Questions tagged [security-groups]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
18 views

Does blocking all outgoing traffic on cloud instance lock me out?

I have to test an app which first downloads data, but then, can not communicate with the world for the duration of the test (so it doesn't gossip stuff). There are ways to enforce this on the app, but ...
user avatar
0 votes
0 answers
22 views

TCP communication on port not responding on different Availability Zone or Subnet

I'm a little curious and confused about this situation. We setup a monitoring instance scraping an exposed endpoint on 2 different instances. Both on same VPC, same security group, same route table ...
user avatar
0 votes
1 answer
22 views

AWS Postgres database IP in security group, how to enter info to survive IP address changes?

I have an existing prod Postgres database and I would like to replicate a table to a new Postgres database. In order to get the two to be able to talk to each other, I had to edit an AWS security ...
user avatar
  • 121
0 votes
0 answers
25 views

Linux: How to allow outbound rules for seccurity updates

We use aws ec2 instances with the 'AWS Linux AMI 2' image. We have a script for security updates with this code: yum update -y --security. I want to allow only security update in outbound rules - aws ...
user avatar
0 votes
1 answer
99 views

Create a Mail-enabled security groups with Azure AD role assignment?

I would like to create a Security Group within my firm's 365 Tenant with a group email address and role assignment of "Billing administrator" - i.e. Can perform common billing related tasks ...
user avatar
1 vote
1 answer
26 views

RHEL 8: Administrator vs. Auditor role

On RHEL 8, are there prepared functions, methods, processes or tools to implement administrator/operator and auditor roles in the following way: An administrator/operator should be able to do almost ...
user avatar
0 votes
0 answers
73 views

Logging on Windows with user accounts in Protected Users group over VPN

I am planning implementation of Microsoft’s Active Directory tier administrative model, and I was wondering how to overcome the problem of system administration over VPN. One of the security ...
user avatar
1 vote
0 answers
175 views

Remove the default Security Group assigned by Elastic Beanstalk

I have created a Elastic Beanstalk environment and have created this .config to edit the security groups which worked. Now my EC2s are attached to the new SG and the default one. option_settings: - ...
user avatar
  • 11
0 votes
1 answer
102 views

A user activity is detected from a disabled account in Active directory

I have disabled an user in my Active Directory (terminated the account). However, I am still getting the log that Event IDs 5379 (credential manager credentials were read.), 4673 (a privileged service ...
user avatar
  • 3
0 votes
2 answers
587 views

AWS - Adding multiple IPs to Security Group Inbound Rules

I need to open 20 ports for 12 IP blocks. Do I have to manually add 240 rules in this case? I feel like there must be a way to just copy&paste the IP list to somewhere. I googled and found it's ...
user avatar
  • 105
1 vote
2 answers
346 views

Whitelist both IPv4 and IPv6 in AWS Security Group

I am setting up an SFTP server, I want to white list all the IPs in the Security Group so people can connect to it from anywhere. At the moment I am adding 2 rules to the Inbound rules, one rule for ...
user avatar
2 votes
2 answers
936 views

Office 365 Exchange Public Folder lost SID assignment to security group folder permissions

We installed a new Exchange 2016 server and migrated all the mailboxes from the Exchange 2010 server to it. Then we migrated all the mailboxes and public folders from MSEX2016 to Office 365, and we ...
user avatar
0 votes
2 answers
56 views

How can I easily manage constantly changing public IP addresses in my many security groups

Our development environment is hosted on AWS, and is accessed by dozens of people. As people join and leave the project, or work from alternate (often temporary) locations, I find myself constantly ...
user avatar
0 votes
2 answers
287 views

Nested AD Groups RDP permission not applying to new Windows Server 2019 VM

Similar Issue with no responses: Nested AD groups working in local computer groups, but certain servers fail to allow RDP? I am only new to this environment and the person I took this over from also ...
user avatar
  • 1
0 votes
0 answers
171 views

AWS ELB(classic load balancer) response is too slow and sometimes response is not coming it is showing timed out

I have EKS cluster setup in private subnet in which i'm having my microservices and for each microservice i have classic load balancer to access API. But response is having high latency and sometimes ...
user avatar
  • 21
11 votes
2 answers
2k views

What is a secure and user-friendly way to provide only a few users access to web app on Amazon EC2?

Situation We have a web app hosted on Amazon EC2. It's intended to be used only by a few users in a company. How we're dealing with this We share the (Elastic) IP address of the instance with the ...
user avatar
  • 211
2 votes
2 answers
4k views

Why am I getting "Connection refused"?

I am running a hello-world http server on an ubuntu EC2 instance, let's say, myurl.com. I am unable to curl it from my client: $ curl myurl.com:4296 curl: (7) Failed to connect to ...
user avatar
  • 129
0 votes
2 answers
345 views

bulk removing direct access to a folder via PowerShell ACL

On a number of the servers where I work the share folder permissions have become cluttered with direct permissions for some of our techs due to them needing to take ownership. I have figured out how ...
user avatar
2 votes
2 answers
37 views

Add domain users to a group of security groups via group policy

Is there a way to add domain users to a collection of security groups via group policy? We have some SSO groups that all employees share. Instead of tech support person having to manually add new user ...
user avatar
  • 21
3 votes
1 answer
65 views

Windows - Group Policy - Numerous Share Drives w/ Item-Level Targeting

Overview We have been working on getting our numerous sites to map share drives for each user that needs access to their sites. We have no way of standardizing this from within their AD profile as ...
user avatar
1 vote
1 answer
90 views

Why don't Windows domain machines periodically query security group membership, like other things? [closed]

When I was in lower tier support (and sometimes still), one of the most annoying sequences of events was a request for new file permissions >> add user to security group and specify in the reply ...
user avatar
1 vote
2 answers
330 views

Link a GPO to an OU or security group, Who will win?

Here's the scenario: A GPO is linked to an OU to enable, for example, UAC setting. However, since there are certain systems that require UAC to be disabled, there is a GPO that disables these settings....
user avatar
  • 11
0 votes
2 answers
1k views

Is there a way to export all AWS Security Groups to CSV? moreover, is there a recommended way of keeping track of SR changes?

We have a relatively small dev environment in AWS with about 50 Security groups with multiple permission entries. is there a recommended way of keeping track of SR changes, Access, etc? My manager ...
user avatar
1 vote
1 answer
622 views

How to Apply Egress rules to Default Security Group - AWS

I would like to apply port 443 outbound rule to the 'Default' security group. It worked by creating a dedicated block OutboundRule (which is commented out). Instead of creating a new block, I want to ...
user avatar
  • 143
2 votes
0 answers
68 views

Windows Domain Group Membership Not Promulgating Fully to Workstation

Perhaps I should ask 2 or three questions but since these are all related, here they are: Situation: Multiple Windows 2019 Standard DCs synchronized. Windows 10 Pro workstations joined to the domain....
user avatar
  • 21
0 votes
1 answer
403 views

PowerShell - Remove User/Group from Security Permissions

I have an AD group called "Admins" and it has specific members but under the Security Tab, how can I use Powershell to remove certain users/groups from the Security list and/or modify the ...
user avatar
  • 1
0 votes
1 answer
78 views

Adding a security group to AD user account using PowerShell

I am trying to build a PowerShell command that it will add a security group (not on Member Of) with full control permissions in AD user in order avoid doing it manually by hand. Is it possible ? This ...
user avatar
0 votes
1 answer
48 views

Looking for a good explanation of how AWS Security groups behave

I'm struggling to get my head round port ranges described by AWS Security Groups and how they behave. I'm a software developer with many years of experience writing networking software so it's ...
user avatar
1 vote
1 answer
190 views

GPO and Security Groups in multiple domain

I have 2 forests, each with one domain with a bidirectional trust. I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
user avatar
  • 13
0 votes
1 answer
134 views

Need of distribution groups in active directory

I know the basic purpose of security group and distribution group in active directory. The security group is used to access the network resource and distribution group is used to send distribution ...
user avatar
0 votes
1 answer
640 views

ec2 instance will not allow connections to port from within instance after opening port on security group

I have an EC2 instance on a security group that allows ports 80, 443 and 22 (tcp, inbound from 0.0.0.0/0 and ::/0); and every outbound connection (to 0.0.0.0/0 & ::/0, all tcp & udp). I've ...
user avatar
  • 277
1 vote
1 answer
122 views

Active Directory - grant access rights to a user that belongs to multiple groups

I have a Windows 2012 Server with file server role. I have users in my active directory which are defined by 3 things : country - service - role I have about 10 countries, 10 services and 5 roles. How ...
user avatar
1 vote
1 answer
72 views

ec2 permissions to manage only firewall access

I'd like to allow some developers to manage firewall rules, specifically rules in ec2 security groups, (or some of them ideally) so that they can, eg, update their changing IP addresses to access ...
user avatar
  • 11
1 vote
1 answer
92 views

AWS EC2 access attempts on blocked ports

I have recently installed OSSEC on a RHEL 8 server being hosted on AWS EC2. Since then I have been receiving brute force attempts and other attempts on ports that are not open in my security group. ...
user avatar
  • 113
-1 votes
2 answers
201 views

In which shared-mailboxes is a security group entered with sendas permissions? [closed]

How can I with powershell in which shared-mailboxes is a security group entered with sendas permissions?
user avatar
1 vote
1 answer
467 views

Should AWS Security groups allow internet traffic?

Ok, so I created a default Elastic Beanstalk Application and getting this reported as High Risk, and happens on all Regions that are connected to the VPC Network (which is not a public IP, only the ...
user avatar
0 votes
0 answers
196 views

Nested AD groups working in local computer groups, but certain servers fail to allow RDP?

I have 100+ servers, I have added a Universal AD group to the local servers Adminstrators Group based on the server's name. Within this AD group I have nested various AD groups as is appropriate for ...
user avatar
0 votes
0 answers
52 views

I'm in need of an effecient way to write a powershell script

I have about 1,000 users that I need to remove from a group. The problem is the group is nested into a group which is then nested into another group. Group A Group B ---->Group 1 ---->Group P1 ...
user avatar
1 vote
1 answer
29 views

Info about Event logs (Active directory)

Recently 3 of my Active directory admins are unable to login to AD server through RDP. After we cross checked everything, we found these 3 users are added in one security group called "Deny RDP ...
user avatar
0 votes
1 answer
672 views

AWS IAM policy to allow user to edit one specific Security Group only

I'm trying to allow a user to modify inbound rules on one particular security group. Here's what I tried. I thought it would be straight forward, but this doesn't work. What other permissions do I ...
user avatar
  • 117
-1 votes
4 answers
308 views

Behaviour of Restriced groups in Group Policy after move to new OU (within the same domain)

I'm fairly at home with Group Policy but this is sort of a strange one. I know security settings get applied every 16 hrs. I had a policy that added an AD group to the local admins (restricted groups)....
user avatar
7 votes
4 answers
3k views

Is it safe to allow inbound 0.0.0.0/0 on EC2 security group?

I created an EC2 instance on AWS, and I was assigned a default "security group". I understand that this acts as a virtual firewall for my server. I had trouble connecting into this EC2 ...
user avatar
1 vote
2 answers
848 views

AWS CloudFormation - can I use Sub inside GetAtt?

I'm trying to reference a security group inside a CloudFormation template. the name of the group is !Sub '${EnvironmentName}-SG-Private, where EnvironmentName is a template parameter. However, the ...
user avatar
  • 121
0 votes
1 answer
63 views

How to add AWS Fargate service and google cloud run services under same security groups?

I have a web application which consists of an api gateway and two microservices. I want the microservices to remain hidden from the outside world and only the api gateway should be able to access the ...
user avatar
1 vote
1 answer
836 views

can't connect to OpenLDAP server in EC2 instance (AWS)

I would like to know if exist some additional security measures from AWS while connect to a OpenLDAP server in EC2 Linux instance (Ubuntu 18.04). I need this OpenLDAP server to check if user/password ...
user avatar
  • 111
0 votes
2 answers
716 views

Required outgoing ports to open for an Ubuntu 20.04 EC2 instance (beside TCP 80/443)

I'm hardening the security groups for EC2 instances running on a default Ubuntu 20.04 AMI. What system services will break after closing all outgoing ports expect TCP 80 and TCP 443? (I'm assuming all ...
user avatar
-1 votes
1 answer
92 views

Disable Do not display lock screen using powershell

Is there any Power shell command that changes the setting of the "Do not display lock screen" policy in Local group policy and i should perform the same on 30 machines. Can i do it with a single ...
user avatar
0 votes
1 answer
627 views

Jenkins with Nginx, need to listen only https port

I have Jenkins instance in AWS EC2. I have installed Jenkins with port 8080. And I have nginx as a reverse-proxy. My jenkins.mydomain.com.conf: server { listen 80; server_name ...
user avatar
  • 501
0 votes
0 answers
20 views

AWS EC Security group can not connect from internal network

I created 3 intances in same VPC and same subnet. 2 instances A,B use same security group: WebSG (id: sg-ab) instance C use security group: DbSG (id: sg-onlyc) In WebSG, I add rule Alltraffic from ...
user avatar
1 vote
1 answer
146 views

Firewall : is inbound rule required for getting SYN-ACK from the server while outbound rule already there?

I have a VPC, within which I have a EC2 instance deployed in private subnet. I have my NACL(Subnet firewall) ALLOW ALL on inbound and outbound. I have my security group rule(Ec2 firewall) , It ...
user avatar
  • 11