Thank you all, we are evaluating Bitwarden and Keeper Security at the moment.

Could someone give me some ideas for setting up a cloud based, enterprise password management system ?

At the moment, we all are using the locally installed Keepass software though it nowadays getting difficult to keep it up to date (This requirement is purely for non-IT staff from around 8-10 offices; I am still happy with my Keepass database for storing all IT related passwords and I really don't need to share it in real-time either!).

Ideally, the password management system should be accessible over a browser session (and/or using an iPhone/Andorid App) and we should be able to implement policies related to password length, rotation etc. I would also consider having a role based administration feature so some users are allowed to make changes relevant to their department.

I have around 30 users using Outlook with G Suite Sync for Microsoft Outlook. Outlook automatic archiving feature is turned off by default when you create the sync user profile. On top of that, I tell all of my users to not to run manual archive from Outlook as G Suite Sync for Microsoft Outlook doesn't support dragging and dropping the archived emails back to Outlook if they change their mind.

If they need the archived mail back again then they will have to import it from Gmail web interface and it is not a straight forward process as Gmail doesn't support PST format. Have a look at the https://tools.google.com/dlpage/outlookmigration page for more details.

Having said that, this is not going to solve the current mess in that user's mailbox. Depending on the type of the issue, you may want to look for a duplicator finder or something similar to clean it first.

It took me a while to revisit this issue though i have managed to address this issue using multiuser SMB mount.

In essence, you would add the mount point to the fstab using the multiuser and ntlmssp options and then you would run
the cifscreds command to authenticate a specific user against the SMB server at the time of login so that that user would be able to see only those sub-folders/files which he/she has access to under the smb mount.

Thanks everyone, let me try your suggestions and come back to this thread again soon

I have an Ubuntu 16.04 server and a Synology NAS, both joined to my Windows 2008 R2 domain.

Ubuntu machine is used by multiple, say, 10 domain users via SSH.

Synology NAS has got a file share with separate level of SMB access permissions for each of these domain users.

I have a requirement to automatically mount this file share on the Ubuntu machine whenever my domain users login to it using SSH.

(I would say, this requirement is something like the logon script in Windows which would allow a user to map a network drive to their computer using their login credentials during the logon process so that the user would able to see on those files and folders in the network drive which he/she has access to)

How do I get this working?

@scottalanmiller sure, but I will be needing the 3rd party patching option as well

@scottalanmiller
It is mainly for Windows. Linux machines are mainly R&D workstations supplied in addition to the regular workstations which needs to be updated only when required. So, more or less, I am looking for a controlled patch management solution.

@scottalanmiller

Goal - To monitor the patch (both OS and 3rd party software) status of my user workstations from a central console and update them or install the latest versions if necessary.
In an ideal world "systems will all update themselves" but it may not be the case in the real world or at-least in my situation.

Let me tell you where I am now –

• I am evaluation Automox at the moment.

• Sales guys at cloudmanagementsuite seems to be not interested to give me an evaluation, probably because my requirement is for less than 50 endpoints.

• I would love to use the ManageEngine Desktop Central if they had a cloud based solution!

Now, if someone asks me why cloud?

I have a lot of home based remote users they don’t really talk to our corporate network so frequently. Also, I have a few remote offices with 1-2 users where setting up a dedicated server infrastructure in not feasible.