Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

learn more… | top users | synonyms

0
votes
1answer
22 views

Correct way to setup linux company share folder with usable permissions

I've just started working for a small company that has a globally shared folder run from an Ubuntu file server (Raid 5, etc) shared by Samba. The workstations (Centos) are all fstab setup to mount ...
12
votes
2answers
65k views

What's the best way to see logged in users on Windows Server 2012?

Right now I use a powershell script to see the currently logged in users. But I don't see if there session is idle, active or inactive. I can see when the session was started but that's it. Is there a ...
2
votes
1answer
3k views

vsftp give user only access to a certain folder

I use CentOS 5.5 and I installed vsftp. I created a user "myUser" and every time I use Filezilla and log with this user I get directed to the users home-folder, but still have access to pretty much ...
0
votes
1answer
15 views

After using userdel -r to remove a user, user still appears on login screen (CentOS 7)

I used userdel -r [username] on CentOS 7 to delete a user, but the user is still appearing on the GUI login screen. Also, useradd now refuses to add the same username again, reporting that the user ...
0
votes
2answers
3k views

Creating FTP user to access a specific directory with SFTP in Linux Ubuntu Server 14.04 LTS

I'm creating an FTP user on Linux Ubuntu Server 14.04 LTS, but when I try to log in via FileZilla with SFTP I get the following error: Received unexpected end-of-file from SFTP server If I try to ...
2
votes
1answer
90 views

instanceType attribute in Active Directory

I need to change the instanceType attribute of a service account. If I try to change it from Active Directory Users and Computers console it's greyed out and if I try to change it via powershell with ...
0
votes
1answer
29 views

How to get the time and date at which a user account is locked/unlocked in unix?

I need to get the exact time and date at which a user account was locked or unlocked in Linux. passwd -S command can give the status of an account i.e., if its locked or unlocked.
7
votes
1answer
112 views

Reset GID/UID auto-increment numbers

I created a virtual mail user for postfix virtual mailboxes with a gid/uid of 5555, but now every new user I create starts at > 5555, is it possible to reset the autonumbering so normal users will be ...
3
votes
3answers
19k views

PowerShell - Limit the search to only one OU

Ive got this cmdlet and I'd like to limit the results to only one OU: Get-ADUser -Filter {(Enabled -eq $false)} | ? { ($_.distinguishedname -notlike '*Disabled Users*') } Now Ive tried to use ...
2
votes
2answers
3k views

Whould changing the administrator username effect the other setting on my windows server 2008 R2?

I would like to change the default administrator username on my Windows Server 2008 R2 but not sure whether it would effect my environment badly or not. I am also connecting to my server with this ...
5
votes
3answers
3k views

How do you tell if a user is “allowed to log in” on Linux?

The question is simple, I want to list all the user accounts which can log in to my system, but I'm not sure if that all the users in /etc/passwd are "could login" users? Details: I can see users ...
0
votes
0answers
44 views

How to limit user permissions

I have 2 servers, one web server and one SQL Server. All Windows. Both servers have the same account created with the same password and IIS and SQL Server are configured to use those accounts. I also ...
-2
votes
1answer
30 views

AD Reset Multiple Passwords Simultaneously from LDAP Query [closed]

I have used a custom query in Active Directory to identify all users that have never logged in to the the domain. I need to reset all of their passwords and as there are several hundred I would prefer ...
13
votes
4answers
11k views

How can I force other users to log out?

Is there a simple way for me to force another user off of a linux box, while I am logged in as root? I understand that I could determine what type of session they have open, and kill the pid - but ...
2
votes
0answers
29 views

Can I pre-hash a Windows password and pass the hash when creating the account?

I am building some Windows VMs with Vagrant, and the Vagrant provisioner will create some users. I'd like to be able to commit the passwords for those users to source control, but obviously I don't ...
17
votes
3answers
39k views

Force authenticated user immediate logoff (emergency case)

In Active Directory if you want to prevent a user from logging in you can either disable their account or simply reset their password. However, if you have a user who is already logged in to a ...
3
votes
4answers
1k views

What happens to my SQL Server logins if I change a windows domain username

My question is very similar to this question Changing Windows Domain UserName but the original question doesn't explicitly answer my slight variation. If I change a windows users username (if they ...
4
votes
0answers
30 views

Why is it common in the startup world for ssh keys to be used for authetication instead of kerberos? [closed]

My first few jobs as a linux admin had be working under some very senior admins. In all of these cases kerberos was setup for users to request a security token and gain access to company servers for ...
0
votes
0answers
18 views

Permissions for copying files between datacenter machines?

I frequently run experiments in EC2 where e.g. I will check out a VM similar to our database and will want to load the production dataset into it for experimentation. I have to copy the dataset onto ...
0
votes
2answers
153 views

Lost all local admin rights on domain joined computer

I'm in an unusual predicament in that there is no account I can use to add local admin rights to a computer with the exception of the Administrator account - which is disabled. On a new domain I'm ...
1
vote
4answers
78 views

Manage multiple linux users [closed]

I have a homelab there is growing larger and larger and I am learning more and more every day. I was wondering if it is possible to manage all of my users from one server? So i don't have to create a ...
0
votes
1answer
266 views

Active Directory remove user from GroupA if member of GroupB

In Active Directory, how do I efficiently remove all users from GroupA who are members of GroupB? Basically I want to subtract B from A. Have now: AAA BBB --- --- Alice Alice ...
0
votes
0answers
9 views

Appropriate user permissions for reading private dkim file contents from web app

As it stands, when sending email using clients like Thunderbird, my messages get signed with DKIM. However when generating emails from a web application, they do not get signed. As it stands I've ...
0
votes
2answers
25 views

PAM - LDAP authentication interaction

So far from what I understand it gets given a username/password pair, it then searches the LDAP for the username and tries to log into the LDAP using the distinguished name and the password pair, if ...
26
votes
6answers
2k views

How do I convince my company to invest in IT - domains, security, etc.?

I work for a small-medium size retailer which has half a dozen high street stores and a website. The IT situation is currently in a very basic state. As being "Head of IT" is only a small part of my ...
0
votes
0answers
73 views

How to change shell to /sbin/nologin in NIS with ypchsh?

I have a group of machines where logins are managed through NIS. I want to disable logins for certain accounts by setting the login shell to /sbin/nologin. I think ypchsh is the correct mechanism to ...
4
votes
3answers
9k views

Migrate user profiles to new Active Directory Accounts

I have a few users in a very old workgroup that log directly into their local machines (Windows XP Pro). This week they're finally moving to active directory and will need to log into domain accounts ...
0
votes
1answer
367 views

Where is my Users Account -> Advanced Tab?

I'm running XP Pro SP-3. I want to manage my user network passwords as in this tab: But for some reason when I go to my user accounts I get a different view and nowhere to get to this feature.
10
votes
2answers
2k views

Cannot create new user account Windows Server 2012

I created a Windows Domain account that works on MYDOMAIN. All computers attached to MYDOMAIN can use the credentials I have created for log on except for one. On PROBLEMSERVER01 when I try to log ...
-2
votes
1answer
37 views

How to define a complex user usage rules in Mikrotik? [closed]

I want to define a 50 MB limit for each user in Mikrotik and after it is used, have a speed limit of 8 kbps speed for unlimited time. Furthermore, I would like this policy to be applied on a daily ...
9
votes
2answers
2k views

Simple, centralized user management on a small LAN - NIS or LDAP?

I'm setting up a small LAN for my team. It will, for all intents and purposes, not be connected to any external networks. I would like it to have centralized control of user accounts (at least, I ...
1
vote
1answer
51 views

Adding/updating skeleton files after user creation

Background RedHat 7 (and 6) servers with multiple application servers (shared binaries). We set up separate user accounts when adding applications servers with $HOME = appserver_root. The ...
1
vote
1answer
60 views

Central user management in mixed environment [closed]

We have various different operating systems, software and services including various Linux distros, Windows Server versions and services like Web, Mail, FTP, Samba, NFS, MS Exchange etc. We want to ...
0
votes
0answers
35 views

AD DS audit event log when using RSAT

Got a query about AD DS audit event log when using Remote Server Administration Tools (AD User and Computer tool) On DC, already turn on Audit log for AD DS change (enable, disable, create, delete ...
1
vote
3answers
158 views

How does google compute engine create users and how to disable them?

I've got a CoreOS cluster running on GCE and one issue that I've noticed with all GCE instances is that as long as you're auth'd with the project on Google Cloud platform, you can login in as pretty ...
0
votes
3answers
62 views

Hiding the active Administrator account in Windows 8

I am trying to use the integrated "Administrator" account in Windows 8. The problem is that I do not want this account to appear on the Welcome Screen for login. I tried to hide the account by using ...
1
vote
1answer
949 views

Windows 2008 Group Policy Setting? - Migration Headache

I have a small domain of users that I just migrated from a linux domain running open-ldap. Our new servers are running Windows 2008 Standard. I've installed Active Directory and everything is ...
1
vote
0answers
58 views

Directory permissions for user account linux

I am setting up a shared folder between several users on a Amazon AMI (details at the bottom). I am trying to get the folder shared with one user in particular which isnt working. My idea was to ...
1
vote
3answers
308 views

Managing Linux users remotely

In a Linux network, is it possible to manage permissions from a central location? If I have an LDAP server where users can authenticate, can I manage permissions from there? I'm talking about ...
3
votes
3answers
208 views

What is a good configuration for networked Linux computers?

We are on a University campus network, and I am working for a professor who wants to network at least three new computers with four existing machines. I'd like to know the best way to setup these ...
2
votes
3answers
2k views

How do I create an interactive daemon login?

I run a service on a debian/linux machine which runs at boot with a 'screen' session I can always attach to. I would like to create a username which I can run this service as. At the moment I use a ...
0
votes
0answers
35 views

Windows RD - Temporary Accounts in Terminal Services servers

We are facing this weird problem. Since a restart of the server recently, most of the user accounts are getting created with Temporary profiles. We followed a few blogs and followed steps as below: ...
2
votes
1answer
3k views

Why might the Jenkins user not have permission to access the Docker unix socket?

I've added the jenkins user to the docker group thinking that it would allow Jenkins jobs to run Docker commands. If I switch to the jenkins user, I can verify it works (manually): ubuntu@hostname:~$ ...
38
votes
11answers
93k views

create home directories after create users

I created some users with: $ useradd john and I forgot to specify the parameter -m to create the home directory and to have the skeleton files copied to each user. now I want to do that, and I ...
1
vote
3answers
1k views

UltraEdit for Multiple Terminal Sessions

If you are using/installing UltraEdit a lot, you might have experienced that you can register it for only one user on the machine... But as I am setting up a Windows 2008 Terminal Server for several ...
1
vote
0answers
53 views

DCOM Security Settings not exported with secedit

I've got a problem with exporting the DCOM-settings. I call secedit /export /cfg C:\UserAccess\config.txt This should export the COM and DCOM settings. But I don't get all of the settings. For ...
1
vote
1answer
44 views

AD SelfService for creating users [closed]

I've set up a small computer lab with approx. 30 computers with Win8. They are connected to an Active Directory (Windows Server 2012R2) and have roaming profiles. However, creating users causes ...
-2
votes
1answer
41 views

Best way to apply “one-shot quick fixes” to computers and users? [closed]

We often suffer from situations where we need to apply a quick fix for a bunch of users/computers. A quick fix can be a copy job, deleting a users browser cache or adding registry keys to HKCU to a ...
3
votes
1answer
3k views

How to automatically reconcile /etc/group and /etc/gshadow

Running grpck to check the groups, I see these errors: 'twinky' is a member of the 'foo' group in /etc/group but not in /etc/gshadow 'dipsy' is a member of the 'foo' group in /etc/group but not in ...
2
votes
5answers
2k views

SSH keys fail for one user

I just set up a new Debian server. I disabled root SSH and password auth, so you've gotta use a key file. For my primary user, everything works exactly as expected. I used ssh-keygen -t dsa and got ...