Questions tagged [security-groups]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
36 views

AWS Security Group Inbound rules for SSM Session Manager

I have an instance in a private subnet and a security group that allows any inbound access. I can connect to it with Session Manager. If I restrict inbound access to port 22 only I can no longer ...
Jake's user avatar
  • 631
0 votes
2 answers
114 views

Do Windows domain builtin groups grant the same permissions as the equivalent machine builtin groups? (eg, Performance Monitor Users)

I am developing a Windows service that uses PDH to query some performance counter data. It is necessary for the service to by run by another user (ie, not the all-powerful SYSTEM). I am aware that the ...
aampere's user avatar
  • 105
0 votes
2 answers
58 views

Allow AWS OpenID Connect through Security Groups

I have a GitLab self-hosted instance running in AWS EC2. Its associated security group blocks all incoming external traffic except for a handful of individual IP addresses. To automatically deploy ...
Escualo's user avatar
  • 261
0 votes
0 answers
29 views

How to specify Security Group when creating VPC in AWS web console UI

I created a security group and then wanted to create a VPC and specify this VPC to use this existing security group. I couldn't find an option in AWS' current VPC form to specify the security group. ...
AJP's user avatar
  • 155
0 votes
0 answers
22 views

AWS Security Groups misunderstanding

I have 2 windows server instances in AWS, both have their firewalls disabled. They are in the same VPC and the same availability zone. I'm simply trying to allow these servers to ping each other. Each ...
Aditya K's user avatar
  • 923
0 votes
0 answers
45 views

Openstack - security group rule priority

How can I set priority to security group rules in OpenStack via API? For example, I would like to banned one output port and I would not like the user can override it by another rule.
Bani's user avatar
  • 19
0 votes
1 answer
586 views

Domain Controller Blocking SAMR Request

I have a software that is used for monitoring user logins. In the software it uses a SAMR request to get user groups for allowing users in an out of the machine. When the software reaches out with a ...
JukEboX's user avatar
  • 835
0 votes
0 answers
252 views

EC2 port 80 refused to connect on public IP but can connect using private IP

Question simplified I can do curl {publicip}:4321 but not curl {publicip}:80 or curl {publicip}. But from the server's ssh, i can run curl {privateip}:80 and curl localhost:80 without any issues. And ...
Nandu Kkd's user avatar
0 votes
1 answer
255 views

Do firewalld rich-rules apply irrespective of the allowed services in a zone?

Context: I have firewalld running on an AWS EC2. Goal: I want to add a rich rule to the default zone (public) that allows traffic from a certain CIDR range/IP address range/subnet over port 443 (HTTPS)...
Prithvi Boinpally's user avatar
0 votes
1 answer
479 views

Permission for Users group successfully modified via code, but change is not reflected in Security tab for the Users group

I have C# code (at the end) which: Creates a file Prints the current ACL Gives the builtin users group "write permissions" to the previously created file Prints the current modified ACL ...
Legenda's user avatar
  • 89
0 votes
1 answer
113 views

FortiGate Next Gen Firewall AWS security groups

I'm new to AWS using a FortiGate in front as the gateway. Would you need to utilize the security groups, or could I make one to permit all traffic and attach it since the fortigate handles everything.
SGNjH's user avatar
  • 3
0 votes
1 answer
2k views

ECS containers on EC2 cannot mount EFS volumes

I have created an ECS cluster backed by an EC2 auto-scaling group and launched a service in it that uses EFS for NFS storage. The service is running in awsvpc network mode so that I'm able to control ...
user1933738's user avatar
2 votes
2 answers
2k views

AWS security group cross regions

I am trying to set a security group A to allow SSH access from security group B in a different region. I don't have much experience with networking in general and AWS networking. Followed the ...
Elad Weiss's user avatar
0 votes
1 answer
1k views

How do i add a security group as an inbound rule to another security group in terraform

I have a Terraform codebase which deploys a private EKS cluster, a bastion host and other AWS services. I have also added a few security groups to the in Terraform. One of the security groups allows ...
eagercoder's user avatar
0 votes
1 answer
2k views

How to get name of BUILTIN\Users & BUILTIN\Power Users

Is there a universal way to get the principals BUILTIN\Users or BUILTIN\Power Users (specifically retrieve the name) The obvious answer would be that I already have the names! However, they are called ...
komodosp's user avatar
  • 121
2 votes
1 answer
3k views

Dynamic Mail Enabled Security Groups are being converted to Dynamic Distribution Lists

Problem: the dynamic mail-enabled security groups (DMESG) I create in EAC are being automatically converted to Dynamic distribution lists (DDL) instead. Use Case: I am attempting to give membership ...
Mikey Mike's user avatar
0 votes
0 answers
117 views

Restrict an instance access through security groups to itself on aws (Pfsense)

My intention is to create a VPN server. So i created and configured an instance on AWS as a VPN server (Pfsense), then i added in the security groups the destination 0.0.0.0/0 of the VPN port (1194). ...
Lucas Polloni's user avatar
0 votes
1 answer
129 views

Does blocking all outgoing traffic on cloud instance lock me out?

I have to test an app which first downloads data, but then, can not communicate with the world for the duration of the test (so it doesn't gossip stuff). There are ways to enforce this on the app, but ...
unsafe_where_true's user avatar
0 votes
0 answers
39 views

TCP communication on port not responding on different Availability Zone or Subnet

I'm a little curious and confused about this situation. We setup a monitoring instance scraping an exposed endpoint on 2 different instances. Both on same VPC, same security group, same route table ...
forgondolin's user avatar
1 vote
1 answer
433 views

AWS Postgres database IP in security group, how to enter info to survive IP address changes?

I have an existing prod Postgres database and I would like to replicate a table to a new Postgres database. In order to get the two to be able to talk to each other, I had to edit an AWS security ...
mj_'s user avatar
  • 131
0 votes
1 answer
689 views

Linux: How to allow outbound rules for seccurity updates

We use aws ec2 instances with the 'AWS Linux AMI 2' image. We have a script for security updates with this code: yum update -y --security. I want to allow only security update in outbound rules - aws ...
user2503775's user avatar
0 votes
1 answer
2k views

Create a Mail-enabled security groups with Azure AD role assignment?

I would like to create a Security Group within my firm's 365 Tenant with a group email address and role assignment of "Billing administrator" - i.e. Can perform common billing related tasks ...
Josh_BI_UK's user avatar
1 vote
1 answer
96 views

RHEL 8: Administrator vs. Auditor role

On RHEL 8, are there prepared functions, methods, processes or tools to implement administrator/operator and auditor roles in the following way: An administrator/operator should be able to do almost ...
stackprotector's user avatar
0 votes
0 answers
684 views

Logging on Windows with user accounts in Protected Users group over VPN

I am planning implementation of Microsoft’s Active Directory tier administrative model, and I was wondering how to overcome the problem of system administration over VPN. One of the security ...
Zoran Jankov's user avatar
1 vote
0 answers
708 views

Remove the default Security Group assigned by Elastic Beanstalk

I have created a Elastic Beanstalk environment and have created this .config to edit the security groups which worked. Now my EC2s are attached to the new SG and the default one. option_settings: - ...
Rami's user avatar
  • 11
0 votes
1 answer
902 views

A user activity is detected from a disabled account in Active directory

I have disabled an user in my Active Directory (terminated the account). However, I am still getting the log that Event IDs 5379 (credential manager credentials were read.), 4673 (a privileged service ...
raal's user avatar
  • 3
1 vote
3 answers
13k views

AWS - Adding multiple IPs to Security Group Inbound Rules

I need to open 20 ports for 12 IP blocks. Do I have to manually add 240 rules in this case? I feel like there must be a way to just copy&paste the IP list to somewhere. I googled and found it's ...
Lunartist's user avatar
  • 125
1 vote
2 answers
1k views

Whitelist both IPv4 and IPv6 in AWS Security Group

I am setting up an SFTP server, I want to white list all the IPs in the Security Group so people can connect to it from anywhere. At the moment I am adding 2 rules to the Inbound rules, one rule for ...
Hooman Bahreini's user avatar
2 votes
2 answers
2k views

Office 365 Exchange Public Folder lost SID assignment to security group folder permissions

We installed a new Exchange 2016 server and migrated all the mailboxes from the Exchange 2010 server to it. Then we migrated all the mailboxes and public folders from MSEX2016 to Office 365, and we ...
Michael Uray's user avatar
1 vote
3 answers
704 views

How can I easily manage constantly changing public IP addresses in my many security groups

Our development environment is hosted on AWS, and is accessed by dozens of people. As people join and leave the project, or work from alternate (often temporary) locations, I find myself constantly ...
Jeromy French's user avatar
0 votes
2 answers
1k views

Nested AD Groups RDP permission not applying to new Windows Server 2019 VM

Similar Issue with no responses: Nested AD groups working in local computer groups, but certain servers fail to allow RDP? I am only new to this environment and the person I took this over from also ...
Krab's user avatar
  • 1
0 votes
0 answers
938 views

AWS ELB(classic load balancer) response is too slow and sometimes response is not coming it is showing timed out

I have EKS cluster setup in private subnet in which i'm having my microservices and for each microservice i have classic load balancer to access API. But response is having high latency and sometimes ...
uni's user avatar
  • 21
11 votes
2 answers
2k views

What is a secure and user-friendly way to provide only a few users access to web app on Amazon EC2?

Situation We have a web app hosted on Amazon EC2. It's intended to be used only by a few users in a company. How we're dealing with this We share the (Elastic) IP address of the instance with the ...
m01010011's user avatar
  • 211
3 votes
2 answers
24k views

Why am I getting "Connection refused"?

I am running a hello-world http server on an ubuntu EC2 instance, let's say, myurl.com. I am unable to curl it from my client: $ curl myurl.com:4296 curl: (7) Failed to connect to ...
Ruby's user avatar
  • 139
0 votes
2 answers
2k views

bulk removing direct access to a folder via PowerShell ACL

On a number of the servers where I work the share folder permissions have become cluttered with direct permissions for some of our techs due to them needing to take ownership. I have figured out how ...
Robyn H's user avatar
2 votes
2 answers
782 views

Add domain users to a group of security groups via group policy

Is there a way to add domain users to a collection of security groups via group policy? We have some SSO groups that all employees share. Instead of tech support person having to manually add new user ...
KMote's user avatar
  • 21
3 votes
1 answer
496 views

Windows - Group Policy - Numerous Share Drives w/ Item-Level Targeting

Overview We have been working on getting our numerous sites to map share drives for each user that needs access to their sites. We have no way of standardizing this from within their AD profile as ...
Matrix1701's user avatar
1 vote
1 answer
460 views

Why don't Windows domain machines periodically query security group membership, like other things? [closed]

When I was in lower tier support (and sometimes still), one of the most annoying sequences of events was a request for new file permissions >> add user to security group and specify in the reply ...
WakeDemons3's user avatar
1 vote
2 answers
2k views

Link a GPO to an OU or security group, Who will win?

Here's the scenario: A GPO is linked to an OU to enable, for example, UAC setting. However, since there are certain systems that require UAC to be disabled, there is a GPO that disables these settings....
Tom's user avatar
  • 11
0 votes
3 answers
4k views

Is there a way to export all AWS Security Groups to CSV? moreover, is there a recommended way of keeping track of SR changes?

We have a relatively small dev environment in AWS with about 50 Security groups with multiple permission entries. is there a recommended way of keeping track of SR changes, Access, etc? My manager ...
Moshe Harel's user avatar
1 vote
1 answer
2k views

How to Apply Egress rules to Default Security Group - AWS

I would like to apply port 443 outbound rule to the 'Default' security group. It worked by creating a dedicated block OutboundRule (which is commented out). Instead of creating a new block, I want to ...
Prime's user avatar
  • 143
2 votes
0 answers
73 views

Windows Domain Group Membership Not Promulgating Fully to Workstation

Perhaps I should ask 2 or three questions but since these are all related, here they are: Situation: Multiple Windows 2019 Standard DCs synchronized. Windows 10 Pro workstations joined to the domain....
fred3's user avatar
  • 21
0 votes
1 answer
1k views

PowerShell - Remove User/Group from Security Permissions

I have an AD group called "Admins" and it has specific members but under the Security Tab, how can I use Powershell to remove certain users/groups from the Security list and/or modify the ...
Lance's user avatar
  • 1
0 votes
1 answer
259 views

Adding a security group to AD user account using PowerShell

I am trying to build a PowerShell command that it will add a security group (not on Member Of) with full control permissions in AD user in order avoid doing it manually by hand. Is it possible ? This ...
John Pantelidis's user avatar
0 votes
1 answer
942 views

Looking for a good explanation of how AWS Security groups behave

I'm struggling to get my head round port ranges described by AWS Security Groups and how they behave. I'm a software developer with many years of experience writing networking software so it's ...
Philip Couling's user avatar
1 vote
1 answer
928 views

GPO and Security Groups in multiple domain

I have 2 forests, each with one domain with a bidirectional trust. I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
chart's user avatar
  • 13
0 votes
1 answer
255 views

Need of distribution groups in active directory

I know the basic purpose of security group and distribution group in active directory. The security group is used to access the network resource and distribution group is used to send distribution ...
Sathishkumar Thangaraj's user avatar
0 votes
1 answer
2k views

ec2 instance will not allow connections to port from within instance after opening port on security group

I have an EC2 instance on a security group that allows ports 80, 443 and 22 (tcp, inbound from 0.0.0.0/0 and ::/0); and every outbound connection (to 0.0.0.0/0 & ::/0, all tcp & udp). I've ...
NotGaeL's user avatar
  • 277
1 vote
1 answer
516 views

Active Directory - grant access rights to a user that belongs to multiple groups

I have a Windows 2012 Server with file server role. I have users in my active directory which are defined by 3 things : country - service - role I have about 10 countries, 10 services and 5 roles. How ...
Pierre Lebur's user avatar
1 vote
1 answer
92 views

ec2 permissions to manage only firewall access

I'd like to allow some developers to manage firewall rules, specifically rules in ec2 security groups, (or some of them ideally) so that they can, eg, update their changing IP addresses to access ...
csdev's user avatar
  • 111