Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

0
votes
1answer
33 views

MySQL: Grant permissions for `start transaction` and “surroundings”

I have created a sample user with the following request: grant select, insert, update, delete on db.* to user@localhost identified by 'pass'; but that user does also need permission to use start ...
-1
votes
1answer
20 views

How to enable Dovecot virtual users to change their password using passwd-file?

I am running Dovecot with several virtual users in passwd-file: http://wiki2.dovecot.org/AuthDatabase/PasswdFile . The file is /etc/dovecot/userdb . How can I enable the users to change their ...
0
votes
1answer
12 views

“Entire Directory” option missing from Locations in “Select Users, Computers, SrvAct, or Groups” dialog

I'm a very inexperienced server admin, so if fail to provide some important information I apologize in advance. I am doing some development for a very small software company and I'm having a bit of an ...
1
vote
1answer
923 views

Windows 2008 Group Policy Setting? - Migration Headache

I have a small domain of users that I just migrated from a linux domain running open-ldap. Our new servers are running Windows 2008 Standard. I've installed Active Directory and everything is ...
3
votes
4answers
137 views

Casual Business Computer Management

Been working a lot with local businesses who operate in a more casual manner. No Active Directory, no passwords, and free web browsing and downloading applications at will to where every computer is ...
1
vote
1answer
68 views

How can I determine the last user who logged on to each PC on our domain?

We have a network of primarily Windows 7 (and Windows 8.1) PCs, and we'd like to be able to report on who is the most recent person to have logged on to the various hosts. We've got SCCM in place; ...
1
vote
4answers
5k views

How can I limit a users bandwidth in Windows Server 2008 R2 [closed]

We have a user that likes to download movies with torrents in our office and it just kills the overall network performance. Unfortunately we need this user and don't want to confront him directly ...
26
votes
8answers
2k views

Email hoarder intervention and education - (Exchange environment)

Throughout my career, I've encountered quite a few users who were email hoarders... I'm managing a 100-user environment where users previously had 100mb quotas and a basic Cyrus IMAP/Postfix ...
1
vote
0answers
16 views

Synchronizing web application users with corporate directory/database [closed]

We're building a web app positioned towards corporations; and have a need to maintain an up to date repository of user data for all corporate users of our web application. We're well aware of how to ...
1
vote
0answers
25 views

Change Server 2012 R2 domain name in network section

In the network section of a Windows Server 2012 R2 displays the name of the domain as domain 2. For example: "mydomain.net 2". Ive seen similar problems with wireless profiles and that can be resolved ...
1
vote
5answers
4k views

Finding Locked Out Users

Active Directory up to 2008 network (our servers are a mix of 2008, 2003...) I'm looking for a quick way to query AD to find out what users are locked out, preferably from a batch or script file, to ...
1
vote
2answers
43 views

can we create user's home directory with space in name? like /test 123

i need to map some path like /data/test 123 as home directory for user testuser, but it is not accepting space in home directory path ? it is not allowing me to change path using usermod -m -d /new ...
2
votes
0answers
54 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
3
votes
3answers
192 views

End-User AD Management solution

We've just migrated to a pure Microsoft environment and are looking for an end-user AD management solution. Ideally we'd like users to be able to manage their personal info in AD. We have ~500 users ...
1
vote
2answers
84 views

How to train users converting from PC to Mac/Apple at a small non profit?

Background: I am part of a team that provides volunteer tech support to a local non profit. We are in the position to obtain a grant to update almost all of our computers (many of them 5 to 7 year ...
9
votes
1answer
853 views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would it to have centralized control of user accounts (at least, I think I'd ...
3
votes
4answers
788 views

What are my options for centralizing Unix user management

We have 15 Debian servers and growing. What's a simple, lightweight method for centralizing user management? Use cases would be adding a user across all servers, tweaking a users access on a specific ...
2
votes
4answers
2k views

In simple terms the difference between a Group and a Role in OTRS Ticket system?

I'm new to this whole OTRS/Help ticket system notion. Be grateful if anybody could provide a simple example that differentiates between a User in a Group and a User associated with a Role in OTRS. ...
6
votes
4answers
5k views

Create SSH user with limited privileges to only use Git repository

I have a git repository hosted on my SunOS server, that I remotely use through ssh git clone ssh://myUser@mydomain.com/path/to/git Now I need to add more users to be able to access that repository, ...
4
votes
3answers
7k views

Adding an existing user to a group with puppet

Is it possible to add an existing user to a group with puppet 2.7.18? We have two modules, each one defines one class : module "user" creates all users, including user foo and user bar. module ...
0
votes
0answers
45 views

Active Directory - Set permission if user is present in all of the specific groups

The bussiness isue: implementing RBAC (Role Based Access Control) using Active Directory Groups mechanism. imagine having the following AD "Organization" groups: Core Development Team Sales Team ...
0
votes
1answer
652 views

Why might the Jenkins user not have permission to access the Docker unix socket?

I've added the jenkins user to the docker group thinking that it would allow Jenkins jobs to run Docker commands. If I switch to the jenkins user, I can verify it works (manually): ubuntu@hostname:~$ ...
0
votes
0answers
61 views

Access denied while executing NANT task “exec sc”

Im confused. I have Windows Server 2012 R2 and two users "administrator and user1". The "user1" is ment to run some services (services are configured to run under this user) and the services work via ...
1
vote
1answer
75 views

How to apply PostgreSQL “GRANT ALL ON ALL TABLES” to new tables?

As discussed in the question at GRANT SELECT to all tables in postgresql, as of PG 9.0 you can mass-grant privileges on all existing tables to user u, using a command like: GRANT ALL ON ALL TABLES IN ...
2
votes
3answers
12k views

FTP Error 530, User cannot log in, home directory inaccessible

I've been tasked with setting up an FTP directory for a client of ours. I'm working from a Windows 2008 Server with IIS 7 installed. To create the FTP user directory I've followed this eHow tutorial. ...
6
votes
3answers
5k views

How can I rename an unix user?

I have a user named hedgehog and I want him to be named squirrel, but I don't want to change his numeric user ID. How can I accomplish this?
10
votes
1answer
219 views

Cannot create new user account Windows Server 2012

I created a Windows Domain account that works on MYDOMAIN. All computers attached to MYDOMAIN can use the credentials I have created for log on except for one. On PROBLEMSERVER01 when I try to log ...
-1
votes
1answer
45 views

Is there a way to find out who was logged on a Windows server in a past year?

I'm just wondering, is there a way to find out who was logged on a particular Windows server in the past year? Security log is only 1 month old or less and user profiles were deleted. Thanks a lot for ...
5
votes
1answer
59 views

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public ...
-1
votes
2answers
44 views

How to manage server configurations for small projects and servers? [closed]

I have been developing a web application which recently launched. Now I am continuing with improvements and want to create a staging server similar to the production server. I know of the existence ...
5
votes
1answer
138 views

“Get-AdComputer -filter” doesnt return anything when looking for Vista Clients

Why does Get-Computers -OperatingSystem "Windows VistaT Business" not return anything? It works perfectly for all the other OS types. Function Get-Computers { Param($OperatingSystem) ...
4
votes
1answer
7k views

PowerShell - Finding all of users' group memberships and kicking it out of them

as title says, I have to find all the groups that the user is a member of, and deleting its membership from all of them. I've tried this: get-adgroup -filter * | where {(Get-ADGroupMember $_ | ...
0
votes
0answers
35 views

NIS on mulithomed system serving two separate subnets, with two different dns domain names

We have problem with setting up NIS and using one NIS domain in two separate networks. Our current setup is as follows: We have one computing cluster with 20 PCs in a local subnet (192.168.0.0/24, we ...
12
votes
4answers
15k views

How do I log every command executed by a user?

I want to monitor all user's activity in my server. Even when the user executes a shell command from some editor like vim I want to see them in the log file. I have checked the tool acct but it is ...
23
votes
6answers
39k views

GRANT SELECT to all tables in postgresql

Is there a one-liner that grants the SELECT permissions to a new user postgresql? Something that would implement the following pseudo-code: GRANT SELECT ON TABLE * TO my_new_user;
3
votes
2answers
180 views

How do I make it as if I've never logged into a workstation with a Domain AD user profile?

I've been working on setting up OneDrive for Business with automatic syncing and folder redirection. I got everything working, but there were some issues along the way. In dealing with those issues ...
-4
votes
1answer
97 views

Restrict Access from certain machines to my Web Application in LAN [closed]

I am trying to deploy a Local Network web application, which should not necessitate a client login. The requirement is to block certain machines, (not users, just a few computers, the application ...
0
votes
1answer
52 views

Script to apply Simple Finder restrictions to Mac OS X user?

Is it possible to script (e.g. with AppleScript or bash shell script) applying the Simple Finder and an associated application whitelist to a local user account on Mac OS X? We are using Mac OS X ...
3
votes
4answers
770 views

Powershell arrays and comparissons

Im a Linux Sys Admin by profession, but am having to do some powershelling. My problem is this: Im getting a list of active users from the AD with this command: $allusers= get-aduser -Filter ...
2
votes
1answer
49 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
2
votes
3answers
162 views

Moving several desktops from /etc/passwd to LDAP

I am aware that questions about migration to LDAP are nothing new. I've searched for info for quite a bit now, but the problem I found is that information seems rather fragmented on the topic. So I ...
0
votes
1answer
28 views

Determine the setup of an existing SFTP user

CentOs 6 Linux Server I have an SFTP user (userok) that is jailed to a particular sub domain. All working perfectly fine and that is all that user has access to (full permissions). I have just ...
1
vote
1answer
45 views

Apache require user does not stop other users from access

I have created a subfolder and wanted to restrict its access to a certain user ("michael_mayer"). # User Michael Mayer Alias /michael_mayer /var/www/webdav/users/michael_mayer <Directory ...
2
votes
2answers
135 views

Is there a way to have puppet create a user's home folder (managehome) but not delete when ensure is 'absent'?

My first thought was doing something like this: define my_user( $name = $title, $ensure = present, $uid, $gid, $password, $groups, $comment, $shell ) { $managehome = $ensure ? { present ...
-1
votes
0answers
40 views

Limit FTP access to only one file

I plan to test out a new developer for our team and I'd like to grant him access to FTP, so he can work and test out things directly. However, it's a complex system he got to work on, with many files, ...
0
votes
0answers
46 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
1
vote
2answers
30 views

How can we ensure that a user who is not realized does not exist in that puppet node?

We declare all our users as virtual resources. E.g.: @user { 'belmin': uid => 2001 comment => 'Belmin Fernandez', groups => ['sysadmins'], } Sometimes we temporarily realize a ...
0
votes
1answer
371 views

Get login name using email address with Powershell

I need a powershell script, to get login names using the e-mail address. i am having a note with e-mail address of some users. I want to get login IDs and account information of the users in the ...
1
vote
1answer
193 views

How to allow user to use RDP connection to windows azure Windows Server VM instance?

I created a Windows Server 2012 R2 VM instance in Windows Azure and I can connect to it. I created a new user account for my friend (*not admin). Opened new MSTSC instance and tried to connect to ...
1
vote
0answers
142 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...