does on user

I've got this share where I want to restrict access to two folders so that only members of a group can get access to them. I've done this countless of times, but this time there's something odd going ...
0
votes
1answer
64 views

How to create special groups and give them special process

I have many admins on the network and I want to specify job for them for example I want to create group responsible for install and run yahoo messenger means I don't want to give them full admin ...
0
votes
1answer
234 views

List Groups Common to a set of Users

I need a way to find the set of groups common to a list of users. I have a list of about 4 users I want to compare and find which groups they are all members of. Is there a quick way to do this in ...
0
votes
1answer
391 views

Putting indexes in separate filegroup kills our queries

Can anyone shed some light on this? On our dev boxes, our database resides entirely in the PRIMARY filegroup, and everything works fine. On one of our production servers, recently upgraded from 2005 ...
2
votes
0answers
549 views

Group membership erratically lost after user logs in - Ubuntu, winbind, AD

I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
1
vote
0answers
355 views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
1
vote
0answers
52 views

Is there a way for a user to temporarily remove its own group membership within a script?

I'm writing a script which will be used to "detect" whether a generic, no-frills, user account has access to certain files. Basically a user which only has membership in the "staff" group or ...
1
vote
0answers
280 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, ...
1
vote
0answers
138 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
1
vote
0answers
58 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
1
vote
0answers
247 views

Allowing Backup Operator group to use NetBackup

I have a Windows Server 2008 installed with Microsoft SQL Server 2008 and NetBackup. I have a local ID called bckopr1 and is a member of the Backup Operator group. Subsequently, this ID also able to ...
1
vote
0answers
116 views

Hosted Exchange and distribution group segregation

To keep my question as simple as possible, this is what I would like to address Environment Exchange 2010Sp2 Give users the ability to manage distribution groups that they own through Outlook and ...
1
vote
0answers
424 views

Force AD Security Group Changes to Appear in Exchange

I made changed to security groups within AD, and when I go to the GAL in Outlook I noticed that the changes were not reflected, even after forcing an update by clicking Send Receive | Send Receive ...
1
vote
0answers
272 views

How to grant NetworkService access to a share by placing computers in security groups

I'm trying to configure a file share that will be accessed by ASP.Net applications on a set of computers, all running under the NETWORKSERVICE account on those computers. I can get it to work fine ...
1
vote
0answers
213 views

can SECEDIT.exe be used to only add 1 group to 1 security policy? example?

I am assuming based on my research for using SECEDIT.exe -- that a template would be added to the exisitng security .SDB file. That this template would be very tiny... only naming the security policy ...
1
vote
0answers
542 views

Manage Windows File Share Permissions with Local Group

Here is my situation: I am a Local Administrator on a plain Windows XP machine. Due to organizational issues, people want to run a Windows file share on this machine. I thought it might be a nifty ...
0
votes
0answers
13 views

give serverprincipalname read write permissions to security group members

What are the settings for the group to make the following change? I need to create a group that can be used to grant: serviceprincipalname SELF Read serviceprincipalname SELF Write to its members. ...
0
votes
0answers
41 views

Port not opening even after adding security group rules on Amazon EC2 instance

I have an Amazon EC2 Linux instance. I recently installed SmartFoxServer in my instance. For that I needed to open 9933 port. So I just created inbound rules on Amazon EC2 Manager console website. My ...
0
votes
0answers
41 views

LDAP uniqueMember attribute not recognised in linux

I have an LDAP group with a groupOfUniqueNames objectclass and and an auxiliary posixGroup objectclass. When I use the memberUid attribute the values (members of group) are recognised in linux. But ...
0
votes
0answers
106 views

Why does samba include seemingly bogus “supplementary groups”?

Our environment is subject to the "16 group limit" with Samba. We are using Samba version 3.6.12. Basically if a user is in more than 16 groups, the whole system gets hosed and things go haywire. ...
0
votes
0answers
1k views

you must have read permissions to view the properties of this object, administrators group

I think I'm having some difficulty understanding NTFS permissions. My understanding is that when possible you want to avoid assigning a specific user account to NTFS and instead use a group. So I set ...
0
votes
0answers
32 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
0
votes
0answers
3k views

Sync Active Directory Users in FreeNAS

This is for FreeNas-9.1.1, I am using active directory which appears to be connecting ok, since the following list users/groups from that server with no problems wbinfo -u wbinfo -g I can also join ...
-1
votes
0answers
35 views

Nesting Active Directory Groups not listing correctly in effective permissions

I'll try to build a picture of the environment I am running into: 1) old domain which is still active since a lot of workstations and accounts for this domain are still in use (and migration is not ...