Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

0
votes
1answer
22 views

Correct way to setup linux company share folder with usable permissions

I've just started working for a small company that has a globally shared folder run from an Ubuntu file server (Raid 5, etc) shared by Samba. The workstations (Centos) are all fstab setup to mount ...
0
votes
1answer
15 views

After using userdel -r to remove a user, user still appears on login screen (CentOS 7)

I used userdel -r [username] on CentOS 7 to delete a user, but the user is still appearing on the GUI login screen. Also, useradd now refuses to add the same username again, reporting that the user ...
2
votes
1answer
90 views

instanceType attribute in Active Directory

I need to change the instanceType attribute of a service account. If I try to change it from Active Directory Users and Computers console it's greyed out and if I try to change it via powershell with ...
0
votes
1answer
28 views

How to get the time and date at which a user account is locked/unlocked in unix?

I need to get the exact time and date at which a user account was locked or unlocked in Linux. passwd -S command can give the status of an account i.e., if its locked or unlocked.
7
votes
1answer
112 views

Reset GID/UID auto-increment numbers

I created a virtual mail user for postfix virtual mailboxes with a gid/uid of 5555, but now every new user I create starts at > 5555, is it possible to reset the autonumbering so normal users will be ...
0
votes
0answers
44 views

How to limit user permissions

I have 2 servers, one web server and one SQL Server. All Windows. Both servers have the same account created with the same password and IIS and SQL Server are configured to use those accounts. I also ...
-2
votes
1answer
30 views

AD Reset Multiple Passwords Simultaneously from LDAP Query [closed]

I have used a custom query in Active Directory to identify all users that have never logged in to the the domain. I need to reset all of their passwords and as there are several hundred I would prefer ...
2
votes
0answers
29 views

Can I pre-hash a Windows password and pass the hash when creating the account?

I am building some Windows VMs with Vagrant, and the Vagrant provisioner will create some users. I'd like to be able to commit the passwords for those users to source control, but obviously I don't ...
4
votes
0answers
30 views

Why is it common in the startup world for ssh keys to be used for authetication instead of kerberos? [closed]

My first few jobs as a linux admin had be working under some very senior admins. In all of these cases kerberos was setup for users to request a security token and gain access to company servers for ...
1
vote
4answers
78 views

Manage multiple linux users [closed]

I have a homelab there is growing larger and larger and I am learning more and more every day. I was wondering if it is possible to manage all of my users from one server? So i don't have to create a ...
0
votes
0answers
9 views

Appropriate user permissions for reading private dkim file contents from web app

As it stands, when sending email using clients like Thunderbird, my messages get signed with DKIM. However when generating emails from a web application, they do not get signed. As it stands I've ...
0
votes
2answers
25 views

PAM - LDAP authentication interaction

So far from what I understand it gets given a username/password pair, it then searches the LDAP for the username and tries to log into the LDAP using the distinguished name and the password pair, if ...
0
votes
0answers
71 views

How to change shell to /sbin/nologin in NIS with ypchsh?

I have a group of machines where logins are managed through NIS. I want to disable logins for certain accounts by setting the login shell to /sbin/nologin. I think ypchsh is the correct mechanism to ...
26
votes
6answers
2k views

How do I convince my company to invest in IT - domains, security, etc.?

I work for a small-medium size retailer which has half a dozen high street stores and a website. The IT situation is currently in a very basic state. As being "Head of IT" is only a small part of my ...
-2
votes
1answer
37 views

How to define a complex user usage rules in Mikrotik? [closed]

I want to define a 50 MB limit for each user in Mikrotik and after it is used, have a speed limit of 8 kbps speed for unlimited time. Furthermore, I would like this policy to be applied on a daily ...
1
vote
1answer
60 views

Central user management in mixed environment [closed]

We have various different operating systems, software and services including various Linux distros, Windows Server versions and services like Web, Mail, FTP, Samba, NFS, MS Exchange etc. We want to ...
1
vote
1answer
51 views

Adding/updating skeleton files after user creation

Background RedHat 7 (and 6) servers with multiple application servers (shared binaries). We set up separate user accounts when adding applications servers with $HOME = appserver_root. The ...
0
votes
0answers
35 views

AD DS audit event log when using RSAT

Got a query about AD DS audit event log when using Remote Server Administration Tools (AD User and Computer tool) On DC, already turn on Audit log for AD DS change (enable, disable, create, delete ...
1
vote
0answers
57 views

Directory permissions for user account linux

I am setting up a shared folder between several users on a Amazon AMI (details at the bottom). I am trying to get the folder shared with one user in particular which isnt working. My idea was to ...
1
vote
3answers
158 views

How does google compute engine create users and how to disable them?

I've got a CoreOS cluster running on GCE and one issue that I've noticed with all GCE instances is that as long as you're auth'd with the project on Google Cloud platform, you can login in as pretty ...
0
votes
2answers
151 views

Lost all local admin rights on domain joined computer

I'm in an unusual predicament in that there is no account I can use to add local admin rights to a computer with the exception of the Administrator account - which is disabled. On a new domain I'm ...
1
vote
0answers
53 views

DCOM Security Settings not exported with secedit

I've got a problem with exporting the DCOM-settings. I call secedit /export /cfg C:\UserAccess\config.txt This should export the COM and DCOM settings. But I don't get all of the settings. For ...
1
vote
1answer
44 views

AD SelfService for creating users [closed]

I've set up a small computer lab with approx. 30 computers with Win8. They are connected to an Active Directory (Windows Server 2012R2) and have roaming profiles. However, creating users causes ...
-2
votes
1answer
41 views

Best way to apply “one-shot quick fixes” to computers and users? [closed]

We often suffer from situations where we need to apply a quick fix for a bunch of users/computers. A quick fix can be a copy job, deleting a users browser cache or adding registry keys to HKCU to a ...
0
votes
0answers
35 views

Windows RD - Temporary Accounts in Terminal Services servers

We are facing this weird problem. Since a restart of the server recently, most of the user accounts are getting created with Temporary profiles. We followed a few blogs and followed steps as below: ...
0
votes
3answers
62 views

Hiding the active Administrator account in Windows 8

I am trying to use the integrated "Administrator" account in Windows 8. The problem is that I do not want this account to appear on the Welcome Screen for login. I tried to hide the account by using ...
0
votes
2answers
85 views

Removed AD User, Need to Associate Existing Profile to New Account

Some details Server 2012 R2 (AD Server) Windows 7 (Users Computer) Accidentally removed an AD User, stupid mistake. Unfortunately it seems the user was permanently deleted (didn't make use of the ...
2
votes
1answer
164 views

How to combine two foreach loops?

I've looked at how to combine multiple commands with psexec but none of the methods seems to work. Maybe it's because I'm running the script in PowerShell and not cmd.exe? I need to create user ...
0
votes
1answer
283 views

What permission is needed to use a service account to remote run powershell on a server?

I have a internal webapplication With a list of all the servers in our network. I want to be able to run a few PowerShell commands on the servers to gather usefull information. Invoke-WMIMethod and ...
0
votes
0answers
18 views

Permissions for copying files between datacenter machines?

I frequently run experiments in EC2 where e.g. I will check out a VM similar to our database and will want to load the production dataset into it for experimentation. I have to copy the dataset onto ...
0
votes
0answers
126 views

Mikrotik user managment with expire date

I am trying to make WiFi user management for my apartments. I have RouterBoard RB951Ui-2HnD. I have free WiFi for my guests so I need user manager where I can enter start date (can be first login) and ...
0
votes
0answers
113 views

Exchange 2013 - deleted AD user but mailbox not listed as disconnected

Two days ago, I removed a user's account from Exchange and AD using the Exchange Control Panel's delete function. Normally, a short period of time after doing so, a user's mailbox will show up in the ...
0
votes
2answers
121 views

Add a user from root with ssh key

Perhaps a strange question, but I'm not a shell script expert. I'm provisioning an Ubuntu server starting out as root. I'd like to non-interactively setup a new user account, remove root login and ...
-1
votes
2answers
60 views

How do I remove my user from the “roots” group? [closed]

I accidentally added my user myuser to the group root using the command sudo usermod -a -G root myuser. Now I want to remove myuser from roots, but I am unable to do so. I tried the following: ...
0
votes
1answer
77 views

Bulk update Exchange Manager/Direct Reports data

I'm looking for an easy way to quickly update (and keep up to date) the Manager - Direct Reports data in Exchange Online. Right now, the only way I have is to go into EAC and manually update one user ...
0
votes
2answers
3k views

Creating FTP user to access a specific directory with SFTP in Linux Ubuntu Server 14.04 LTS

I'm creating an FTP user on Linux Ubuntu Server 14.04 LTS, but when I try to log in via FileZilla with SFTP I get the following error: Received unexpected end-of-file from SFTP server If I try to ...
-1
votes
1answer
585 views

How would I add an SSH user as a member of www-data jailed to /var/www/html/?

I have been trying to setup ftp access on my Ubuntu 14.04 Apache2 server and so far I only have a root user. The problem I am running into is that the uploaded files are owned by this user whereas I ...
0
votes
1answer
178 views

“Entire Directory” option missing from Locations in “Select Users, Computers, SrvAct, or Groups” dialog

I'm a very inexperienced server admin, so if fail to provide some important information I apologize in advance. I am doing some development for a very small software company and I'm having a bit of an ...
-1
votes
1answer
149 views

How to enable Dovecot virtual users to change their password using passwd-file?

I am running Dovecot with several virtual users in passwd-file: http://wiki2.dovecot.org/AuthDatabase/PasswdFile . The file is /etc/dovecot/userdb . How can I enable the users to change their ...
2
votes
0answers
67 views

Synchronizing web application users with corporate directory/database [closed]

We're building a web app positioned towards corporations; and have a need to maintain an up to date repository of user data for all corporate users of our web application. We're well aware of how to ...
1
vote
0answers
85 views

Change Server 2012 R2 domain name in network section

In the network section of a Windows Server 2012 R2 displays the name of the domain as domain 2. For example: "mydomain.net 2". Ive seen similar problems with wireless profiles and that can be resolved ...
1
vote
2answers
95 views

can we create user's home directory with space in name? like /test 123

i need to map some path like /data/test 123 as home directory for user testuser, but it is not accepting space in home directory path ? it is not allowing me to change path using usermod -m -d /new ...
2
votes
0answers
378 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
1
vote
1answer
1k views

How can I determine the last user who logged on to each PC on our domain?

We have a network of primarily Windows 7 (and Windows 8.1) PCs, and we'd like to be able to report on who is the most recent person to have logged on to the various hosts. We've got SCCM in place; ...
1
vote
1answer
1k views

How to apply PostgreSQL “GRANT ALL ON ALL TABLES” to new tables?

As discussed in the question at GRANT SELECT to all tables in postgresql, as of PG 9.0 you can mass-grant privileges on all existing tables to user u, using a command like: GRANT ALL ON ALL TABLES IN ...
-1
votes
1answer
147 views

Is there a way to find out who was logged on a Windows server in a past year?

I'm just wondering, is there a way to find out who was logged on a particular Windows server in the past year? Security log is only 1 month old or less and user profiles were deleted. Thanks a lot for ...
10
votes
2answers
2k views

Cannot create new user account Windows Server 2012

I created a Windows Domain account that works on MYDOMAIN. All computers attached to MYDOMAIN can use the credentials I have created for log on except for one. On PROBLEMSERVER01 when I try to log ...
-1
votes
2answers
54 views

How to manage server configurations for small projects and servers? [closed]

I have been developing a web application which recently launched. Now I am continuing with improvements and want to create a staging server similar to the production server. I know of the existence ...
6
votes
1answer
334 views

“Get-AdComputer -filter” doesnt return anything when looking for Vista Clients

Why does Get-Computers -OperatingSystem "Windows VistaT Business" not return anything? It works perfectly for all the other OS types. Function Get-Computers { Param($OperatingSystem) ...
3
votes
2answers
216 views

How do I make it as if I've never logged into a workstation with a Domain AD user profile?

I've been working on setting up OneDrive for Business with automatic syncing and folder redirection. I got everything working, but there were some issues along the way. In dealing with those issues ...