The tag has no wiki summary.

learn more… | top users | synonyms

6
votes
1answer
502 views

Testing Windows user accounts without actually logging into them?

We setup Windows users accounts with redirected profiles here at work, and in the past we have just logged in to the account to test them out. However, recently there has been a change in company ...
0
votes
0answers
39 views

AD showing two accounts with same name [on hold]

In AD sometimes we get a account with same name as one we have which is not created by anyone. One user is with user id and the other is with SID. Acount would be they for 10 minutes and then it will ...
1
vote
2answers
82 views

PowerShell - finding users who are Inactive AND not disabled

I wrote this cmdlet: Search-ADAccount -filter {(enabled -eq $true)} -Users Only -SearchBase "ou=FirstOU,dc=domain,dc=com" -AccountInactive -TimeSpan 30 But it outputs an error: Search-ADAccount : ...
3
votes
1answer
126 views

How can I trace the source of repeated account lockout against Exchange server?

I have an AD user account that is being repeatedly and frequently locked out, I have been able to trace the lockout to the Exchange server CAS array. However I am at a loss as to how to continue the ...
0
votes
1answer
59 views

Powershell - check if all users in a specific OU are disabled, disable if not

I tried to search for it but I didn't find anything. Could someone help me out with an example of a script that would do this?
-1
votes
2answers
67 views

Count of Unix users: how many is too much? [closed]

I know about Postfix MTA configuration concepts: there's tree of them and the last one is most-appropriate only because it doesn't require new Unix user to be created for new mailbox creation. From ...
0
votes
1answer
45 views

Log in as System account on Windows Server 2012

I am trying to configure a message queue on a windows server 2012 computer but I get 'access denied' errors, even if I log in as Administrator. Only the system account has the right permissions. How ...
2
votes
2answers
127 views

What's the best way to see logged in users on Windows Server 2012?

Right now I use a powershell script to see the currently logged in users. But I don't see if there session is idle, active or inactive. I can see when the session was started but that's it. Is there a ...
0
votes
1answer
58 views

Exim, hot to route local mail to other adress

I have setuped an Exim4 server on my debian wheezy server. This mail server only sends mail coming from localhost. The purpose is sending mail for my website. I have cron tasks and other services ...
3
votes
2answers
129 views

SCCM - Where to put the create user step

I've implemented SCCM on our server and am now running task sequences to migrate from Windows XP to Win7. But we also need to be able to add a new local admin, because disable the default ...
1
vote
1answer
123 views

Account Lockout with pam_faillock in RHEL6

Previously, I asked about using pam_tally2 under RHEL6. I would like to pose this question and answer to document the recommended use of pam_faillock over pam_tally2 for the same function; What is ...
1
vote
1answer
62 views

Create ftp user next to DirectAdmin users

For my server which uses DirectAdmin I would like to create an ftp user which can access every directory in /home/ . I don't need to know how to do this, I know how to jail. The problem I am facing is ...
6
votes
2answers
149 views

What can I do to fix missing start menu/desktop icons for a domain user?

I'm having a problem with one user account in my domain. The domain controller is Server 2008 R2, with Win7 clients. The user's password expired, so she went through the process of changing it. We ...
3
votes
1answer
170 views

What is causing the Collateral damage when deleting old profiles?

#Get user names that have logged onto workstation $Users = gwmi win32_networkloginprofile | where {$_.name -match "EXP\\"} | where {$_.name -notmatch "srvtasksched"} $Users | foreach{ $Name = ...
6
votes
3answers
469 views

How to find the creation date of a local user account?

I would like to get the creation date of a local user account (Win 7 if it matters). I've looked at the following WMI objects (and google of course): Win32_UserAccount Win32_NetworkLoginProfile The ...
0
votes
1answer
88 views

Username conventions in a company [duplicate]

I'd like to understand common and practical username creation conventions which could be used in companies as unique names of user accounts. Let's say a small company with perspective of growth wants ...
2
votes
1answer
250 views

What could cause *every* command in RHEL to be executed by root?

Recently I was asked to look at a system for a "friend" that left me completely stumped. Their original problem stated to me: They have a RHEL 5.10, gnome desktop fairly typical install They are ...
1
vote
1answer
40 views

Where does adduser's Directory Information Go?

When I use the command adduser it asks me for all sorts of directory-like information such as: Full Name Room Number Work Phone etc. Where is this information stored and how does one retrieve or ...
5
votes
2answers
180 views

Delegating Control — Windows Active Directory

Attempting to make a site administrator user account for an Active Directory Domain. Using the Active Directory Delegate Authority Wizard. a user account has been grated rights in a OU. However, when ...
2
votes
2answers
131 views

AD LDAP No Password Required

I've got a question about AD accounts that have the setting PASSWD_NOTREQD enabled on them. What exactly does this setting do? From my own research, it appears that this will cause the account to ...
1
vote
1answer
145 views

When is a user considered “Everyone” in the “Access this computer from the network” policy

I am a bit puzzled by the existance of the "Everyone" group in this policy. Per http://technet.microsoft.com/en-us/magazine/dd637754.aspx: The Everyone identity All interactive, network, dial-up, ...
3
votes
1answer
139 views

Why would an interdomain trust account not require a password?

I am trying to understand why and interdomain trust account would have an account value of 2080 (INTERDOMAIN_TRUST_ACCOUNT – PASSWD_NOTREQD). During a routine audit, after we had recently set up a ...
1
vote
1answer
58 views

User Permission Issues Within Domain

I have user that is in Domain Admins group. I am trying to access folder that has full permissions for Domain Admins group but for some reason I get "You don't currently have permission to access this ...
0
votes
1answer
35 views

Linux service account management

We use Windows Active Directory for account management. As a security policy, we need to change password for service accounts at least every six months. What we are experiencing is, when we change the ...
0
votes
2answers
54 views

Should I set the password when creating new user using useradd command?

I know that when creating a new user by useradd, I could set his password by -p option, but it seems insecure, then what the right way to create a user and set his password? I do this in two steps: ...
0
votes
0answers
74 views

GPO to have Chrome profile follow user on AD network, includes laptops

I'm currently working on a Windows network with domain, about 50 +/- workstations. I'm going to be doing a new PC roll out within the next few months and I'd like to have Chrome, or Firefox for that ...
2
votes
1answer
498 views

Does www-data user need a real shell?

Interestingly enough, on my Ubuntu derivative with nginx installed with apt, the www-data user has a shell: $ cat /etc/passwd www-data:x:33:33:www-data:/var/www:/bin/sh Shouldn't this be set to ...
0
votes
1answer
27 views

Is there a decent way to manage accounts across disparate web services?

I'm in the position of needing to manage the accounts of multiple people across many different types of services, including onboarding and offboarding users. Being that we're using multiple different ...
1
vote
2answers
1k views

Running an administrative program under user account - domain edition

I am tearing my hair out here - could use a little help. It appears that the classic RUNAS does not function under a Domain environment. At least, I cannot get it to run in a Windows Server 2012 R2 ...
0
votes
1answer
762 views

How to use iRedMail's LDAP database for user authentication?

I have a few servers set up and I'd like to centralize access for users using LDAP. I have my primary server that is hosting email using iRedMail, and there already happens to be an LDAP database that ...
0
votes
1answer
119 views

How to get additional Account Info tab in ADUC with Taskpads

as a part of delegating tasks to admins , we require to enable Additional Account tab(which shows, last password reset, SID , GUID last logon/Logoff etc) in ADUC when user properties are viewed. How ...
2
votes
1answer
114 views

Should SSH w/o password prevent rsync a folder with read permission?

Sorry for the long question. I try to add as many details as I have. On server_1 I have a systems account user named backup which has a home directory where the cron jobs read the backup scripts. ...
1
vote
2answers
2k views

Increase the number of concurrent users on Windows Server 2008

I have a Windows Server 2008 R2 running and I am able to connect to it using 2 different users via Remote Desktop Connection. Since a colleague and me are working on the server almost all the time and ...
0
votes
0answers
69 views

In Linux, what's the best way to delegate administration responsibilities, like for Apache, a database, or some other application?

In Linux, what's the best way to delegate administration responsibilities for Apache and other "applications"? File permissions? Sudo? A mix of both? Something else? At work we have two tiers of ...
0
votes
0answers
23 views

How to get a new SBS user to show up in Windows Storage Server?

We have an SBS domain, and a Windows Storage Server 2008 R2 Essentials. I've created a new user account on the SBS machine, but this new user is not yet available to set up on the Storage Server. How ...
0
votes
1answer
79 views

How to inactive windows users, 1 month after their FIRST LOGIN, instead of defining a solid expiration date for them

We want to give access to some Windows Server users so they can remotely have access to our server and download from a special folder of the server. The licenses we give to users, are time base. ...
1
vote
3answers
91 views

OSX Account server running on Linux

We are a small startup company where we all work on Apple computers. I was wondering whether we could centralise the user accounts on a single server so anyone could log into their account from any of ...
1
vote
2answers
127 views

How to add user to a group from terminal on Mountain Lion?

When I run sudo dscl . -append /Groups/com.apple.access_ssh GroupMembership $USERNAME I get append: Invalid Path <dscl_cmd> DS Error: -14009 (eDSUnknownNodeName)
0
votes
1answer
56 views

Obfuscated Account Names in Windows Computer Management / Groups

So our security auditors sent me an email indicating there were a few AD groups and accounts in the administrators group of one of our servers that should not have admin access to the machine in ...
1
vote
0answers
38 views

Automatically create virtualenvs for new user accounts

In Linux, how can I go about automatically creating virtualenvs for each newly created user account? Can it easily be done?
-1
votes
1answer
517 views

Setting a password hint on administrator account in Windows Server 2008 R2

I've tried to change a password on administrator account using Control Panel\All Control Panel Items\User Accounts\Change Your Password but can't set a password hint. When I clicked What is a password ...
1
vote
2answers
58 views

Finding DNS settings of a domain?

My client has DNS for their domain name hosted with a DNS host separate to their domain registrar. The person who setup the account with the DNS Host hasn't been contactable for over 2 years. This ...
2
votes
2answers
108 views

Autofilling some field in all AD accounts

Is there a way to auto-fill a field or set of fields for all AD accounts in one go? For example if I want to set address field for all employees or in a specific OU? Or perhaps if I need to set their ...
2
votes
1answer
95 views

Puppet: Enumerating all users within a group

Is there any way to enumerate an array of all users within a group within Puppet, either as a fact or something so I can do something like this? $users = enumusers('wheel') each($users) |$user| { ...
-1
votes
3answers
42 views

How might you configure limited access for non-admins to troubleshoot on a production windows server running an ASP.NET application? [closed]

I would like to provide developers limited access to a production Windows Server 2008 Standard box. This is so they can diagnose problems that occur there with the ASP.NET application we are hosting. ...
4
votes
1answer
1k views

Unable to delete a user from a Linux CentOS 6.3 machine, what can be done?

When I try deleting my user (from a root shell) it says userdel: cannot remove entry 'itaig' from /etc/passwd The user isn't even displayed on /etc/passwd. [root@ab2c1 ~]# su - itaig su: warning: ...
3
votes
4answers
2k views

What do I need to be cautious of when changing a User Logon Name in Active Directory?

I'm new to my current employer, being their only Sysadmin. I'm seeing a small handful of users who have User Logon Names which don't conform to the naming convention standard which majority of users ...
2
votes
2answers
1k views

How to create linux account with useradd without creating mail spool

Summary Can I create a new user without creating mail spool and without modification of /etc/default/useradd ? Explaination I want to create a user that has a home directory and skeletion, but I ...
0
votes
1answer
138 views

How can I synchronize users in a master-slave server setup on debian squeeze?

I'm currently setting up a 1:1 replication of a linux server. To simplify the process of updating users and groups I considered changing the uids and gids on the slave server to have them all like on ...
0
votes
1answer
59 views

Give access to specific services on Windows 7 Professional machines? [duplicate]

We have some machines running Windows 7 Professional at our office. The typical user needs to have access to stop and start a service for a local program they run. These machines have a local web ...