Questions tagged [user-management]
Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.
628
questions
0
votes
2answers
104 views
How can I “archive” accounts in Active Directory Users and Computers (ADUC)?
I don't mean disabled... and I'm hoping for something other than "exported". Here's my problem: My org never deletes accounts (just disables them)--not my call. I've hidden the disabled ...
-1
votes
1answer
14 views
How to delete a local user in windows 10 and user data
How to delete a local user along with the users home directory or data in Windows 10, equivalent to linux command 'sudo userdel -r john'?
0
votes
1answer
31 views
What is the best way to setup/install a new Windows PC and including it in the Active Directory? [closed]
Since I have to setup every new PC by hand I was wondering how I could optimize that.
Especially because I use the new Users password to login so the Device is added to the AD after Windows ...
0
votes
0answers
17 views
Limit docker rights
I am planning to give users access to docker. But I want to limit their rights, by limiting by example
no priviledged
no mount of /dev
no mount of folder if they don't have the rights
(is this list ...
1
vote
1answer
20 views
How can I link Domain users with Local users for Terminal Server connections
I have a strange setup. I have a terminal server with local users to that Terminal Server. The Terminal server is on the domain The program that is being accessed, can't get Domain users, so we are ...
0
votes
1answer
58 views
Auto login guest user at boot on Windows Server 2019
Is possible to auto-login secondary users when I boot with my admin user in windows server 2019?
The others users arent admin account.
Or start it somehow, maybe using any command or option? by "...
0
votes
0answers
5 views
User Access revoked willl he be able to access and deploy in kubernetes cluster
i have revoked access for a user from google cloud platform, will he be able to change or deploy anymore on kubernetes cluster?
he used to push code to cluster from his laptop.
now i have revoked his ...
1
vote
0answers
78 views
Edit user's email field in Samba domain
Looking for a way to update all of my users' email address value in a Samba domain. I have limited knowledge of samba-tool and pdbedit, but they do not seem to allow command-line editing of a single ...
1
vote
0answers
69 views
Unix group-based access control with SVN over Apache
I have an SVN repository hosted over HTTPS wiht Apache 2. In an attempt to unify access control lists for SVN as well as other services on the server, and prevent having to deal with multiple copies ...
1
vote
1answer
33 views
How to tell what user or process created or disabled an AD user or group?
From Windows Active Directory Users and Groups. I can see when a user or group was modified. From System Internals I can also see when it was created. Is there a way to tell what User created the ...
0
votes
0answers
11 views
Atlassian cloud centralised user management
I'm planning to open my own startup which at the beginning won't have more than 5 people. The core products that I will need are Jira, Confluence and Bitbucket. So I will need max 5 Atlassian accounts....
0
votes
1answer
115 views
Use `chsh` on GCP VM in order to change from bash to zshell, default password is unknown
I'm trying to change the default shell on a GCP VM but am running into difficulties trying to use chsh.
It seems that I have access to root as I am able to run sudo apt upgrade.
I have also installed ...
google-cloud-platform
0
votes
1answer
25 views
Upon creation of new user non-existent groups added
I am little puzzled with below outcome. I am logged in as root and created 2 new user. tecmint and tecmint2. New user became part of group that I cant find in /etc/group. How can I find out why this ...
0
votes
0answers
64 views
Multiple issues running centralized (ldap) user authentication
I've multiple issues when I try to move from locally-managed authentication to LDAP-managed authentication; unfortunately to properly manage my Synology NAS nfs shares, I need such a solution. I'm ...
0
votes
1answer
358 views
Using Fail2Ban as non root
What is the best way to add IP to Fail2Bans blocklist for normal user, (non root) but without giving full acces to fail2ban-client for that normal user.
To run for example this command for normal ...
0
votes
2answers
221 views
Best Practices: Unix User Management with LDAP + Kerberos?
I'm running a small LAN for 5 users with some basic services, e.g., NFSv4 mounts and SOGo groupware. Because it seemed to be a good and easy to implement idea, authentication is a combination of ...
1
vote
2answers
23 views
Is there any possible way to give an all the services (windows and 3rd party) access to the non admin users?
I am planning to give all the services start /stop access to the users(non-admin) I don't want to give the administrator group access to them.
I have a couple of windows servers running with a couple ...
0
votes
1answer
203 views
Can I delete initial ubuntu user on Ubuntu server?
Ubuntu installer create by default an initial user called ubuntu (that it's also a sudoers), as explained here.
On my server I have created another sudoer (with a less common name) and I would like ...
1
vote
1answer
188 views
AD best practise delete or just disable?
As an IT company that delivers IT systems, servers and everything for our customers. I'm trying to find the best practice when it comes to Active Directory and users leaving the company.
We have ...
0
votes
1answer
78 views
Do I need to specify the user:group in sudoers to impersonate other users
I was trying to limit the command a specific user can execute in the sudoers file, say I have something like this:
dummy myserver=(ALL:ALL) /usr/sbin/reboot,/usr/sbin/shutdown
My dummy user is only ...
0
votes
1answer
55 views
Allow sudo over SSH while forbidding TTY login
I want to lock users from local login (keyboard and monitor), but still allow remote logging with SSH.
Easily achievable with passwd -l and ssh-copy-id.
But what about sudo? I want to keep password ...
0
votes
1answer
892 views
How to use list to create users with this Ansible role
I am trying to learn Ansible and I've been dabbling with some roles that I've found on Github, specifically this one that automates user creation together with sudo rules and SSH key deployment:
...
0
votes
1answer
28 views
What folder should be the home of the web root owner?
I'm setting up a SLES 12 system for running web applications on it. There is already a /srv/www folder and it's going to be owned by a special user (let's say: web user).
Is there a good practice / ...
0
votes
1answer
118 views
Which user should be the owner of the web root in SLES 12?
I'm setting up a SLES 12 system for running web applications on it. There is already a /srv/www folder and it's owned by root. So I'm going to reassign it to another user.
Is there a good practice / ...
0
votes
1answer
17 views
Windows IAM without granting admin access
I have an IAM team that needs to be able to create local administrator accounts but the customer doesn't want to grant that team Administrator access to the this team. Is there any way to create ...
1
vote
1answer
182 views
Best practices for docker users on a shared machine
We would like to use docker on the servers of our university. From reading
https://docs.docker.com/install/linux/linux-postinstall/#manage-docker-as-a-non-root-user
I understand that it is ...
0
votes
2answers
71 views
Getting dates associated to acct sa output stats
I'm trying to get stats on global CPU usage of a server on a per-user basis so I installed GNU Accounting (acct) (on Ubuntu server 16.04).
When asking for stats with sa -m, it takes data from the ...
0
votes
1answer
249 views
Is it possible to disable new bluetooth connections for non-admin accounts(Windows 10)?
I can disable bluetooth entirely, but I want the previously attached bluetooth keyboard & mouse to continue working, but the guest/non-admin users unable to pair new devices. I looked at stopping ...
-1
votes
1answer
121 views
Global authorized_keys associated with a user?
Is it possible to have a global authorized_keys file that associates each user to their own public key?
For example, I would like to create multiple user accounts by their Github user name and public ...
0
votes
2answers
55 views
Manage WIndows clients in the Azure cloud
I'm looking for a solution for the following scenario:
We are planing to install several Windows 10 systems (about 30 to 50 PCs).
We want to create user centrally, and also want to push group ...
2
votes
1answer
667 views
Ansible user module fails when group parameter matches name parameter (e.g. creating user & group name)
Trying to create an Ansible playbook to create a user (user module) on RH/Cent system (e.g. useradd).
The playbook fails anytime I include the group parameter despite setting the group value to ...
-1
votes
1answer
310 views
List of active users and their access rights to O.S. in Windows Server 2003 [closed]
How I can get a list of active users and their profiles (access rights) to O.S. in Windows Server 2003 ?
0
votes
1answer
46 views
Should Active Directory, Web Apps and MS-SQL all have the same users?
I am looking for a clean way to do audit trails in MS SQL Server, for compliance reasons, preferably completely on the database side without involving the web application.
When talking about audit ...
0
votes
2answers
82 views
Having Postgres databases to be physically stored in a subfolder of the Ubuntu user's home directory
I am currently setting up an Ubuntu 18.04 server, where many different users are given SSH access - including access to the server's Postgres SQL and the ability to create their own Postgres databases....
2
votes
1answer
37 views
Managing multiple rabbitmq clusters
I have a bunch of Rabbit clusters which I'd like to synchronize users, permissions, and some configuration across. Is there a decent existing solution to this, or do people mostly just write their own ...
2
votes
1answer
591 views
Remove local user password through Powershell
I'm trying to remove a users password through Powershell.
I know I can create a user without password like this:
New-LocalUser -Name "myuser" -NoPassword
But how do I remove a users password once ...
4
votes
1answer
1k views
How can I grant Dial-In / Network Access Permission to local account via command line?
I am trying to configure a VPN server completely using Powershell. I have completed everything except the last step: Granting a local user account Dial-In / Network Access Permissions so that this ...
1
vote
1answer
498 views
Puppet user creation with condition
How to create user with same UID(only if it doesn't exists) without affecting the servers having the same user with random UIDs.
To give more insight:
1. Maintain a user, "user1" all across the fleet ...
1
vote
1answer
1k views
Windows server 2016 Administrator account has no permissions
I was changing settings around so that users can only use specific applications; however, I didn't realize that it was going to affect admin rights in the same way.
The error I'm receiving is this:
...
0
votes
2answers
183 views
Unable to remove user from group
Sometime ago for who knows which testing purposes I added www-data to a group of developers called devs. I want to remove it now but it don't let me with the following message:
$ sudo deluser www-...
3
votes
1answer
200 views
GCE deleted users folders reappear after reboot
on newly created gce instances I find a really messy /home/ folder, containing one home directory for every GCP user with sufficient permissions (so far not too insane), but also for any user that ...
3
votes
1answer
42 views
How to hide specific drives on a server?
I would like to know what's the recommended solution for the following problem.
We do not want users to see (or at least not to modify) the drives D and E of a server they have remote access to.
...
0
votes
1answer
46 views
redirecting output using sudo [duplicate]
I want to run a command as another user using sudo, and redirecting the output of that command as that user.
Example, if I run:
touch some-file
under user simon, some-file will be owned by user ...
0
votes
1answer
133 views
Switching to a “role” account, using `sudo` and `ssh` agent forwarding later on – possible?
I want to create "role" accounts for several admin tasks that don't usually require root permissions. For example, consider a www-admin user maintaining files in /var/www.
It seems to me that this is ...
2
votes
0answers
30 views
Restricting user access to a subset of binaries
I checked rbash and chroot jail, which doesn't have permission to read /var/log.
Scenario:
ssh user should only able to cd to a directory and do less for files.
eg:
ssh user@server.com
cd /var/...
1
vote
2answers
1k views
Automatically block Gitlab users, removed from LDAP
I've migrated this question from StackOverflow.
I'm administering a Gitlab-Omnibus (Community Edition) instance in our company as an additional duty.
Gitlab uses company's Active Directory server ...
0
votes
0answers
88 views
Use default `ubuntu` user to deploy an app or make separate users?
I have a Ruby on Rails app and use Capistrano to deploy it to the server.
The deploy user and the user running the app is the same - the default ubuntu user. (this has sudo access: ubuntu ALL=(ALL) ...
0
votes
1answer
78 views
Azure Portal BizSpark Subscription - Is there any Max limit and cost for adding Users?
I am having Azure BizSpark Subscription in Azure Portal, and I want to add Guest Users and grant them roles/resources separately. I searched documentations but not able to find whether adding Guest ...
-1
votes
1answer
38 views
Newly created user on EC2 is disappearing
I use CloudFormation to spin up a stack with one EC2 instance. Once the instance is running, I want to be able to use "Run command" feature to execute some scripts, but not as root user. That's why, ...
0
votes
2answers
5k views
How can I list all of the groups given user belongs to in the samba4 domain?
I have a samba4-based domain. How can I list all of the groups to which given user belongs?
I know I can go the reverse way - iterate via all the groups [ samba-tool group list ] and see their ...
