Questions tagged [user-permissions]

419 questions
3
votes
2 answers

Can I "allow logon locally" for ALL local accounts and some domain accounts?

I have used a "Allow logon locally" GPO on a few machines to restrict who can use them. It is annoying that I have to create/link a separate GPO for each set of machines/users (Where is item-level targeting when you need it?), but now I'm running…
3
votes
1 answer

How do I fix OpenShift permission denied error?

I'm try to run OrientDB docker container in OpenShift. I encounter a permissions error when it tries to deploy. I'm using a Mac. This is the error: /orientdb/bin/server.sh: line 114: can't create /orientdb/bin/orient.pid: Permission denied This is…
Madison
  • 31
  • 1
  • 1
  • 3
3
votes
1 answer

How can a user traverse directories to a file but hide all other items while traversing subdirectories Windows server 2012

How can a user traverse folders to a file that he has rights to, but not show other files or directories that he doesn't have rights to while traversing all other directories to get to the specified file. ? Lets say that the file is located deep in…
Levis
  • 41
  • 1
  • 5
3
votes
2 answers

Linux user without any filesystem permissions

I need to make a linux user for the sole purpose of an SSH proxy. Amongst other things, the user should not be able to go around exploring the filesystem or even access a shell really. Obviously I could just chmod remove all read/write/execute…
3
votes
1 answer

Active Directory permissions dissapears

I have recently configured Active directory delegation and in one specific OU inherited permissions disappears from all users except one I have recently created for tests. Non of the users are a member of protected groups like: Enterprise Admins,…
3
votes
0 answers

Giving users of an OU permission to enable and disable users of their own OU

I want users of an OU to have access to enable and disable user accounts in their own OU. I believe in order to do this I need to grant the Read and Write userAccountControl property to the SELF security principal of the OU in question like so: I…
red888
  • 4,183
  • 18
  • 64
  • 111
3
votes
0 answers

MySQL user suddenly loses some permissions

On CentOS 7, I have a MySQL (actually MariaDB) database user that needs all server privileges from a remote IP (to be able to use Navicat Premium to manage the database). Somehow every once in a while this user loses its 'Create temporary tables'…
Dylan
  • 181
  • 1
  • 4
3
votes
2 answers

Linux user to access and execute only on one location

I am trying to figure out a solution for this: I have some user which I created using command useradd. I want to allow this user do whatever he wants on a special location, say /var/www/. He might require to upload or download a file, extract a…
3
votes
1 answer

postfix parameter default_privs

I have set default_privs=myuser in main.cf, which is a perl script, executed in the context of this user. In the perl script I added some debug to print out the user: my $exec_username = $ENV{LOGNAME} || $ENV{USER} ||…
markus
  • 1,080
  • 5
  • 18
  • 38
3
votes
1 answer

NET USE - How to get list of all shares (elevated, non-elevated)

The command: NET USE Will display open connections by any process of current user. But, if command prompt (cmd.exe, or any shell) is non-elevated, it would display only connections opened by non-elevated processes. To see shares open by elevated…
3
votes
1 answer

What is a safe alternative to wildcards in /etc/sudoers?

In the /etc/sudoers file on my Red Hat server, I have this line: %webdevgroup ALL=NOPASSWD: /bin/chmod * /home/http/* This is clearly a bad idea, since someone could do something like this: sudo /bin/chmod 777 /home/http/../../etc/sudoers Is there…
Zach
  • 41
  • 2
3
votes
1 answer

AD IT Helper Permissions

My apologies if this has been asked before. If I knew the proper search terms then google would be more effective. I would like to add a user that can join computers to the domain, Install software and printers on User Computers, maybe even change…
Jimmy
  • 111
  • 6
3
votes
2 answers

Default shares need to be hidden from normal domain users

I have installed windows server and it produces default shared folders that users can see when they are looking at other folders I have shared for them. Is there a way to hide these system folders or at least stop the domain users from seeing them…
3
votes
3 answers

Can't run batch files from server, Users do not have permission to access file

We're trying to run some logon / logoff scripts on server 2008r2 domain controller. The script is located in the default group policy logoff directory \\domain.local\SysVol\domain.local\Policies\{guid}\User\Scripts\Logoff Nothing was happening at…
ASGJim
  • 117
  • 2
  • 4
  • 11
3
votes
4 answers

Remote access to server via service control panel for non-admin user in Windows 2008

I'm trying to configure my Windows 2008 servers so that my developers can view their status without needing to log on to the box or be an admin. Unfortunately, the permissions set in Windows 2008 for remote non-admin users don't include the ability…