Questions tagged [user-management]

Practices and procedures aimed at performing bulk and/or fine-grained operations on user accounts, permissions, allocated resources.

660 questions
6
votes
1 answer

Adding security to privoxy

I have this little proxy that i run with privoxy on my server, basically to take advantage of my server's static IP to connect to my office's VPN. I'm using it on a, let's say, uncommon port without authentication, an open proxy. As my SysAdmin…
Rod
  • 371
  • 4
  • 10
6
votes
1 answer

How do I add a domain user to a group on a non-domain server?

If we are running a server that is not attached to the domain, how would I go about adding a domain user to a local group on that server?
Michael Todd
  • 300
  • 1
  • 8
  • 15
6
votes
1 answer

User for MSSQL 2008 Service Accounts

I want to create a Domain User that runs the SQL Service Accounts. The reason for this is that I have setup mirroring and MS recommends having the same user (a domain user account) running the services across all the the computers in the…
Campo
  • 1,609
  • 17
  • 33
5
votes
2 answers

Need process to request, approve, and track technology needs of new hires

We currently have about 150 seats and growing. Our IT staff is very small so we need an efficient and accurate way to handle the provisioning of new-hires with equipment, software, credentials, etc. We have several different businesses and…
Daniel Lucas
  • 1,192
  • 1
  • 14
  • 25
5
votes
5 answers

useradd with 755 permissions

I d like to set the home directories permissions as 755 when i add the user via useradd. How can i do this? Thanks.
user30597
  • 234
  • 1
  • 4
  • 10
5
votes
5 answers

Centos 7 - adding a user to sudoers group - still is not in the sudoers file - why?

[user@localhost ~]$ su - Password: Last login: ... [root@localhost ~]# usermod -aG wheel user [root@localhost ~]# exit logout [user@localhost ~]$ sudo echo 123 [sudo] password for user: user is not in the sudoers file. This incident will be…
Why
  • 61
  • 1
  • 1
  • 3
5
votes
5 answers

LDAP for privilege control?

I've been wondering for a while if LDAP can be used to control user privileges. For example, if I have UNIX and web logins, is there an easy way to grant a user access to just or just UNIX (or even both?) My current attempt at solving this very…
neoice
  • 884
  • 5
  • 17
5
votes
1 answer

What is the minimum annual overhead required to admin an On-Premises Exchange Server

I help run three businesses, and we use two Exchange servers (Windows SBS) for basic email and file sharing. These seem to take up a lot of admin time when contrasted with the linux file server we have, which basically "just works". Is this…
5
votes
7 answers

Access to the Production Systems for non sys-admins

What's your opinion on access to the Production or Live Systems by non sys-admins? Do you think this access should be provided with nominal usernames? Do you think access to the log files or the databases should be allowed?
friol
  • 191
  • 1
  • 5
5
votes
2 answers

Minimal set of rights to run a process on a Microsoft Windows Server

I want to run a process (not a service) under a different user on a Microsoft Windows Server and I need the minimal set of rights which are needed to do so. The minimal set of rights is required, because this user should not be able to login and…
5
votes
0 answers

Why is it common in the startup world for ssh keys to be used for authetication instead of kerberos?

My first few jobs as a linux admin had be working under some very senior admins. In all of these cases kerberos was setup for users to request a security token and gain access to company servers for a set amount of time. Now as I have started…
5
votes
2 answers

How do I migrate user-accounts from OpenLDAP to Active-Directory?

We want to migrate our user-accounts from OpenLDAP to Active-Directory without changing the passwords and such. The users shouldn't notice the difference against which server they're authenticating…
ppuschmann
  • 610
  • 1
  • 6
  • 16
5
votes
1 answer

PowerShell - Finding all of users' group memberships and kicking it out of them

as title says, I have to find all the groups that the user is a member of, and deleting its membership from all of them. I've tried this: get-adgroup -filter * | where {(Get-ADGroupMember $_ | foreach {$_.PrimarySmtpAdress}) -contains…
5
votes
2 answers

Issues With Printer GPO

I have a Windows Server 2008 R2 print server. The client machines are Windows 7 Professional. I am having issues with user accounts not getting the printer added when they login. Things that I have tried: Installed Printer Driver In Printer…
5
votes
1 answer

Multi-user bzr server

I'm currently investigating whether it is possible to serve bzr in a setup similar to what gitolite does for git. This means a single unix account, with different users managed via their ssh public keys. I'd be happy to integrate this with gitolite,…
MvG
  • 1,813
  • 15
  • 18