The tag has no wiki summary.

learn more… | top users | synonyms

33
votes
5answers
15k views

What's the difference between 'useradd' and 'adduser'?

What's the difference between useradd and adduser? When/why should I prefer using one or the other?
32
votes
5answers
5k views

How do admins maintain user accounts across hundreds of linux servers?

Dealing with hundreds of RHEL servers, how can we maintain local root accounts and network user accounts? Is there an active directory type solution that manages these from a central location?
13
votes
1answer
1k views

Domain Administrators account policy (After PCI audit)

One of our clients is a Tier 1 PCI company, and their auditors have made a suggestion with regards to us as System Administrators and our access rights. We administer their entirely Windows based ...
9
votes
4answers
854 views

Managing access to multiple linux system

A searched for answers but have found nothing on here... Long story short: a non-profit organization is in dire need of modernizing its infrastructure. First thing is to find an alternatives to ...
9
votes
1answer
914 views

Can a user account that is disabled in Active Directory still receive email?

I'm reading Learning Exchange Server 2003 by Boswell, and there's a section in there that mentions that a disabled account in AD cannot receive email and that it will be bounced back. Currently, what ...
8
votes
3answers
62k views

How to delete domain user profile from a computer?

I'm wondering how to safely remove a domain user profile from a computer that is a part of a domain. I don't want to delete the account from the domain itself, I just need to remove the profile from ...
8
votes
5answers
2k views

When would you use the “password never expires” option?

I'm simply wondering when you should set a user account so that the password never expires. On what accounts is this a good idea?
8
votes
2answers
6k views

Why limit maximum username length to 8 characters?

Throughout my humble career in IT I generally see username length limited (typically to 8 characters). This occurs on a variety of systems including Active Directory and database apps. Is there a ...
7
votes
2answers
7k views

Can you find out when a new user was created in Active Directory on Windows 2003 Server?

As the question title says, I am trying to find out when a user account was created in Active Directory. The operating system is Windows Server 2003.
7
votes
1answer
3k views

Can I add user accounts to Windows Server 2012 based on Microsoft accounts?

Windows 8 lets me create user accounts simply by the email address of a Microsoft account (aka Windows Live account). Is there someway to activate such a facility in the Windows Server 2012 SKU?
6
votes
6answers
2k views

How can I automate clearing and resetting a Linux user's home directory to a default?

I'm helping to teach two Unix courses next week. Users will be granted an account on a RHEL 5 machine, during which time they'll add files to their /home folder, update their .bashrc and other ...
6
votes
3answers
5k views

How can I rename an unix user?

I have a user named hedgehog and I want him to be named squirrel, but I don't want to change his numeric user ID. How can I accomplish this?
6
votes
1answer
520 views

Testing Windows user accounts without actually logging into them?

We setup Windows users accounts with redirected profiles here at work, and in the past we have just logged in to the account to test them out. However, recently there has been a change in company ...
6
votes
2answers
960 views

When should I create a new user account to run software on a server?

In general, when should one create a new user account to run a piece of internet-facing software on a server? For instance, suppose I'm using a shared Debian server (e.g. via Dreamhost) and I want to ...
6
votes
4answers
2k views

How to find the creation date of a local user account?

I would like to get the creation date of a local user account (Win 7 if it matters). I've looked at the following WMI objects (and google of course): Win32_UserAccount Win32_NetworkLoginProfile The ...
6
votes
2answers
9k views

Account Lockout with pam_tally2 in RHEL6

I am using pam_tally2 to lockout accounts after 3 failed logins per policy, however, the connecting user does not receive the error indicating pam_tally2's action. (Via SSH.) I expect to see on the ...
6
votes
2answers
234 views

What can I do to fix missing start menu/desktop icons for a domain user?

I'm having a problem with one user account in my domain. The domain controller is Server 2008 R2, with Win7 clients. The user's password expired, so she went through the process of changing it. We ...
5
votes
4answers
5k views

How to add a user without knowing the encrypted form of the password?

I use the following command to create a user in a linux machine: useradd -d /home/dummy -g idiots -m -p 12345689 dummy The user is created and the home directory as well. The problem is that I ...
5
votes
2answers
566 views

Delegating Control — Windows Active Directory

Attempting to make a site administrator user account for an Active Directory Domain. Using the Active Directory Delegate Authority Wizard. a user account has been grated rights in a OU. However, when ...
5
votes
1answer
796 views

How does Windows hide internal users?

I just recognized that Windows hides some special users, like for example the NT Authority\SYSTEM user or the users which are added after the installation of SQL Server (ReportServer$SQLEXPRESS, ...
5
votes
1answer
2k views

Unable to delete a user from a Linux CentOS 6.3 machine, what can be done?

When I try deleting my user (from a root shell) it says userdel: cannot remove entry 'itaig' from /etc/passwd The user isn't even displayed on /etc/passwd. [root@ab2c1 ~]# su - itaig su: warning: ...
4
votes
2answers
6k views

Adding an existing user to a group with puppet

Is it possible to add an existing user to a group with puppet 2.7.18? We have two modules, each one defines one class : module "user" creates all users, including user foo and user bar. module ...
4
votes
2answers
3k views

How to secure Outlook Web Access against Brute Force attack?

I'd like to secure Outlook Web Access with Exchange 2010 against a brute force attack using account lockout. What is the best way to do this? I have the following group policy: Computer ...
4
votes
4answers
386 views

Transfer an account from a 'dead' domain

So - following from my previous question: How do I stop DFSR replication preventing a Domain Controller from advertising Domain Services?, I lost the FSMO DC, and my only other DC was in an ...
4
votes
5answers
635 views

Common user accounts between linux machines

I have a base system with a few (currently two) VMs on top of it, all running Ubuntu Server. I have to keep adding my user account on each system when I bring a new one up, as well as giving it sudo ...
4
votes
2answers
2k views

How to create linux account with useradd without creating mail spool

Summary Can I create a new user without creating mail spool and without modification of /etc/default/useradd ? Explaination I want to create a user that has a home directory and skeletion, but I ...
4
votes
2answers
14k views

How to find all ways in which a Unix user account is locked

I occasionally find myself in a situation where an undermaintained system has an account that's been locked out. The problem is that there are a variety of ways in which an account can be locked out, ...
4
votes
2answers
881 views

Scalable way to add users in Postfix without creating new unix/linux accounts?

What is the most scalable way to add new users in postfix? I don't necessarily want to create a new user in /etc/shadow just for email. I know I can use aliases but this does not solve the issue of ...
4
votes
2answers
1k views

Can I use Active Directory for user-level security in an Access application? Pretty Please?

My company makes fairly extensive use of an Access + MySQL application that would probably see some significant traffic on the Daily WTF if I posted the source code. The management of users and their ...
4
votes
5answers
538 views

User creation on Linux Redhat

Is there anyway one can determine when a user was created on Linux? I know of a couple of things one can do,but it's an unreliable way of doing it. The first option is checking when the home directory ...
4
votes
1answer
830 views

How can I determine who (or what) has blocked access to a centos user account?

CentOS 5.x A user account on my CenTOS server has become inaccessible and I'm not sure why. If I run chage -l foo I see: Minimum: 0 Maximum: 0 Warning: 5 Inactive -1 Last Change: ...
4
votes
2answers
853 views

Account management tools supporting self-service registration and email verification?

I work in a university environment that has in the past offered services almost exclusively to university affiliates who already have "formal" accounts in central user database. We are increasingly ...
4
votes
3answers
226 views

Two users using the same same user profile while not in a domain

I have a windows server 2003 acting as a terminal server, this computer is not a member of any domain. We demo our product on the server by creating a user account. The person logs in uses the demo ...
3
votes
5answers
3k views

Restore “lost” user after Active Directory removal?

Is it possible to restore lost users after Active Directory unistallation ? (I forgot to switch users to local users) The computer run Windows Server 2008 R2 Entreprise, and all the registry linked to ...
3
votes
3answers
469 views

Active Directory examples of hierarchy

i am in the process of restructuring the hierarchical structure of the local active directory server of the institution i am working for. I was wondering if anyone knew of any place i could find best ...
3
votes
7answers
31k views

Windows Server 2008 R2: User account set to not show on login

This afternoon I set up a Win Server 2008 R2 system for use with Team Foundation source code control. In order to give my team-mates the right to connect, I had to create a user account for each ...
3
votes
4answers
5k views

What do I need to be cautious of when changing a User Logon Name in Active Directory?

I'm new to my current employer, being their only Sysadmin. I'm seeing a small handful of users who have User Logon Names which don't conform to the naming convention standard which majority of users ...
3
votes
3answers
188 views

Good ways to disseminate login information, especially when new users are created?

When you create user logins in bulk, with set passwords as many users are unlikely to change their passwords, how do you disseminate the information? Students in our school division are automatically ...
3
votes
2answers
8k views

User account being frequently locked out

We are running in a Windows 2008 / Windows 7 environment. One on my users is being locked out of his Active Directory account on a daily basis. This occurs between 10 and 18 hours after each reset. ...
3
votes
1answer
245 views

Why would an interdomain trust account not require a password?

I am trying to understand why and interdomain trust account would have an account value of 2080 (INTERDOMAIN_TRUST_ACCOUNT – PASSWD_NOTREQD). During a routine audit, after we had recently set up a ...
3
votes
2answers
318 views

Best practices - Is it better to delete unused SQL accounts or just disabled them?

In an enterprise environment, is it better to delete limited access SQL accounts, or simply disable them?
3
votes
1answer
1k views

Does www-data user need a real shell?

Interestingly enough, on my Ubuntu derivative with nginx installed with apt, the www-data user has a shell: $ cat /etc/passwd www-data:x:33:33:www-data:/var/www:/bin/sh Shouldn't this be set to ...
3
votes
2answers
568 views

Setting up a limited user account on Windows Server

I'd like to create a user account on a Windows Server which can read whatever bits of C:\ it needs to be able to execute programs, but have no read access to D:\ except for D:\Special. It seems that ...
3
votes
1answer
401 views

Difference between Roaming profiles, User Profile, Home Folder, and Redirected Folders?

On the network where I work, it appears at various times people have had roaming profiles, user profiles, redirected folders, and home folders. What are the purposes and differences between these? ...
3
votes
2answers
1k views

SCCM - Where to put the create user step

I've implemented SCCM on our server and am now running task sequences to migrate from Windows XP to Win7. But we also need to be able to add a new local admin, because disable the default ...
3
votes
2answers
91 views

Give user-creation privileges to a user

In MySQL, how do you allow another user to create other users? In turn, those users should only be able to view some tables.
3
votes
1answer
3k views

Create restricted user on Debian server

I want to create a user account for each of the key programs installed on my debian server. For example, for the following programs: Tomcat Nginx Supervisor PostgreSQL This seems to be recommended ...
3
votes
1answer
306 views

Impersonation Service Account

I am bringing up AppXtender Workflow Manager. One of the instructions is to create an Impersonation Service Account. I have never heard of such. What is it and how do I create an impersonation service ...
3
votes
1answer
237 views

Change what fields are copied when copying an account in Active Directory?

I've noticed that all of the address with the exception of the street address is copied when copying an Active Directory user account. Is there a way to change this? We're currently running a 2003 AD ...
3
votes
5answers
2k views

Active Directory Account locks for no apparent reason

I've been troubleshooting this problem for two years and it keeps coming back. Our Mac users authenticate to our Active Directory server which is running Windows Server 2008 Standard. One of the Mac ...