Manage local user accounts on Linux devices enrolled in Hexnode UEM

Managing multiple user accounts on a single device is crucial for adhering to a company’s security policies. Although the involvement of multiple users can improve resource allocation, inadequate management may result in unauthorized access and data breaches. With Hexnode, you can seamlessly manage all user accounts on Linux devices.

For Linux devices, Hexnode allows you to Create accounts, Change passwords, Force logout users, Revoke superuser privilege, Grant superuser privilege, Disable users, and Enable users.

How to remotely manage local users on Linux devices?

Hexnode UEM provides a range of remote management options for local users on Linux devices.

Sync Local Accounts

The first step to managing local users on your Linux devices is to execute the Sync Local Accounts action to sync all the accounts on the devices with Hexnode UEM.

1. Log in to the Hexnode UEM console.
2. Navigate to the Manage tab and click on the name of the Linux device whose local accounts you want to display.
3. Click on Actions and choose Sync Local Accounts.
4. Now click on the Local Accounts tab.

Here you can see a list of all the active users on the Linux device, along with other parameters such as:

• Account name: shows the username of the user.
• Unique ID (UID): displays the unique ID assigned to the user by the device.
• Superuser: specifies whether the user is a superuser or not.
• Status: displays whether the user is currently logged in or logged out.

You can also view inactive or deleted users by clicking on the ‘Show Inactive/Deleted Users’ button situated at the bottom of the user accounts list.

Clicking on the name of a user will give you additional details like:

• Full name: displays the full name of the user.
• Username: displays the username of the user.
• Groups: specifies the group.
• Superuser: specifies whether the user is a superuser or not.
• Unique ID (UID): displays the unique ID assigned to the user by the device.
• Login shell: displays the details of the Login shell on the device.
• Home directory path: displays the location of the home folder of the user.
• User-created time: displays the date and time when the user was created.
• Password last changed on: displays the date and time when the account password was last modified.
• Last successful login: displays the date and time of the last successful login of the user.

Create User Account

To effectively manage local users on Linux, you can also add more accounts to devices in addition to what already exists. Execute the Create User Account action from the Hexnode console to create new users.

1. Log in to your Hexnode portal.
2. Navigate to Manage > Devices.
3. Select the Linux device to which you want to add a new user.
4. Click the Local Accounts tab and click the Create User Account icon.
5. A dialog box opens. Here you can configure various settings such as:

• Full Name
• Account Name
• Password
• Verify Password
• Login shell
• Grant superuser privileges

1. Navigate to Manage > Devices.
2. Select the Linux device to which you want to add a new user.
3. Click Actions > Create User Account.
4. Configure various settings as mentioned above and click on Create to create a new user account.

Force Log Out User

This action will force log out the user from their current active session.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to force log out.
3. Click the Local Accounts tab.
4. Click the Power button icon corresponding to the user you want to force log out to the left of the horizontal three-button menu.
5. Click Proceed in the confirmation dialog box.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to force log out.
3. Click the Local Accounts tab.
4. Click the name of the user that you want to force log out under the Local Accounts tab.
5. Click the Actions button and choose the Force Log-Out User option.
6. Click Proceed in the confirmation dialog box.

Revoke superuser privileges

This action will remove the user from accessing superuser privileges on the device and will have restricted access and control over the device.

1. Navigate to Manage > Devices.
2. Select the Linux device whose superuser privilege must be removed.
3. Click the Local Accounts tab.
4. Click the horizontal three-dot menu corresponding to the respective user.
5. Choose the Revoke superuser privilege option from the drop-down menu.
6. Click Proceed in the confirmation dialog box.

Grant superuser privileges

This action will grant superuser privileges on the device.

1. Navigate to Manage > Devices.
2. Select the Linux device to which superuser privilege must be granted.
3. Click the Local Accounts tab.
4. Click the horizontal three-dot menu corresponding to the respective user.
5. Choose the Grant superuser privilege option from the drop-down menu.
6. Click Proceed in the confirmation dialog box.

Change Password

This action allows you to change the user’s password.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) password you want to change.
3. Click the Local Accounts tab.
4. Click the name of the user to which you want to change the password.
5. Click Actions and choose the Change Password option.
6. Type in your new password and click on Proceed.
7. Click Confirm to change the password of the user.

1. Navigate to Manage > Devices.
2. Select the Windows device whose user account(s) password you want to change.
3. Click the Local Accounts tab.
4. Click the horizontal three-dot menu corresponding to the respective user.
5. Choose the Change Password option from the drop-down menu.
6. Type in your new password and then click Proceed.

Disable User

This action helps you disable a user temporarily from accessing the device.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to disable.
3. Click the Local Accounts tab.
4. Click on the name of the user that you want to disable.
5. Click Actions and choose the Disable User option.
6. Click Proceed in the confirmation dialog box.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to disable.
3. Click the Local Accounts tab.
4. Click the horizontal three-dot menu corresponding to the respective user.
5. Click the Disable User option from the drop-down menu.
6. Click Proceed in the confirmation dialog box.

A disabled user can access their device only if the IT Admin enables them from the portal.

Enable User

This action allows you to enable a user account that was previously disabled using the Disable User action.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to enable.
3. Click the Local Accounts tab.
4. Click on the name of the user that you want to enable.
5. Click Actions and choose the Enable User option.
6. Click Proceed in the confirmation dialog box.
7. Click Confirm to enable the user.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to enable.
3. Click the Local Accounts tab.
4. Click the horizontal three-dot menu corresponding to the respective user.
5. Click the Enable User option from the drop-down menu.
6. Click Proceed in the confirmation dialog box.