Manage local user accounts on Linux devices enrolled in Hexnode UEM

Managing multiple user accounts on a single device is crucial for adhering to a company’s security policies. Although the involvement of multiple users can improve resource allocation, inadequate management may result in unauthorized access and data breaches. With Hexnode, you can seamlessly manage all user accounts on Linux devices.

For Linux devices, Hexnode allows you to sync local accounts, create accounts, change passwords, force logout users, disable users, and delete users.

How to remotely manage local users on Linux devices?

Hexnode UEM provides a range of remote management options for local users on Linux devices.

Sync Local Accounts

The first step to managing local users on your Linux devices is to execute the Sync Local Accounts action to sync all the accounts on the devices with Hexnode UEM.

1. Log in to the Hexnode UEM console.
2. Navigate to the Manage tab and click on the name of the Linux device whose local accounts you want to display.
3. Click on Actions and choose Sync Local Accounts.
4. Now click on the Local Accounts tab.

Here you can see a list of all the active users on the Linux device, along with other parameters such as:

• Account name: Shows the username of the user.
• User ID (UID): Displays the unique ID assigned to the user by the device.
• Superuser: Specifies whether the user is a superuser or not.
• Status: Displays whether the user is currently logged in or logged out.

You can also view inactive or deleted users by clicking on the ‘Show Inactive/Deleted Users’ button situated at the bottom of the user accounts list.

Clicking on the name of a user will give you additional details like:

• Full name: Displays the full name of the user.
• Account name: Displays the username of the user.
• Groups: Specifies the group.
• Superuser: Specifies whether the user is a superuser or not.
• Login shell: Displays the details of the Login shell on the device.
• SID (Security Identifier): Represents a unique alphanumeric string assigned to the user account by the Linux operating system.
• Home directory path: Displays the location of the home folder of the user.
• User-created time: Displays the date and time when the user was created.
• Password last changed on: Displays the date and time when the account password was last modified.
• Last successful login: Displays the date and time of the last successful login of the user.

Create User Account

To effectively manage local users on Linux, you can also add more accounts to devices in addition to what already exists. Execute the Create User Account action from the Hexnode console to create new users.

1. Log in to your Hexnode portal.
2. Navigate to Manage > Devices.
3. Select the Linux device to which you want to add a new user.
4. Click the Local Accounts tab and click the Create User Account icon.
5. A dialog box opens. Here you can configure various settings such as:
   • Full Name
   • Account Name
   • Password
   • Verify Password
   • Login shell
   • Grant superuser privileges

1. Navigate to Manage > Devices.
2. Select the Linux device to which you want to add a new user.
3. Click Actions > Create User Account.
4. Configure various settings as mentioned above and click on Create to create a new user account.

Force Log Out User

This action will force log out the user from their current active session.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to force log out.
3. Click the Local Accounts tab.
4. Click the Power button icon corresponding to the user you want to force log out to the left of the horizontal three-button menu.
5. Click Proceed.
6. Click Confirm to force log out user.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to force log out.
3. Click the Local Accounts tab.
4. Click the name of the user that you want to force log out under the Local Accounts tab.
5. Click the Actions button and choose the Force Log-Out User option.
6. Click Proceed in the confirmation dialog box.

Change Password

This action allows you to change the user’s password.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) password you want to change.
3. Click the Local Accounts tab.
4. Click the name of the user to which you want to change the password.
5. Click Actions and choose the Change Password option.
6. Type in your new password and click on Proceed.
7. Click Confirm to change the password of the user.

1. Navigate to Manage > Devices.
2. Select the Windows device whose user account(s) password you want to change.
3. Click the Local Accounts tab.
4. Click the horizontal three-dot menu corresponding to the respective user.
5. Choose the Change Password option from the drop-down menu.
6. Type in your new password and then click Proceed.
7. Click Confirm to change the password of the user.

Disable User

This action helps you disable a user temporarily from accessing the device.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to disable.
3. Click the Local Accounts tab.
4. Click on the name of the user that you want to disable.
5. Click Actions and choose the Disable User option.
6. Click Proceed in the confirmation dialog box.
7. Click Confirm to disable the user.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to disable.
3. Click the Local Accounts tab.
4. Click the horizontal three-dot menu corresponding to the respective user.
5. Click the Disable User option from the drop-down menu.
6. Click Proceed in the confirmation dialog box.
7. Click Confirm to disable the user.

A disabled user can access their device only if the IT Admin enables them from the portal.

Delete Account

This action allows you to delete a user from the device.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to delete.
3. Click the Local Accounts tab.
4. Click on the name of the user that you want to delete.
5. Click Actions and choose the Delete User option.
6. Click Proceed in the confirmation dialog box.
7. Click Confirm to delete the user.

1. Navigate to Manage > Devices.
2. Select the Linux device whose user account(s) you want to delete.
3. Click the Local Accounts tab.
4. Click the horizontal three-dot menu corresponding to the respective user.
5. Click the Delete User option from the drop-down menu.
6. Click Proceed in the confirmation dialog box.
7. Click Confirm to delete the user.

Report of Local Accounts on Linux devices

Hexnode allows you to retrieve a detailed report outlining all user accounts across various Windows, macOS and Linux devices enrolled in Hexnode UEM. The report provides insights into session types, session details, sync dates, login and logout times, session durations, and more for each local user account on your Linux device. To access this report, simply navigate to Reports > Built-in Reports > Local Account > Local Accounts.