The tag has no usage guidance.

learn more… | top users | synonyms (1)

0
votes
2answers
48 views

Which security group in AD to manage domain computers

I want to add another user rights to manage all domain computers. I created a group in AD called ITAdmin and added myself and this user in it. Then I added this group to several other groups like : ...
-1
votes
0answers
11 views

Central User-Management [closed]

Would FreeIPA or any kind of RADIUS allow me to manage the permissions of users in a domain (AD) to do specific tasks like allowing a user to login only from X PC in the domain or to let X PC to ssh ...
2
votes
2answers
49 views

Linux user without any filesystem permissions

I need to make a linux user for the sole purpose of an SSH proxy. Amongst other things, the user should not be able to go around exploring the filesystem or even access a shell really. Obviously I ...
0
votes
0answers
25 views

Windows: add user group to file created by a specific process

In our (mixed) Windows network we have a machine with a shared folder. This shared folder can be accessed by anyone belonging to the group User. However, in this folder, there are files that are ...
-1
votes
1answer
19 views

Are there any consequences of deleting the Full control permission on an user object for Administrators, Domain Admins groups?

I'm trying to create a user in AD which is undeletable, unmodifiable even by Administrators, Domain Admins. Is there any problem that might occur if I delete the Full control permission on the user ...
1
vote
0answers
85 views

Recover from a deleted account that was used to install AD LDS [closed]

AD LDS was installed on a standalone Windows 2012 R2 server using a windows admin account named: adlds-admin However, that account has since been deleted by mistake. AD LDS is running fine. We ...
0
votes
1answer
46 views

Delegate Specific rights to Helpdesk on AD

Domain Controller - Windows Server 2008 R2 standard I need to delegate only below task to helpdesk id for specific OU i.e 1) Creating User 2) and after creating that user, add them to specific ...
1
vote
1answer
13 views

Accessing internally stored documents via hyperlinks in Websites on a DMZ server

We have a vendor-provided application running internally (LAN) on a Windows/MS-SQL 2012 server, providing access via IIS on the same box. The application is able to store attached documents - these ...
1
vote
1answer
16 views

User specific network IP/Port permissions for Open VPN

We are using Open VPN to give secure access to our remote team to access our EC2 instances hosted on AWS. Usually we create one open VPN account for each team and give that account to the team. By ...
3
votes
1answer
30 views

Active Directory permissions dissapears

I have recently configured Active directory delegation and in one specific OU inherited permissions disappears from all users except one I have recently created for tests. Non of the users are a ...
0
votes
1answer
32 views

Query AD for users with create users access rights

My company has requested a list with all the users and groups from AD that have access rights to create users and in which OU's they have these rights. Is there a way to get a complete list via ...
0
votes
2answers
55 views

Is there a way in Linux where one non root user can check if another non root user is using OpenSSL or not without sudo permission?

Consider this scenario where User-A and User-B are both non-root user are running inside a server. User-A is running different Program P1 (pid-2814),P2(pid-2815) whereas User-B is running different ...
1
vote
1answer
20 views

all apps open with admin permissions for all users

this is on a Virtual Machine running WIN2008 R2 Enterprise: When users login and open programs, the programs always open with elevated permissions and application's title bar has " (Administrator)" ...
0
votes
0answers
12 views

User grants for task scheduled job

How can I setup a standard user for scheduled task of Windows Server 2012? I tried to simply add an user, but the batch fails. I tried to add it to "Log on as batch job right" gpo, but it fails again. ...
0
votes
2answers
182 views

How to add new text,but unable to modify old text [closed]

how do I set permission for a file on Windows such as .docx so that network user can ONLY add new text into the file.They must NOT be able to edit the old text,but the CAN add new ones. What I'm ...
1
vote
1answer
45 views

3 different folder share permission

Short and simple, There's a document in PC A that I want to share,I want PC B to be able to read/write,PC C only read,while PC D has no access at all.Sounds impossible but if there's a way please show ...
0
votes
1answer
17 views

Correctly setting user permissions via SSH

I'm getting stuck with user permissions on a LAMP stack (using Digital Ocean if it matters). Here's my setup. User dev has the following groups: dev www-data The /var/www folder has been set so ...
0
votes
2answers
52 views

Restricted group local administrators can RDP into DC

I have added restricted groups to my Desktops OU and this adds the "Local Admins" security group to the Local Administrators group on workstations in that OU. The issue is, that after this GPO is ...
0
votes
1answer
43 views

What user should I use to create websites?

I setup a LAMP stack on a dedicated server. There is a root user and a user named user1 with sudo privileges. I usually put all my websites inside the /home/sites dir, and I don't know if it's better ...
3
votes
2answers
119 views

Allowing PHP to run specific bash script with root permissions

I have a php script calling a bash script like this: <?php $result = exec('sudo /bin/bash /var/www/my_bash_script.sh /var/www/vhosts/testsite/htdocs/'); var_dump($result); ?> This is ...
1
vote
0answers
67 views

Windows Server 2008 R2 - Limit number of sessions created by a PARTICULAR user

I have a Windows 2008 R2 server which can be connected by my guest user through RDP to access a custom desktop application. I want to limit each user to be able to access the custom desktop ...
1
vote
0answers
117 views

Synology - How to grant terminal access to a user without adding them to administrator group?

I am managing a Synology DS1813+ NAS server that holds data and files for a few dozen users. I was told by Synology support team that the only way to grant a user terminal access is by giving them ...
0
votes
0answers
25 views

Apache folder permissions issue

I've been searching for a solution for this for hours and just can't seem to find a topic where the user is facing the same issue as myself. There are similar threads but having followed all of the ...
0
votes
2answers
44 views

User management with cronjob [closed]

In my organization, we want to implement a user management standard after an utter chaos. Where we(organization) and the client was able to access root user and they made changes which took down the ...
0
votes
1answer
44 views

Restricting su command in a specific manner

I have a list of system users who have access to almost everything via sudo. Now I would like to restrict their sudo access for command su. I would like to restrict su command for every user on ...
-1
votes
2answers
49 views

Password Logon Requirements

I want to allow users to log onto Windows using stored credentials, not requiring them to type their login information. I've read that the way to do this on a specific computer is to run "netplwiz" ...
1
vote
1answer
26 views

running pg_dump with the context of a user

$ whomi admin $ pg_dump (it works....) $ sudo pg_dump doesn't work. (permission denied) $ sudo -u admin pg_dump still doesn't work (permission denied). why is that? I need to run pg_dump from ...
0
votes
0answers
59 views

Access Denied: Unable to access user mapped folder in Windows Server 2008 R2

We have our user profile mapped (\servername\users\username) to all the machines where ever we login. On a particular Windows Server 2008 R2, i am unable to open my own user profile folder and getting ...
5
votes
2answers
107 views

Minimal set of rights to run a process on a Microsoft Windows Server

I want to run a process (not a service) under a different user on a Microsoft Windows Server and I need the minimal set of rights which are needed to do so. The minimal set of rights is required, ...
1
vote
1answer
50 views

Why can't Win7 user move files, instead it just copies them on Samba share?

I'm running a CentOS server with Samba. Connected on the LAN is one Windows 7 PC and the rest are Macs and Linux. The Macs don't have this problem, but on the Windows PC when a user attempts to move a ...
0
votes
2answers
33 views

Intention of www-data

So I have been wondering what the true purpose of www-data user/group is. Should I include other programmers into this group that will be editing the files in the website root? Should all of the ...
0
votes
1answer
28 views

Run service under AD account

I am trying to run a custom service (made in visual studio) on a networked applications server that has been joined to a domain. I would like the service to run under a very specific account (...
0
votes
1answer
91 views

IIS7 setting user permissions for network drive directory

I have IIS7 server (where i running some PHP) on network drive (drive 1), when im trying acces another network drive (drive 2), where are need to acces PDF files with pdftotext.exe. On drive 1 i also ...
1
vote
0answers
175 views

Microsoft VBScript Runtime error: Permission denied code 800A0046

I am testing a VBScript and it was working fine earlier. Wanted to try with a different file input, but all of a sudden I'm getting Microsoft VBScript Runtime error: Permission denied code 800A0046. ...
-1
votes
1answer
40 views

Nginx Not Respecting File Permissions

I'm trying to apply permissions of 600 to certain files on my web server, but they are still accessible to the world (I can access them by navigating to direct link in browser e.g. domain.com/test.txt)...
0
votes
0answers
26 views

domain user added to local admin group denied permission when not connected to domain controller

I have a windows 7 computer that was joined to a domain that is no longer available. It still has a domain user account with a cached domain login credential (i.e., I can still login using my domain ...
2
votes
1answer
37 views

Create a Web User

I am running Apache 2.4.8 on Arch Linux, but that doesn't matter really. I would like to create a user who is devoted to web management. I have created a user, a group, and added the user to the ...
0
votes
1answer
42 views

Correct way to setup linux company share folder with usable permissions

I've just started working for a small company that has a globally shared folder run from an Ubuntu file server (Raid 5, etc) shared by Samba. The workstations (Centos) are all fstab setup to mount ...
0
votes
0answers
112 views

Setting OpenVPN user “nobody” to delete routes

I have setup OpenVPN server and client successfully. However it all works great when I run it as root but I would like to run them with the reduced privileges of user "nobody" and group "nogroup". ...
0
votes
1answer
22 views

How to work on local VM Load Balanced Web Sites

So, I've got my LB all set squared away and running well (all ubuntu servers, sitting on a ubuntu host machine). Everything works... syncing files, loading the sites, backups, etc... They are a ...
0
votes
0answers
13 views

Staging Server file permisssion

I have a staging server that I use primarily for wordpress sites but there is also couple of non wordpress sites. I need to be able to update and install new plugins to these sites and also change ...
2
votes
0answers
56 views

Giving users of an OU permission to enable and disable users of their own OU

I want users of an OU to have access to enable and disable user accounts in their own OU. I believe in order to do this I need to grant the Read and Write userAccountControl property to the SELF ...
3
votes
0answers
24 views

MySQL user suddenly loses some permissions [closed]

On CentOS 7, I have a MySQL (actually MariaDB) database user that needs all server privileges from a remote IP (to be able to use Navicat Premium to manage the database). Somehow every once in a ...
3
votes
2answers
50 views

Linux user to access and execute only on one location

I am trying to figure out a solution for this: I have some user which I created using command useradd. I want to allow this user do whatever he wants on a special location, say /var/www/. He might ...
1
vote
1answer
948 views

getgrnam(“user”) failed in /etc/nginx/nginx.conf

I am trying to run nginx as the current user (=ayush). But I get the following error on setting the user directive: Dec 11 22:26:13 manjaro nginx[17194]: 2015/12/11 22:26:13 [emerg] 17194#0: ...
0
votes
0answers
46 views

How to limit user permissions

I have 2 servers, one web server and one SQL Server. All Windows. Both servers have the same account created with the same password and IIS and SQL Server are configured to use those accounts. I also ...
0
votes
3answers
162 views

Permissions for rsync process to access files it doesn't own withtout running it as root

I want to use rsync to take automated backups from a remote webserver over ssh. The webserver is configured with suphp, so different sites have files with different users and groups. Unfortunately a ...
0
votes
0answers
103 views

user and file permission issues while installing mariadb on ubuntu

I was following the installation instructions of mariadb: shell> groupadd mysql shell> useradd -g mysql mysql shell> cd /usr/local shell> gunzip < /path/to/mysql-VERSION-OS.tar.gz | ...
0
votes
1answer
45 views

Users Denied Write Access Win 2008 Server

I recently transferred files from a Windows server 2003 (servold) to Windows server 2008 r2 (servnew) The new server has two physical drives. User files were stored on d:\ d:\ was shared (right ...
0
votes
1answer
256 views

zabbix user unable to execute sudo mysqladmin ping

I am trying to check whether MySql is up by using a UserParameter in zabbix. UserParameter looks like this. UserParameter=mysql.ping,sudo mysqladmin ping | grep -c alive | wc -l When I execute ...