The tag has no wiki summary.

learn more… | top users | synonyms

32
votes
5answers
14k views

What's the difference between 'useradd' and 'adduser'?

What's the difference between useradd and adduser? When/why should I prefer using one or the other?
31
votes
5answers
4k views

How do admins maintain user accounts across hundreds of linux servers?

Dealing with hundreds of RHEL servers, how can we maintain local root accounts and network user accounts? Is there an active directory type solution that manages these from a central location?
13
votes
1answer
765 views

Domain Administrators account policy (After PCI audit)

One of our clients is a Tier 1 PCI company, and their auditors have made a suggestion with regards to us as System Administrators and our access rights. We administer their entirely Windows based ...
9
votes
4answers
552 views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
9
votes
1answer
695 views

Can a user account that is disabled in Active Directory still receive email?

I'm reading Learning Exchange Server 2003 by Boswell, and there's a section in there that mentions that a disabled account in AD cannot receive email and that it will be bounced back. Currently, what ...
8
votes
5answers
2k views

When would you use the “password never expires” option?

I'm simply wondering when you should set a user account so that the password never expires. On what accounts is this a good idea?
7
votes
3answers
39k views

How to delete domain user profile from a computer?

I'm wondering how to safely remove a domain user profile from a computer that is a part of a domain. I don't want to delete the account from the domain itself, I just need to remove the profile from ...
7
votes
2answers
5k views

Can you find out when a new user was created in Active Directory on Windows 2003 Server?

As the question title says, I am trying to find out when a user account was created in Active Directory. The operating system is Windows Server 2003.
7
votes
2answers
5k views

Why limit maximum username length to 8 characters?

Throughout my humble career in IT I generally see username length limited (typically to 8 characters). This occurs on a variety of systems including Active Directory and database apps. Is there a ...
7
votes
1answer
2k views

Can I add user accounts to Windows Server 2012 based on Microsoft accounts?

Windows 8 lets me create user accounts simply by the email address of a Microsoft account (aka Windows Live account). Is there someway to activate such a facility in the Windows Server 2012 SKU?
6
votes
6answers
1k views

How can I automate clearing and resetting a Linux user's home directory to a default?

I'm helping to teach two Unix courses next week. Users will be granted an account on a RHEL 5 machine, during which time they'll add files to their /home folder, update their .bashrc and other ...
6
votes
1answer
500 views

Testing Windows user accounts without actually logging into them?

We setup Windows users accounts with redirected profiles here at work, and in the past we have just logged in to the account to test them out. However, recently there has been a change in company ...
6
votes
3answers
460 views

How to find the creation date of a local user account?

I would like to get the creation date of a local user account (Win 7 if it matters). I've looked at the following WMI objects (and google of course): Win32_UserAccount Win32_NetworkLoginProfile The ...
6
votes
2answers
148 views

What can I do to fix missing start menu/desktop icons for a domain user?

I'm having a problem with one user account in my domain. The domain controller is Server 2008 R2, with Win7 clients. The user's password expired, so she went through the process of changing it. We ...
5
votes
4answers
3k views

How to add a user without knowing the encrypted form of the password?

I use the following command to create a user in a linux machine: useradd -d /home/dummy -g idiots -m -p 12345689 dummy The user is created and the home directory as well. The problem is that I ...
5
votes
2answers
180 views

Delegating Control — Windows Active Directory

Attempting to make a site administrator user account for an Active Directory Domain. Using the Active Directory Delegate Authority Wizard. a user account has been grated rights in a OU. However, when ...
5
votes
2answers
7k views

Account Lockout with pam_tally2 in RHEL6

I am using pam_tally2 to lockout accounts after 3 failed logins per policy, however, the connecting user does not receive the error indicating pam_tally2's action. (Via SSH.) I expect to see on the ...
5
votes
1answer
747 views

How does Windows hide internal users?

I just recognized that Windows hides some special users, like for example the NT Authority\SYSTEM user or the users which are added after the installation of SQL Server (ReportServer$SQLEXPRESS, ...
4
votes
2answers
3k views

How to secure Outlook Web Access against Brute Force attack?

I'd like to secure Outlook Web Access with Exchange 2010 against a brute force attack using account lockout. What is the best way to do this? I have the following group policy: Computer ...
4
votes
3answers
305 views

Transfer an account from a 'dead' domain

So - following from my previous question: How do I stop DFSR replication preventing a Domain Controller from advertising Domain Services?, I lost the FSMO DC, and my only other DC was in an ...
4
votes
5answers
575 views

Common user accounts between linux machines

I have a base system with a few (currently two) VMs on top of it, all running Ubuntu Server. I have to keep adding my user account on each system when I bring a new one up, as well as giving it sudo ...
4
votes
2answers
6k views

How to find all ways in which a Unix user account is locked

I occasionally find myself in a situation where an undermaintained system has an account that's been locked out. The problem is that there are a variety of ways in which an account can be locked out, ...
4
votes
2answers
440 views

When should I create a new user account to run software on a server?

In general, when should one create a new user account to run a piece of internet-facing software on a server? For instance, suppose I'm using a shared Debian server (e.g. via Dreamhost) and I want to ...
4
votes
2answers
829 views

Scalable way to add users in Postfix without creating new unix/linux accounts?

What is the most scalable way to add new users in postfix? I don't necessarily want to create a new user in /etc/shadow just for email. I know I can use aliases but this does not solve the issue of ...
4
votes
2answers
1k views

Can I use Active Directory for user-level security in an Access application? Pretty Please?

My company makes fairly extensive use of an Access + MySQL application that would probably see some significant traffic on the Daily WTF if I posted the source code. The management of users and their ...
4
votes
5answers
353 views

User creation on Linux Redhat

Is there anyway one can determine when a user was created on Linux? I know of a couple of things one can do,but it's an unreliable way of doing it. The first option is checking when the home directory ...
4
votes
1answer
598 views

How can I determine who (or what) has blocked access to a centos user account?

CentOS 5.x A user account on my CenTOS server has become inaccessible and I'm not sure why. If I run chage -l foo I see: Minimum: 0 Maximum: 0 Warning: 5 Inactive -1 Last Change: ...
4
votes
2answers
697 views

Account management tools supporting self-service registration and email verification?

I work in a university environment that has in the past offered services almost exclusively to university affiliates who already have "formal" accounts in central user database. We are increasingly ...
4
votes
3answers
216 views

Two users using the same same user profile while not in a domain

I have a windows server 2003 acting as a terminal server, this computer is not a member of any domain. We demo our product on the server by creating a user account. The person logs in uses the demo ...
4
votes
1answer
1k views

Unable to delete a user from a Linux CentOS 6.3 machine, what can be done?

When I try deleting my user (from a root shell) it says userdel: cannot remove entry 'itaig' from /etc/passwd The user isn't even displayed on /etc/passwd. [root@ab2c1 ~]# su - itaig su: warning: ...
3
votes
5answers
2k views

Restore “lost” user after Active Directory removal?

Is it possible to restore lost users after Active Directory unistallation ? (I forgot to switch users to local users) The computer run Windows Server 2008 R2 Entreprise, and all the registry linked to ...
3
votes
2answers
3k views

How can I rename an unix user?

I have a user named hedgehog and I want him to be named squirrel, but I don't want to change his numeric user ID. How can I accomplish this?
3
votes
3answers
339 views

Active Directory examples of hierarchy

i am in the process of restructuring the hierarchical structure of the local active directory server of the institution i am working for. I was wondering if anyone knew of any place i could find best ...
3
votes
4answers
2k views

What do I need to be cautious of when changing a User Logon Name in Active Directory?

I'm new to my current employer, being their only Sysadmin. I'm seeing a small handful of users who have User Logon Names which don't conform to the naming convention standard which majority of users ...
3
votes
6answers
24k views

Windows Server 2008 R2: User account set to not show on login

This afternoon I set up a Win Server 2008 R2 system for use with Team Foundation source code control. In order to give my team-mates the right to connect, I had to create a user account for each ...
3
votes
2answers
4k views

User account being frequently locked out

We are running in a Windows 2008 / Windows 7 environment. One on my users is being locked out of his Active Directory account on a daily basis. This occurs between 10 and 18 hours after each reset. ...
3
votes
3answers
174 views

Good ways to disseminate login information, especially when new users are created?

When you create user logins in bulk, with set passwords as many users are unlikely to change their passwords, how do you disseminate the information? Students in our school division are automatically ...
3
votes
1answer
139 views

Why would an interdomain trust account not require a password?

I am trying to understand why and interdomain trust account would have an account value of 2080 (INTERDOMAIN_TRUST_ACCOUNT – PASSWD_NOTREQD). During a routine audit, after we had recently set up a ...
3
votes
2answers
294 views

Best practices - Is it better to delete unused SQL accounts or just disabled them?

In an enterprise environment, is it better to delete limited access SQL accounts, or simply disable them?
3
votes
2answers
448 views

Setting up a limited user account on Windows Server

I'd like to create a user account on a Windows Server which can read whatever bits of C:\ it needs to be able to execute programs, but have no read access to D:\ except for D:\Special. It seems that ...
3
votes
2answers
88 views

Give user-creation privileges to a user

In MySQL, how do you allow another user to create other users? In turn, those users should only be able to view some tables.
3
votes
1answer
262 views

Impersonation Service Account

I am bringing up AppXtender Workflow Manager. One of the instructions is to create an Impersonation Service Account. I have never heard of such. What is it and how do I create an impersonation service ...
3
votes
1answer
192 views

Change what fields are copied when copying an account in Active Directory?

I've noticed that all of the address with the exception of the street address is copied when copying an Active Directory user account. Is there a way to change this? We're currently running a 2003 AD ...
3
votes
2answers
126 views

SCCM - Where to put the create user step

I've implemented SCCM on our server and am now running task sequences to migrate from Windows XP to Win7. But we also need to be able to add a new local admin, because disable the default ...
3
votes
5answers
2k views

Active Directory Account locks for no apparent reason

I've been troubleshooting this problem for two years and it keeps coming back. Our Mac users authenticate to our Active Directory server which is running Windows Server 2008 Standard. One of the Mac ...
3
votes
1answer
170 views

What is causing the Collateral damage when deleting old profiles?

#Get user names that have logged onto workstation $Users = gwmi win32_networkloginprofile | where {$_.name -match "EXP\\"} | where {$_.name -notmatch "srvtasksched"} $Users | foreach{ $Name = ...
3
votes
2answers
1k views

How to configure Users permissions in Windows Server 2008 R2 by command line?

I have to create about 800 users in our Windows S 2008 R2 and I'd like to make a few settings with them. Create user: net user Joe 1mb4pASs /add /fullname:"John Smith" /passwordchg:no /comment:"no ...
3
votes
1answer
2k views

Connect to network share using local account - without a computer name

The short form of the question: I have a shared folder on a computer with a fixed static IP address, a known share name, and a local user account which has read access to the share. Normally, I ...
3
votes
1answer
63 views

Is there a standard behind the default system accounts in a linux system like fedora or debian?

By system accounts I mean the ones that comes preinstalled with the system, for example nobody, daemon and bin. I know these tend to vary depending to the distro and the installed packages, but: is ...
3
votes
1answer
124 views

How can I trace the source of repeated account lockout against Exchange server?

I have an AD user account that is being repeatedly and frequently locked out, I have been able to trace the lockout to the Exchange server CAS array. However I am at a loss as to how to continue the ...