Strange group in AWS Simple AD Directory named âGorillaBoyAdministratorâ
Clash Royale CLAN TAG#URR8PPP
up vote
1
down vote
favorite
I recently setup a Simple AD Directory using the AWS Directory Service. When I browse the Directory using Active Directory Users and Computers from a Windows 2016 instance, I noticed a group named "GorillaBoyAdministrator" under Users.
Googling this name does not produce any results. The group is configured as a "Security Group - Global" and has no members, however it is a member of Domain Admins. Does anyone have any idea what this group is for?
At this point, I am inclined to delete the directory and recreate it, although that would entail a lot of rework, since I have a bunch of dependencies already setup.
UPDATE: According to AWS Support, this group is created for WorkDocs, see answer below.
active-directory amazon-web-services
 |Â
show 3 more comments
up vote
1
down vote
favorite
I recently setup a Simple AD Directory using the AWS Directory Service. When I browse the Directory using Active Directory Users and Computers from a Windows 2016 instance, I noticed a group named "GorillaBoyAdministrator" under Users.
Googling this name does not produce any results. The group is configured as a "Security Group - Global" and has no members, however it is a member of Domain Admins. Does anyone have any idea what this group is for?
At this point, I am inclined to delete the directory and recreate it, although that would entail a lot of rework, since I have a bunch of dependencies already setup.
UPDATE: According to AWS Support, this group is created for WorkDocs, see answer below.
active-directory amazon-web-services
I would shutdown this instance immediately, create an AMI (for backup and archiving). I would leave it down until the next step (as a minimum). I would create a new AWS Directory Service as a test platform and check if this group exists there. I am not aware of any AWS accounts that use that name. At the same time, I would be opening a support ticket with AWS.
â John Hanley
1 hour ago
I don't know of any way to shutdown a Simple AD directory other than to delete it. There is only once instance connected, and I did shut it down right away. I guess it's time to open a support ticket with AWS. Thank you for the prompt response.
â Jim Walker
44 mins ago
Sorry about that. I did not pay attention to the Simple AD part, I just saw Directory Services and responded. Security is one of my specialties and if you were hacked, waiting for an answer on SO could be hazardous.
â John Hanley
41 mins ago
Absolutely. The only reason I am not terribly worried is because this AWS account does not have any production data on it. It's still concerning though, so on the line with AWS support right now.
â Jim Walker
36 mins ago
Please post what you find out. I am very interested.
â John Hanley
34 mins ago
 |Â
show 3 more comments
up vote
1
down vote
favorite
up vote
1
down vote
favorite
I recently setup a Simple AD Directory using the AWS Directory Service. When I browse the Directory using Active Directory Users and Computers from a Windows 2016 instance, I noticed a group named "GorillaBoyAdministrator" under Users.
Googling this name does not produce any results. The group is configured as a "Security Group - Global" and has no members, however it is a member of Domain Admins. Does anyone have any idea what this group is for?
At this point, I am inclined to delete the directory and recreate it, although that would entail a lot of rework, since I have a bunch of dependencies already setup.
UPDATE: According to AWS Support, this group is created for WorkDocs, see answer below.
active-directory amazon-web-services
I recently setup a Simple AD Directory using the AWS Directory Service. When I browse the Directory using Active Directory Users and Computers from a Windows 2016 instance, I noticed a group named "GorillaBoyAdministrator" under Users.
Googling this name does not produce any results. The group is configured as a "Security Group - Global" and has no members, however it is a member of Domain Admins. Does anyone have any idea what this group is for?
At this point, I am inclined to delete the directory and recreate it, although that would entail a lot of rework, since I have a bunch of dependencies already setup.
UPDATE: According to AWS Support, this group is created for WorkDocs, see answer below.
active-directory amazon-web-services
active-directory amazon-web-services
edited 15 mins ago
asked 2 hours ago
Jim Walker
15616
15616
I would shutdown this instance immediately, create an AMI (for backup and archiving). I would leave it down until the next step (as a minimum). I would create a new AWS Directory Service as a test platform and check if this group exists there. I am not aware of any AWS accounts that use that name. At the same time, I would be opening a support ticket with AWS.
â John Hanley
1 hour ago
I don't know of any way to shutdown a Simple AD directory other than to delete it. There is only once instance connected, and I did shut it down right away. I guess it's time to open a support ticket with AWS. Thank you for the prompt response.
â Jim Walker
44 mins ago
Sorry about that. I did not pay attention to the Simple AD part, I just saw Directory Services and responded. Security is one of my specialties and if you were hacked, waiting for an answer on SO could be hazardous.
â John Hanley
41 mins ago
Absolutely. The only reason I am not terribly worried is because this AWS account does not have any production data on it. It's still concerning though, so on the line with AWS support right now.
â Jim Walker
36 mins ago
Please post what you find out. I am very interested.
â John Hanley
34 mins ago
 |Â
show 3 more comments
I would shutdown this instance immediately, create an AMI (for backup and archiving). I would leave it down until the next step (as a minimum). I would create a new AWS Directory Service as a test platform and check if this group exists there. I am not aware of any AWS accounts that use that name. At the same time, I would be opening a support ticket with AWS.
â John Hanley
1 hour ago
I don't know of any way to shutdown a Simple AD directory other than to delete it. There is only once instance connected, and I did shut it down right away. I guess it's time to open a support ticket with AWS. Thank you for the prompt response.
â Jim Walker
44 mins ago
Sorry about that. I did not pay attention to the Simple AD part, I just saw Directory Services and responded. Security is one of my specialties and if you were hacked, waiting for an answer on SO could be hazardous.
â John Hanley
41 mins ago
Absolutely. The only reason I am not terribly worried is because this AWS account does not have any production data on it. It's still concerning though, so on the line with AWS support right now.
â Jim Walker
36 mins ago
Please post what you find out. I am very interested.
â John Hanley
34 mins ago
I would shutdown this instance immediately, create an AMI (for backup and archiving). I would leave it down until the next step (as a minimum). I would create a new AWS Directory Service as a test platform and check if this group exists there. I am not aware of any AWS accounts that use that name. At the same time, I would be opening a support ticket with AWS.
â John Hanley
1 hour ago
I would shutdown this instance immediately, create an AMI (for backup and archiving). I would leave it down until the next step (as a minimum). I would create a new AWS Directory Service as a test platform and check if this group exists there. I am not aware of any AWS accounts that use that name. At the same time, I would be opening a support ticket with AWS.
â John Hanley
1 hour ago
I don't know of any way to shutdown a Simple AD directory other than to delete it. There is only once instance connected, and I did shut it down right away. I guess it's time to open a support ticket with AWS. Thank you for the prompt response.
â Jim Walker
44 mins ago
I don't know of any way to shutdown a Simple AD directory other than to delete it. There is only once instance connected, and I did shut it down right away. I guess it's time to open a support ticket with AWS. Thank you for the prompt response.
â Jim Walker
44 mins ago
Sorry about that. I did not pay attention to the Simple AD part, I just saw Directory Services and responded. Security is one of my specialties and if you were hacked, waiting for an answer on SO could be hazardous.
â John Hanley
41 mins ago
Sorry about that. I did not pay attention to the Simple AD part, I just saw Directory Services and responded. Security is one of my specialties and if you were hacked, waiting for an answer on SO could be hazardous.
â John Hanley
41 mins ago
Absolutely. The only reason I am not terribly worried is because this AWS account does not have any production data on it. It's still concerning though, so on the line with AWS support right now.
â Jim Walker
36 mins ago
Absolutely. The only reason I am not terribly worried is because this AWS account does not have any production data on it. It's still concerning though, so on the line with AWS support right now.
â Jim Walker
36 mins ago
Please post what you find out. I am very interested.
â John Hanley
34 mins ago
Please post what you find out. I am very interested.
â John Hanley
34 mins ago
 |Â
show 3 more comments
1 Answer
1
active
oldest
votes
up vote
2
down vote
Spoke with AWS Customer Support and apparently this group is created for AWS WorkDocs. So it is an internal AWS group. The support agent seemed to indicate that it's safe to delete if there are no plans to use WorkDocs with the directory in question. To quote AWS support:
"So the group "GorillaBoyAdministrator" is created for WorkDocs service."
I could not findGorillaBoyAdministrator
anywhere in the AWS documentation and AWS is usually excellent and voluminous at documentation.
â John Hanley
14 mins ago
I looked too, there is no mention whatsoever. In fact, if you google the term at the moment, this post is the only one that shows up.
â Jim Walker
10 mins ago
add a comment |Â
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
2
down vote
Spoke with AWS Customer Support and apparently this group is created for AWS WorkDocs. So it is an internal AWS group. The support agent seemed to indicate that it's safe to delete if there are no plans to use WorkDocs with the directory in question. To quote AWS support:
"So the group "GorillaBoyAdministrator" is created for WorkDocs service."
I could not findGorillaBoyAdministrator
anywhere in the AWS documentation and AWS is usually excellent and voluminous at documentation.
â John Hanley
14 mins ago
I looked too, there is no mention whatsoever. In fact, if you google the term at the moment, this post is the only one that shows up.
â Jim Walker
10 mins ago
add a comment |Â
up vote
2
down vote
Spoke with AWS Customer Support and apparently this group is created for AWS WorkDocs. So it is an internal AWS group. The support agent seemed to indicate that it's safe to delete if there are no plans to use WorkDocs with the directory in question. To quote AWS support:
"So the group "GorillaBoyAdministrator" is created for WorkDocs service."
I could not findGorillaBoyAdministrator
anywhere in the AWS documentation and AWS is usually excellent and voluminous at documentation.
â John Hanley
14 mins ago
I looked too, there is no mention whatsoever. In fact, if you google the term at the moment, this post is the only one that shows up.
â Jim Walker
10 mins ago
add a comment |Â
up vote
2
down vote
up vote
2
down vote
Spoke with AWS Customer Support and apparently this group is created for AWS WorkDocs. So it is an internal AWS group. The support agent seemed to indicate that it's safe to delete if there are no plans to use WorkDocs with the directory in question. To quote AWS support:
"So the group "GorillaBoyAdministrator" is created for WorkDocs service."
Spoke with AWS Customer Support and apparently this group is created for AWS WorkDocs. So it is an internal AWS group. The support agent seemed to indicate that it's safe to delete if there are no plans to use WorkDocs with the directory in question. To quote AWS support:
"So the group "GorillaBoyAdministrator" is created for WorkDocs service."
edited 12 mins ago
answered 20 mins ago
Jim Walker
15616
15616
I could not findGorillaBoyAdministrator
anywhere in the AWS documentation and AWS is usually excellent and voluminous at documentation.
â John Hanley
14 mins ago
I looked too, there is no mention whatsoever. In fact, if you google the term at the moment, this post is the only one that shows up.
â Jim Walker
10 mins ago
add a comment |Â
I could not findGorillaBoyAdministrator
anywhere in the AWS documentation and AWS is usually excellent and voluminous at documentation.
â John Hanley
14 mins ago
I looked too, there is no mention whatsoever. In fact, if you google the term at the moment, this post is the only one that shows up.
â Jim Walker
10 mins ago
I could not find
GorillaBoyAdministrator
anywhere in the AWS documentation and AWS is usually excellent and voluminous at documentation.â John Hanley
14 mins ago
I could not find
GorillaBoyAdministrator
anywhere in the AWS documentation and AWS is usually excellent and voluminous at documentation.â John Hanley
14 mins ago
I looked too, there is no mention whatsoever. In fact, if you google the term at the moment, this post is the only one that shows up.
â Jim Walker
10 mins ago
I looked too, there is no mention whatsoever. In fact, if you google the term at the moment, this post is the only one that shows up.
â Jim Walker
10 mins ago
add a comment |Â
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f931212%2fstrange-group-in-aws-simple-ad-directory-named-gorillaboyadministrator%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
I would shutdown this instance immediately, create an AMI (for backup and archiving). I would leave it down until the next step (as a minimum). I would create a new AWS Directory Service as a test platform and check if this group exists there. I am not aware of any AWS accounts that use that name. At the same time, I would be opening a support ticket with AWS.
â John Hanley
1 hour ago
I don't know of any way to shutdown a Simple AD directory other than to delete it. There is only once instance connected, and I did shut it down right away. I guess it's time to open a support ticket with AWS. Thank you for the prompt response.
â Jim Walker
44 mins ago
Sorry about that. I did not pay attention to the Simple AD part, I just saw Directory Services and responded. Security is one of my specialties and if you were hacked, waiting for an answer on SO could be hazardous.
â John Hanley
41 mins ago
Absolutely. The only reason I am not terribly worried is because this AWS account does not have any production data on it. It's still concerning though, so on the line with AWS support right now.
â Jim Walker
36 mins ago
Please post what you find out. I am very interested.
â John Hanley
34 mins ago