The idea of groups exists across all major operating systems. Groups are objects that contain other objects, usually users. This allows for simplification of access control assignments when many people need access to the same resources.

learn more… | top users | synonyms

1
vote
3answers
334 views

Best and Proper Permissions Settings for Directory

I am interested in knowing the proper, yet security-conscious settings for a directory. Here's my scenario: I have a username for FTP access to my server called "user". For the purpose of the ...
1
vote
2answers
90 views

Script adding domain groups to local groups fails 50% of the time

We have a script that automatically adds a freshly imaged computer to the domain. The functionality of joining the domain is always successful. However, when the script attempts to add the domain ...
0
votes
2answers
336 views

Can't add built-in Remote Desktop Users group on DC to Remote Desktop Users on 2012 server

I have new 2012 servers and so far its only set to allow administrator to remote in. In Computer Management/Remote Desktop Users, the only member is administrator. When I try to add the built-in ...
0
votes
2answers
443 views

CHMOD to make directory writable by group not working

I'm trying to make the node_modules directory writable by www-group, but chmod isn't working. vagrant (user) is part of the www-data group as seen with the groups command. Why can't I permit www-...
0
votes
2answers
980 views

pam auth via winbind, howto map primary group for users?

I have unix users authenticating to an PDC (via winbind) and want to have the primary group of those users a local unix group (e.g. www-data). users have the group "domain users" with gid 10006 (as ...
0
votes
2answers
349 views

Deployment and Ownership issues

As an extreme newbie, I am having difficulty managing ownership and permissions on my first box. What I can't figure out is how to deploy using one user, we will call him deploy and operate my php ...
2
votes
1answer
95 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
1
vote
1answer
11 views

Shared group directory with individual user files

I have a mounted NFS partition in which a specific group, say nfsgroup, has rwx for the directory (call it nfsdir). If my user brian is a member of nfsgroup and creates a file in nfsdir, then I chgrp ...
1
vote
1answer
835 views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
1
vote
1answer
400 views

I want to find a way to visualise security groups and their members

I hope someone can help... I want to find a way to visualise security groups and their members, and be able to show that to users in a simple format for discussion. I have a simple matrix in Excel ...
1
vote
1answer
500 views

ubuntu mount nfs only if user is in group

I have basic-to-medium advanced network setup at my work. We run an ubuntu 10.04 fileserver serving a few different directories (including /home) over NFS and all client machines (various ubuntu 10....
1
vote
1answer
181 views

Planning sysadmin group permissions in Windows network

I need to set up a plan for organizing permissions for sysadmins in a 200-server Windows 2003/2008 network. The servers exist in 5 separate forests that are connected via 2-way trusts. At the moment, ...
0
votes
1answer
11 views

Client applied to group policy object but cant find in WSUS

My client is subscribed to my group policy, But I cant find the computer in my WSUS when I look under All Computers. When I typed the command gpresult /r on my client it shows: computer settings ----...
0
votes
1answer
19 views

Show user which Group is required for Apache Basic Auth page

Is it possible to show which 'group' is required for access to a web page protected with Apache Basic Auth? Ideally, the pop-up requesting username and password would pass the 'group' required as a ...
0
votes
1answer
53 views

Nested groups in active directory and permissions?

I created the image so you could understand what I'm asking: These are simple groups created in Active directory. Which permission will be apply on ALI. Full Control or Read Only
0
votes
1answer
235 views

Port not opening even after adding security group rules on Amazon EC2 instance

I have an Amazon EC2 Linux instance. I recently installed SmartFoxServer in my instance. For that I needed to open 9933 port. So I just created inbound rules on Amazon EC2 Manager console website. My ...
0
votes
1answer
189 views

Correctly assigning permissions & groups

So my nginx is using www-data:www-data, and I want to deploy files to my server with Beanstalk through sftp properly. So I've created an user called beanstalk and added him to www-data group. $ id ...
0
votes
1answer
41 views

Give su permission to LDAP group

I created an LDAP environment and i'm trying to set up a group in the LDAP server that has SU priviledges in all other linux machine that use this ldap server. dn: cn=superfriends,ou=group,dc=example,...
0
votes
1answer
24 views

How are the security groups injected in an image in OpenStack?

I have been using OpenStack for some time and was just wondering how the security groups are injected in an image file. I browsed on the internet but I could not find a solution.
0
votes
1answer
306 views

Reload VIAccounts list with PowerCli to select a newly created group

I'm using a script that creates groups in Active Directory, and links them to my vCenter server using New-VIPermission. The trick is that it doesn't find the groups created unless I restart the script ...
0
votes
1answer
4k views

Sync Active Directory Users in FreeNAS

This is for FreeNas-9.1.1, I am using active directory which appears to be connecting ok, since the following list users/groups from that server with no problems wbinfo -u wbinfo -g I can also join ...
0
votes
1answer
64 views

How to create special groups and give them special process

I have many admins on the network and I want to specify job for them for example I want to create group responsible for install and run yahoo messenger means I don't want to give them full admin ...
0
votes
1answer
299 views

List Groups Common to a set of Users

I need a way to find the set of groups common to a list of users. I have a list of about 4 users I want to compare and find which groups they are all members of. Is there a quick way to do this in ...
0
votes
1answer
487 views

Putting indexes in separate filegroup kills our queries

Can anyone shed some light on this? On our dev boxes, our database resides entirely in the PRIMARY filegroup, and everything works fine. On one of our production servers, recently upgraded from 2005 ...
-1
votes
1answer
30 views

Samba PDC - Create groups

I'm researching on Samba and have created a PDC using it. I have created user and computer accounts and things are working. I'm having problems, however, in finding how to create groups and add users ...
-3
votes
1answer
45 views

How many members can be added to a group in AD?

How many members can be added to a Security group in AD ? Nesting or members .The total count that a group can hold the AD users.
2
votes
0answers
36 views

Active directory “negative” group membership - group of groups minus some users

I feel like this must be a faq but I've not been able to figure out the right terminology to find the answer. I've got a large active directory group-of-groups that contains 101% of the users I ...
2
votes
0answers
809 views

Group membership erratically lost after user logs in - Ubuntu, winbind, AD

I have a really strange issue where the wbinfo -g command properly indicates the AD domain group I am interested in and shows a particular user in that group - this is always true, so on the linux ...
1
vote
0answers
11 views

samba issue when files or directories created

I have a samba server setup on debian 7 / samba 3.6.6, the problem is as follows; If one creates a file or a directory in a share from a linux client box, the file or directory has the proper ...
1
vote
0answers
2k views

pfSense Ldap Group Authentication

I have been battling with this for 3 days now and it's driving me a little crazy. I can authenticate via user using Ldap using the following search filter: sAMAccountName=%s I cannot seem to get ...
1
vote
0answers
111 views

Is there a way for a user to temporarily remove its own group membership within a script?

I'm writing a script which will be used to "detect" whether a generic, no-frills, user account has access to certain files. Basically a user which only has membership in the "staff" group or ...
1
vote
0answers
547 views

User's membership in active directory group not showing through powerbroker

We're using Powerbroker open (Version 7.1) to authenticate Active Directory users into our Oracle linux (V6.4) (servers. I have a user "Joe Blow", who was added to the Active Directory group, "...
1
vote
0answers
179 views

OpenLDAP tree with groups?

I think this might be a simple question with a complicated explanation. I was hoping someone could help me with how to setup my LDAP tree. I want to have groups and users. A user may belong to one ...
1
vote
0answers
63 views

Getting apache to use ldap group and filesystem group information

We have an Apache server which serves out of a particular directory, and just supplies a listing of files. From this directory, each subdirectory is owned by a certain group of users (at the ...
1
vote
0answers
336 views

Allowing Backup Operator group to use NetBackup

I have a Windows Server 2008 installed with Microsoft SQL Server 2008 and NetBackup. I have a local ID called bckopr1 and is a member of the Backup Operator group. Subsequently, this ID also able to ...
1
vote
0answers
128 views

Hosted Exchange and distribution group segregation

To keep my question as simple as possible, this is what I would like to address Environment Exchange 2010Sp2 Give users the ability to manage distribution groups that they own through Outlook and ...
1
vote
0answers
556 views

Force AD Security Group Changes to Appear in Exchange

I made changed to security groups within AD, and when I go to the GAL in Outlook I noticed that the changes were not reflected, even after forcing an update by clicking Send Receive | Send Receive ...
1
vote
0answers
297 views

How to grant NetworkService access to a share by placing computers in security groups

I'm trying to configure a file share that will be accessed by ASP.Net applications on a set of computers, all running under the NETWORKSERVICE account on those computers. I can get it to work fine ...
1
vote
0answers
239 views

can SECEDIT.exe be used to only add 1 group to 1 security policy? example?

I am assuming based on my research for using SECEDIT.exe -- that a template would be added to the exisitng security .SDB file. That this template would be very tiny... only naming the security policy ...
1
vote
0answers
608 views

Manage Windows File Share Permissions with Local Group

Here is my situation: I am a Local Administrator on a plain Windows XP machine. Due to organizational issues, people want to run a Windows file share on this machine. I thought it might be a nifty ...
0
votes
0answers
13 views

CentOS 7 group permissions not allowing access to folder

I have a CentOS7 box, "box1", domain joined using Winbind + RID method. I have a folder (NFS mount) @ /shares/share. The permissions are: root@box1:/shares# ls -n /shares/ total 8 drwxrws--- 2 0 ...
0
votes
0answers
10 views

add ability for users in group to see and attach to screen sessions - Debian Wheezy

I'm trying to add the ability for users in a group to be able to list and attach to eachothers screen sessions. I've been pretty unsuccessful so far. I know about multiuser but I'm kind of throwing ...
0
votes
0answers
25 views

Find Active Directory Groups for a specific location

I am a system admin for a site that I inherited from a previous admin. I am currently trying to determine what AD Groups are associated with this site (access to servers, other resources) so I can do ...
0
votes
0answers
226 views

Freeradius authentication: LDAP group and SSID matching

I'm running a freeradius v3 instance with an LDAP backend for the authentication.The backend is working fine but I'v issues with my users.conf file.In this file, I'm trying to implement some rules to ...
0
votes
0answers
25 views

Nested Active Directory Groups causes user unable to authenticate against application

User is placed in a global group called site.gg1 site.gg1 is a member of a global group called region.gg1 region1 has been added to the server local group, which is mapped to the application role. ...
0
votes
0answers
38 views

Empty events for AWS VPC logs?

I have an AWS VPC instance (AMI Linux), and I'd like to see the event logs for insight into its traffic. So, I can run a command as follows: sudo aws logs get-log-events --log-group-name <my-...
0
votes
0answers
48 views

How can multiple users share their (uwsgi) sockets with nginx, but not with each other?

On a shared domain, currently, each linux user sets up his website through his www-data-writable directory + uwsgi socket - one nginx instance serves them all. However, I do not like the idea of one ...
0
votes
0answers
212 views

List AD groups beginning with X on Linux

In the organization wide Active Directory we have user groups that all begin with a prefix blaha-, how do I list all groups with that prefix on a Linux machine? getent group only seems to list local ...
0
votes
0answers
4k views

you must have read permissions to view the properties of this object, administrators group

I think I'm having some difficulty understanding NTFS permissions. My understanding is that when possible you want to avoid assigning a specific user account to NTFS and instead use a group. So I set ...
0
votes
0answers
35 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...