Tag Info

New answers tagged

3

The reasoning for this question is questionable ... To critique your desired solution of creating a new user -- even if other root users can't change new-user's password they don't need to since root can read any file or change the file permissions of the file -- they don't ever need to "be" that user." I you have terabytes of data you want to prevent ...


1

I suppose you could set an immutable extended filesystem attribute on /etc/shadow. That will prevent all changes to passwords, until the root user undoes the immutable bit. The command is "chattr +i /etc/shadow" If you are provisioning root access to a professional sysadmin you're supposed to assume that they won't change the password if you ask them not to ...


2

Ultimately if you give someone root access to your system, you give them everything on the system, that's why it is important for you to trust people you give root to.


0

You might try sudo su drupaluser and check out man su.


2

In the Account Editor in MDaemon you can configure users to access via POP, IMAP and the WorldClient only from LAN IP's. The settings are under Mail Services and Web Services.


0

There should be a client called Remote Administration that you can use to restrict access. If they're on Activesync, just disable it on their account. http://www.altn.com/Products/MDaemon-Email-Server-Windows/MDaemon-Remote-Administration/


1

You should add a Virtual Network (VNet) into your environment and join all machines (even the Web Roles) to it. This way you can deploy the Linux VM and close all its public Endpoints and only use the private IP address range you assigned to it as the conncetion IP on your Web Roles. There is some good guidance online on achieving this configuration.


3

Devices in the same subnet don't need router to access each other. Learn networking basics.


1

On a Cisco Route with IOS 12.2 or higher: access-list 700 deny 0800.2000.0000 0000.00FF.FFFF See the Cisco documentation for access-list(standard-ibm).


0

This is probably by design because denies override grants. However, you can deny and remove as separate steps icacls yourdirectory /deny user:r (or whatever) icacls yourdirectory /remove:g user



Top 50 recent answers are included