28 votes
Accepted

Using at sign (@) in usernames linux. Is it safe?

I'd say it isn't good idea. I'd recommend to use simple regex: ([a-z_][a-z0-9_]{0,30}) Check following links: https://stackoverflow.com/questions/6949667/what-are-the-real-rules-for-linux-...
Jaroslav Kucera's user avatar
14 votes

How to automatically switch to home directory when switching user?

Try to us su - otheruser command which starts the shell as a login shell with an environment similar to a real login: it clears all the environment variables except TERM it initializes the ...
dsmsk80's user avatar
  • 5,937
14 votes

Using at sign (@) in usernames linux. Is it safe?

Using '@' in a username would make it impossible to use that username as the local-part of an email address, so I would say that is not a good idea.
Thomas Espe's user avatar
12 votes
Accepted

Support staff can reset some User passwords but not all?

Is it possible that they were once part of the Domain Admins group? If so, inheritance of permissions from OU would be disabled on them and you would have manually to reactivate it.
Manu's user avatar
  • 854
10 votes

How to enable ssh access without public/private keys?

You need to add PasswordAuthentication yes to your config file in /etc/ssh/sshd_config Once you have that added, you'll need to reload your SSH daemon, using sudo systemctl restart ssh or ...
frontsidebus's user avatar
9 votes
Accepted

How to switch user given a UID?

Look up the username with the id command, e.g.: id -un 1003 Then put it together with command substitution: su - $(id -un 1003)
Michael Hampton's user avatar
8 votes
Accepted

Different ssh authentication policies for different accounts

You can use the Match User or Match Group directives: Match Group usergroup PasswordAuthentication no If you don't want to use groups, you can specify each user: Match User user1,user2 ...
EEAA's user avatar
  • 110k
8 votes

Support staff can reset some User passwords but not all?

This is by design. Generally, lower-tier support staff (even secondary privileged accounts) should not have the ability reset passwords of higher-tier adminstrative accounts. This is viewed as a ...
Semicolon's user avatar
  • 1,878
7 votes

Deny RDP access to specific server from a particular user via GPO

You can use Group Policy to deny the user the right to log on to the server(s) via RDP as shown in the image.
joeqwerty's user avatar
  • 111k
6 votes
Accepted

Active Directory User Attribute List

The short answer is that there are only really a couple attributes that are intended for cosmetic metadata on a user account like description and info. Even the extensionAttributeX ones aren't really ...
Ryan Bolger's user avatar
  • 16.8k
6 votes

How to create linux account with useradd without creating mail spool

I'm setting up a Docker image with Alpine and shadow package and got the same error. To avoid this "Creating mailbox file: No such file or directory" error I had to add the following inline ...
Gaston Martin's user avatar
6 votes

Setting a Windows Non-Interactive User Account

With a Group Policy. Go to Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment and put your user account into the "Deny log on Locally" and "...
Massimo's user avatar
  • 71.3k
5 votes

What's the best way to see logged in users in Windows Server 2012?

"quser" command will give you the active now users the same result will give you the "qwinsta" command
Hristo Maznev's user avatar
5 votes
Accepted

Users in Administrators group cannot perform admin tasks with PowerShell remoting only administrator can

This behaviour is by design, but can be disabled by changing a registry setting. In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System find or create the DWORD value ...
Harry Johnston's user avatar
4 votes

What's the best way to see logged in users in Windows Server 2012?

Get-WMIObject -class Win32_ComputerSystem -ComputerName 192.168.1.9 | Select-Object UserName where 192.168.1.9 is the IP of the server
austin nwaka's user avatar
4 votes

What does the Windows 7 local group Power Users actually do?

Power Users also allows an account to create shares. I tested it by creating shares in a cluster with new-smbshare command where I only added the domain account to Power Users. Without being in Power ...
John Merager's user avatar
4 votes

What does the Windows 7 local group Power Users actually do?

Not quite true - if you use Office 2016/O365, all macros are disabled until you are at least a power user. You can enable anything you like and there is no error - it just doesn't work. But after I ...
Jennifer Thomas's user avatar
4 votes

How to separate linux accounts from email accounts?

That depends on the choice of applications you like to use. With SASL you're able to use seperate SMTP authentication: http://www.postfix.org/SASL_README.html If you choose i.e. dovecot as your ...
Achim Lammerts's user avatar
3 votes
Accepted

Basic Auth User Management

Is there a limit on the amount of basic auth users apache can handle? No, You can have as much values as you want inside .htpasswd but with time your server performance will suffer due to high disk I/...
Pedro Lobito's user avatar
3 votes

Which server was logged into by specific user

You can look at the Event Viewer, if you want to check manually. Under Windows Logs > Security you can see both successful and failed logins and you can see logouts. See the Task Category column in ...
Glenn Ferrie's user avatar
3 votes

How to separate linux accounts from email accounts?

First, you need to differentiate your software needs. Courier always uses end user system accounts to store mails, Dovecot can be configured not to use them, and Cyrus never uses system accounts (all ...
Nikita Kipriyanov's user avatar
3 votes
Accepted

How to separate linux accounts from email accounts?

This kind of configuration uses virtual domains. This is supported by most IMAP/POP3 servers as well as most MTAs. It takes extra work to configure. Try to use one authentication mechanism for ...
BillThor's user avatar
  • 27.9k
3 votes

What's the best way to see logged in users in Windows Server 2012?

Use quser or query user to check users connected quser query user Use qwinsta or query session to check sessions connected qwinsta query session
JorgeM's user avatar
  • 239
3 votes

AD Account must be able to create/reset/enable accounts without having rights to log in to the Domain controller

Look up "active directory delegation wizard". You can create an AD account and delegate these permissions. Google is your friend.
Linuxx's user avatar
  • 1,189
3 votes

Moving an AD user account from one domain to another within same forest

Having just tested it, I can vouch for the fact that Move-ADObject can move objects between domains. The syntax you need is as follows: Move-ADObject -Identity "CN=Test Move,OU=SourceOU,DC=Domain,...
John Gilbert's user avatar
3 votes
Accepted

Can I change the Logon type of a windows service through GPO

Create a GPO for your OU Go to Computer Configuration -> Preferences -> Control Panel -> Settings -> Services Create a service preference with Action -> New -> Service Enter your ...
Lenniey's user avatar
  • 5,280
3 votes
Accepted

AD best practice: delete or just disable?

The "not reusing usernames" thing sounds like cargo cult system administration to me. User permissions in an AD aren't internally assigned to a username but to the user object's Security IDentifier (...
Mikael H's user avatar
  • 5,089
3 votes

Is there a solution to manage users in some systems or at least in linux?

You can use Active directory to authenticate users across different platforms including linux. For linux one possible solution is to use sssd. Here is one example how to use it. About storing keys you ...
Romeo Ninov's user avatar
  • 5,932
2 votes

What characters should I use or not use in usernames on Linux?

It seems that there is a reason behind this limitation. If you try to run systemd(1) service for scripts, it can be starting as root and not as an ordinary user. It's caused by systemd not recognize ...
Arunas Bart's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible