Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [user-management]

Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

0
votes
0answers
12 views

Need Explanation for the strange user last login data and password expired date while max password age is set correctly

In our organization we have number of local (non-domain) windows servers. The password policy from (net accounts) have max password age set to 30. However, when I execute the net user abcd command I ...
0
votes
0answers
17 views

Best practice for central authentication on reverse proxy

We run a NGINX reverse proxy to forward requests to our internal applications and so we only have one place to maintain our HTTPS certificate. From a security point of view, I assume it would be good ...
3
votes
1answer
37 views

How to hide specific drives on a server?

I would like to know what's the recommended solution for the following problem. We do not want users to see (or at least not to modify) the drives D and E of a server they have remote access to. ...
0
votes
1answer
28 views

redirecting output using sudo [duplicate]

I want to run a command as another user using sudo, and redirecting the output of that command as that user. Example, if I run: touch some-file under user simon, some-file will be owned by user ...
0
votes
1answer
29 views

Switching to a “role” account, using `sudo` and `ssh` agent forwarding later on – possible?

I want to create "role" accounts for several admin tasks that don't usually require root permissions. For example, consider a www-admin user maintaining files in /var/www. It seems to me that this is ...
2
votes
0answers
21 views

Restricting user access to a subset of binaries

I checked rbash and chroot jail, which doesn't have permission to read /var/log. Scenario: ssh user should only able to cd to a directory and do less for files. eg: ssh user@server.com cd /var/...
0
votes
1answer
169 views

Automatically block Gitlab users, removed from LDAP

I've migrated this question from StackOverflow. I'm administering a Gitlab-Omnibus (Community Edition) instance in our company as an additional duty. Gitlab uses company's Active Directory server ...
0
votes
0answers
34 views

Use default `ubuntu` user to deploy an app or make separate users?

I have a Ruby on Rails app and use Capistrano to deploy it to the server. The deploy user and the user running the app is the same - the default ubuntu user. (this has sudo access: ubuntu ALL=(ALL) ...
0
votes
1answer
41 views

Azure Portal BizSpark Subscription - Is there any Max limit and cost for adding Users?

I am having Azure BizSpark Subscription in Azure Portal, and I want to add Guest Users and grant them roles/resources separately. I searched documentations but not able to find whether adding Guest ...
-1
votes
1answer
21 views

Newly created user on EC2 is disappearing

I use CloudFormation to spin up a stack with one EC2 instance. Once the instance is running, I want to be able to use "Run command" feature to execute some scripts, but not as root user. That's why, ...
0
votes
2answers
504 views

How can I list all of the groups given user belongs to in the samba4 domain?

I have a samba4-based domain. How can I list all of the groups to which given user belongs? I know I can go the reverse way - iterate via all the groups [ samba-tool group list ] and see their ...
1
vote
1answer
42 views

Is there a role for overall management for Google Cloud Platform?

I need to manage the GCP for my client (who is not really technical person). For now he is granting me email and password of the account (not good I know). I checked the documentation of GCP and from ...
0
votes
0answers
16 views

Updating Active directory from Microsoft cloud to server

I'm working with cleaning up in our Active driectory after we have moved over to use Microsoft cloud in our company. My job is to go through all the groups in our ou's on the Active directory server ...
1
vote
1answer
859 views

Setting a Windows Non-Interactive User Account

Does anybody know how I can, or if it's possible, to set a Windows domain account as a "non-interactive" user. I would like to set specific Windows domain service accounts as "non-interactive" so ...
-3
votes
1answer
41 views

Semi-selfservice user registration [closed]

I don't want to have wide-open registration on my server so I don't have to deal with spam accounts, but at the same time I don't want to have to manually add accounts for each person I invite to my ...
0
votes
0answers
690 views

How do IIS AppPool Users get created and where are they stored?

When viewing the group "IIS_IUSRS", there are users such as: IIS APPPOOL\DefaultAppPool IIS APPPOOL\MySite1 IIS APPPOOL\MySite2 When looking for the user in the users view, there are now users with ...
0
votes
0answers
21 views

Which user profile data is locally(!) available to apps by default after login to MS Windows Active Directory?

The scenario is multiple client PCs running Windows and credentials are managed using Active Directory, which does contain e.g. mail addresses of users as well. There is a client app which needs some ...
0
votes
2answers
61 views

How to deny access for specific user to parent directory in Linux?

Goal: I would like to create directory rights so that specific manager user is able to access everything on /data and its child folders, but employees is able to access only Employee folder. This is ...
1
vote
0answers
56 views

remote access - restrict accessible user accounts depending on client

I find endless resources on the web explaining well how to restrict access to a computer depending who is trying to log-in. That doesn't allow to control what account will be used to log-in onto the ...
2
votes
1answer
186 views

Vsftpd/pam_userdb.so - auto-create virtual user home directories

Setup: Amazon Linux EC2 vsftpd PAM authentication with pam_userdb.so Usernames/passwords written to Berkeley user db from an external source (lsyncd). There are many 1000s of virtual users, to date ...
0
votes
0answers
117 views

LDAP user has no name

A user on our Opensuse 12.1 server was trying to mount an NFS directory and came to me saying that he had no username. His user configuration is identical to every other user on the system, so I ...
0
votes
0answers
127 views

Error Message Fetchmail/Postfix when trying to receive emails

I installed fetchmail and postfix on my server and I am running into trouble and have the feeling I tried everything. I just can't figure out what the issue is. So I hope for your help. I setup my ...
1
vote
1answer
46 views

For a windows network account, why is USERPROFILE not mapped to the users network share?

On a number of Linux based distributions it is possible to mount a users home drive over the network or change the location of the users home drive by modding the user account. Accessing the users ...
0
votes
0answers
9 views

Manage clients in parallel and take care of updates and so on

I want to manage several Windows10 client PCs (10 pc) without the need to configure each separated. I stumbled over Managing several PCs where the question was already answered. Nevertheless, since it'...
0
votes
2answers
67 views

User shown in ps does not exist

This is strange: » ps -ef | grep gitlab gitlab-+ 19663 4237 0 06:45 ? 00:00:00 postgres: gitlab gitlabhq_production [local] idle But the gitlab-+ user does not exist: » cat /etc/passwd | ...
0
votes
1answer
82 views

Ansible - User creation when server class criteria is met

I'm a new ansible user, switching from a collection of shell scripts to ansible playbooks. My current user management system allows for adding a user to a system only if that user has been granted ...
0
votes
2answers
2k views

How to su non-interactively?

I want to do something like this to non-interactively switch user: su otheruser -p <password> But this obviously doens't work... what will?
0
votes
0answers
600 views

(Get-ADUser -Properties proxyAddresses) not returning populated list, but lazy-loading

I am attempting to performance-tune a somewhat involved PowerShell script for some Active Directory management tasks. For example, I'm using $adUsers = GetADUser -Properties proxyAddresses (sometimes ...
0
votes
1answer
607 views

sshd matching user config not working

On server i have only ssh auth, but for one user I need to add a specific folder and password based auth. So I created a user sudo adduser myuser then in /etc/ssh/sshd_config file I added: Match ...
0
votes
0answers
58 views

Deploy exe from AD with elevated Privileges

I am trying to deploy the Sophos SSL VPN client to a group of AD users. The SSL client AND the user specific configuration file both require elevated privileges to install. There is no official MSI ...
1
vote
1answer
422 views

Migrate user's AppData folder in Windows 10?

Let me preface this by saying I am not a Windows admin. I'm a Linux admin. But I wear many hats... I have these laptops I'm migrating to be on our AD domain. Details Windows 10 Windows Server 2016 ...
1
vote
2answers
32 views

Linux CentOS-7 give a certain user acces to only a certain file path

I would like to give a created user a new home directory and have him only be able to access that certain home directory, however, the directory the user is supposed to access has already been created ...
0
votes
2answers
593 views

GCP user groups?

In GCP, are we able to group users like how we do in Active Directory? I was thinking, instead of assigning roles to individual users, I can assign to groups which is more manageable. Thanks.
1
vote
1answer
415 views

Calling wmic with local user from linux box to windows (NT_STATUS_ACCESS_DENIED)

This question has been asked in various forms but none of the solutions worked for me. I am trying to run icinga from a linux box and one the plugins uses WMI queries. It's failing, so I decided to ...
0
votes
1answer
27 views

Does a copied user get the same folder permissions on a share?

This should hopefully be an easy question: Let's say User#1 has explicit Modify permissions to a specific shared folder. We make a copy of User#1 and call it User#2. Will User#2 also have explicit ...
0
votes
1answer
37 views

Simple network resource share inhibited by catch 22 password issue

This is a very basic network I'm dealing with in which one machine in an office is running Windows Server 2016 and currently acting as nothing more than a data server with plans to leverage it for ...
3
votes
2answers
82 views

What are my options in terms of controlling document management

In REF to Shared network drive with Office and delete permissions disabled leads to not being able to save We have several businesses that are now pushing over 30+ employees and many of these ...
5
votes
2answers
3k views

systemd, per-user cpu and/or memory limits

There is similar question: Cgroups, limit memory per user, but the solution doesn't work in "modern" systems, where cgroups hierarchy is managed by systemd. Straightforward solution — templating ...
0
votes
0answers
2k views

Moving an AD user account from one domain to another within same forest

Requirement: In our organisation, several employees have frequent transfers to different zones, which are different domains within a single forest. Need to transfer users from one domain to another ...
0
votes
1answer
111 views

Create a User With a Empty Suffix in Windows AD

I have a server(windows server 2012) that had Windows AD(Active Directory) installed and is used as part of an application that I maintain. Most of the time my application programmatically manages ...
1
vote
4answers
4k views

How to create extra root user? [closed]

I have tried making a root2 user which should have the same permissions as root by doing useradd -g root root2 passwd root2 usermod -G root root2 usermod -aG wheel root2 but root2 can still not cat /...
1
vote
1answer
221 views

Separated reverse proxy per user on apache2.4

From mod_proxy guide I configured reverse proxy with user authentication. # Set reverse proxy ProxyPass "/" "http://localhost:10080/" ProxyPassReverse "/" "http://localhost:10080/" ProxyRequests On ...
1
vote
1answer
85 views

How to create untrusted user with ssh access

How can I create a user with ssh access but with only read access to their home directory and nothing else? I created a user and added it to a group but they still can ls /home/*. I'd like to give ...
0
votes
0answers
26 views

Mysterious vanishing user account

I am going nuts here with something I have never seen before. I have a Win 2012R2 server (running under Hyper-V, but I doubt that matters). This server is a member of a domain (with AD & GPOs). I ...
2
votes
0answers
620 views

Centralized Server User Management [closed]

I'm looking for the possible existing solutions to centralized user management. Most of the documentation found online refers to LDAP (Active Directory in particular) but I would like to know if there ...
0
votes
2answers
30 views

How do you handle home dirs for system/application users?

I have an airflow server where the airflow user has its home dir set to /opt/airflow. App related files and configs are stored here. Now, I have a couple of servers that the airflow user has to SSH ...
2
votes
2answers
772 views

How can I move a user account to another domain in the forest, whilst preserving permissions?

I've got user John Doe in the Server 2003 parent domain 'foo', which has a child domain 'bar'. Both domains are at a functional level of Server 2000. I'd like to move the user to the 'bar' domain, ...
1
vote
2answers
89 views

Questions about user authentication strategies

I am currently re-doing the IT infrastructure at my company. It's currently all over the place, so I'm trying to re-organise everything from the ground up. First thing I thought I would tackle is ...
1
vote
1answer
353 views

Change password of webdav user in Linux Ubuntu

I have a webdav setup in Ubuntu. I tried to change one user password by doing: sudo htpasswd users.password username followed by: sudo service apache2 restart Now that user cannot login with the ...
1
vote
2answers
618 views

New user added but having error in AIX 7.1

I newly add a user name perfmgr in AIX 7.1 using smitty, however when I try to change the password it output and error as below: # passwd perfmgr Changing password for "perfmgr" 3004-616 User "...