Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

-1
votes
1answer
32 views

Is there a way to find out who was logged on a Windows server in a past year?

I'm just wondering, is there a way to find out who was logged on a particular Windows server in the past year? Security log is only 1 month old or less and user profiles were deleted. Thanks a lot for ...
10
votes
1answer
142 views
+50

Cannot create new user account Windows Server 2012

I created a Windows Domain account that works on MYDOMAIN. All computers attached to MYDOMAIN can use the credentials I have created for log on except for one. On PROBLEMSERVER01 when I try to log ...
-1
votes
2answers
41 views

How to manage server configurations for small projects and servers? [closed]

I have been developing a web application which recently launched. Now I am continuing with improvements and want to create a staging server similar to the production server. I know of the existence ...
5
votes
1answer
79 views

“Get-AdComputer -filter” doesnt return anything when looking for Vista Clients

Why does Get-Computers -OperatingSystem "Windows VistaT Business" not return anything? It works perfectly for all the other OS types. Function Get-Computers { Param($OperatingSystem) ...
0
votes
0answers
19 views

NIS on mulithomed system serving two separate subnets, with two different dns domain names

We have problem with setting up NIS and using one NIS domain in two separate networks. Our current setup is as follows: We have one computing cluster with 20 PCs in a local subnet (192.168.0.0/24, we ...
3
votes
2answers
173 views

How do I make it as if I've never logged into a workstation with a Domain AD user profile?

I've been working on setting up OneDrive for Business with automatic syncing and folder redirection. I got everything working, but there were some issues along the way. In dealing with those issues ...
-4
votes
1answer
68 views

Restrict Access from certain machines to my Web Application in LAN [closed]

I am trying to deploy a Local Network web application, which should not necessitate a client login. The requirement is to block certain machines, (not users, just a few computers, the application ...
0
votes
0answers
316 views

Why might the Jenkins user not have permission to access the Docker unix socket?

I've added the jenkins user to the docker group thinking that it would allow Jenkins jobs to run Docker commands. If I switch to the jenkins user, I can verify it works (manually): ubuntu@hostname:~$ ...
2
votes
1answer
37 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
3
votes
4answers
330 views

Powershell arrays and comparissons

Im a Linux Sys Admin by profession, but am having to do some powershelling. My problem is this: Im getting a list of active users from the AD with this command: $allusers= get-aduser -Filter ...
2
votes
3answers
128 views

Moving several desktops from /etc/passwd to LDAP

I am aware that questions about migration to LDAP are nothing new. I've searched for info for quite a bit now, but the problem I found is that information seems rather fragmented on the topic. So I ...
0
votes
1answer
24 views

MySQL: Grant permissions for `start transaction` and “surroundings”

I have created a sample user with the following request: grant select, insert, update, delete on db.* to user@localhost identified by 'pass'; but that user does also need permission to use start ...
0
votes
1answer
26 views

Determine the setup of an existing SFTP user

CentOs 6 Linux Server I have an SFTP user (userok) that is jailed to a particular sub domain. All working perfectly fine and that is all that user has access to (full permissions). I have just ...
1
vote
1answer
39 views

Apache require user does not stop other users from access

I have created a subfolder and wanted to restrict its access to a certain user ("michael_mayer"). # User Michael Mayer Alias /michael_mayer /var/www/webdav/users/michael_mayer <Directory ...
2
votes
2answers
92 views

Is there a way to have puppet create a user's home folder (managehome) but not delete when ensure is 'absent'?

My first thought was doing something like this: define my_user( $name = $title, $ensure = present, $uid, $gid, $password, $groups, $comment, $shell ) { $managehome = $ensure ? { present ...
0
votes
0answers
25 views

Limit FTP access to only one file

I plan to test out a new developer for our team and I'd like to grant him access to FTP, so he can work and test out things directly. However, it's a complex system he got to work on, with many files, ...
0
votes
0answers
33 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
1
vote
2answers
25 views

How can we ensure that a user who is not realized does not exist in that puppet node?

We declare all our users as virtual resources. E.g.: @user { 'belmin': uid => 2001 comment => 'Belmin Fernandez', groups => ['sysadmins'], } Sometimes we temporarily realize a ...
0
votes
1answer
101 views

Get login name using email address with Powershell

I need a powershell script, to get login names using the e-mail address. i am having a note with e-mail address of some users. I want to get login IDs and account information of the users in the ...
1
vote
1answer
127 views

How to allow user to use RDP connection to windows azure Windows Server VM instance?

I created a Windows Server 2012 R2 VM instance in Windows Azure and I can connect to it. I created a new user account for my friend (*not admin). Opened new MSTSC instance and tried to connect to ...
1
vote
0answers
102 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
-1
votes
1answer
40 views

Powershell Security Groups

Active Directory via powershell want to add users to a specific group. But that is a member of a particular group of users that other members do not want to be included in the relevant group. For ...
0
votes
0answers
23 views

Create account for service

I am configuring a new server. The server is running Hudson that is going to copy some files from this server to another. The other server is a virtual machine. Both running Windows Server 2012. ...
0
votes
2answers
76 views

How to import bulk data into specified field in active directory

I have about 500 users in my AD and I need to Modify an specified field data. But I don't want to do that one by one. How can I do that?
0
votes
1answer
143 views

Securing MySQL debian-sys-maint

With a fresh (but old) install of Ubuntu and MySQL, I found I could access the MySQL via command line client without being asked for any user or password. This bothered me as the default situation, ...
1
vote
2answers
71 views

How to get the port number a user ssh'd in on?

I am transitioning servers away from port 22 in an existing multiuser environment. I have configured sshd to listen on two ports: 22 and the new port. Now I would like to detect when a user connects ...
1
vote
1answer
59 views

How to manage local groups on a remote machine?

I have a Windows Server 2008 machine that exists as part of a domain, but I have no permissions to modify Domain Users, Domain Groups, Group Policies, etc. I have a few file shares on this machine and ...
0
votes
1answer
74 views

Automated third party software for Active Directory administration [closed]

I have a situation where there are multiple Active Directory (AD) groups that each account is added to but each group have different expiration dates. For example, user1 will be in groupA and ...
0
votes
2answers
80 views

puppet nis user management

I started using puppet for managing our RHEL servers. At this point I try to setup the user management. We are running a NIS environment on our campus, so until now I added the line +testuser::::: to ...
0
votes
1answer
115 views

Postfix virtual mailbox base, uid, gid — good user and group choice?

I often see tutorials for setting up Postfix with the virtual mailbox delivery agent on Linux that instruct to create a new disabled-login user and group to own virtual mailboxes in ...
0
votes
1answer
37 views

Including default files and folders in User's home directory

I'm using ubuntu server 14.04. I want to include some default files and folders in home directory for every user, whenever a new user account is created. How to make this. Can anyone help me in this. ...
3
votes
1answer
55 views

The ipmitool conundrum

We have been trying to migrate to a better password management system on our server. The problem was that all this days we were using a proprietary algorithm to create a hash (a decryptable hash). In ...
0
votes
1answer
335 views

Need help - limit access to sftp user to other users home->subfolder

I have been able to find a lot of help with jailing a user to their own home folder and restricting them only to sftp but I working on a more advanced solution. What I am trying to do and can't find ...
0
votes
1answer
44 views

Usergroups in LDAP: User and Group in same object

"Usergroups" are a common concept in UNIX, many Linux distributions (e.g. Debian) use it as default. It means that each user has its corresponding private group (e.g., User "alex" has also a group ...
-1
votes
1answer
33 views

Deletion of User and home directory from NFS

I have 10 systems with opensuse installed in each of them.I have created 2 servers such that one is NIS and other is NFS , i have added lets say 5 users to NIS and their corresponding home ...
1
vote
1answer
20 views

Permissions issue in Munin

I have a Fedora machine on which I have successfully installed and configured Munin. The issue that I now face is of permissions. So basically, I have a directory where I have pointed all my html ...
0
votes
1answer
83 views

Set Linux user account expiration after user logs in

I'm looking to have Linux user account expire 7 days after the user logs in. Is there any solution aside from a custom-written script which checks and updates user accounts? I have already looked at ...
4
votes
1answer
5k views

PowerShell - Finding all of users' group memberships and kicking it out of them

as title says, I have to find all the groups that the user is a member of, and deleting its membership from all of them. I've tried this: get-adgroup -filter * | where {(Get-ADGroupMember $_ | ...
2
votes
2answers
3k views

PowerShell - Limit the search to only one OU

Ive got this cmdlet and I'd like to limit the results to only one OU: Get-ADUser -Filter {(Enabled -eq $false)} | ? { ($_.distinguishedname -notlike '*Disabled Users*') } Now Ive tried to use ...
3
votes
3answers
3k views

PowerShell script that should find disabled users that are not in a specific OU outputs users from that OU as well

Hey I've got this cmdlet here: Get-ADUser -filter {(distinguishedName -notlike "Disabled Users") -and (enabled -eq $false)} -searchBase "ou=FirstOU,dc=domain,dc=com" I've built it to find disabled ...
0
votes
1answer
32 views

Powershell waiting for more parameters when asking for all users from a specific OU?

I want to get all the users from OU "myusers" so I have this cmdlet right here: get-aduser -filter * -searchbase"ou=myusers,dc=domain,dc=com" But when Im running it, powershell prints a >> ...
0
votes
1answer
35 views

What account should own the files on a shared ubuntu webserver? [duplicate]

I have multiple users with FTP access to my ubuntu server, each running their own website. Apache is running as default after installed through apt-get. I believe www-data is the apache user. If the ...
-1
votes
2answers
72 views

Count of Unix users: how many is too much? [closed]

I know about Postfix MTA configuration concepts: there's tree of them and the last one is most-appropriate only because it doesn't require new Unix user to be created for new mailbox creation. From ...
1
vote
0answers
37 views

Can end user using Forefront Identity Manager to leave security group?

In our company, users logon their desktop with AD and access Sharepoint using Windows authentication. Our users frequency changing teams. After they changed team, their access to old Sharepoint team ...
2
votes
2answers
2k views

What's the best way to see logged in users on Windows Server 2012?

Right now I use a powershell script to see the currently logged in users. But I don't see if there session is idle, active or inactive. I can see when the session was started but that's it. Is there a ...
1
vote
0answers
62 views

Set git config for a group instead of user or systemwide

We have configured git config --system init.templatedir /path/ on our system to automatically create required githooks for each new repository created via git init. However, there is another group of ...
2
votes
1answer
16k views

How to disable user's password via puppet securely?

I have my SSH servers setup to use only Public Key authentication with password authentication disabled. When adding users through puppet I would like to disable user passwords. So far I have came ...
1
vote
1answer
41 views

Lock user account and still be able to log in through ssh public key?

is it possible to have a user account in Linux that can only login through its SSH public key? I thought to simply do sudo passwd -l myuser and lock the account (so I don't need to generate some ...
0
votes
1answer
93 views

How do I apply NTFS permissions to protect user profiles?

I want to set NTFS permissions on a users home directory so that one user cannot access another users home directory. How do I go about doing that? I need to be able to apply this to hundreds of users ...
6
votes
1answer
326 views

Providing normal users(non-root) with initialization and shutdown auto-run capabilities

I'm hosting an experimental/testing Linux box, running Debian Wheezy 7.4.0 distribution. Different users log into the machine over ssh to their accounts and are allowed to run the development tools ...