Security Explorer 9.8.1


	NOTE: The Restore function is available only in the NTFS Security, Share Security, Registry Security, SharePoint Security, SQL Server Security, Exchange Security, and Active Directory Security modules. TIP: You can use the Restore basic task to select a backup file to restore. After you locate the backup file and click OK, the Restore Security dialog box opens with the Backup File box populated.

To restore a backup file

Open the module that is associated with the object[s] you want to restore.

Open the Browse tab.

Select Security | Restore Security.

-OR-

Click

on the Tool Bar; or right-click an object, and choose Restore Security.

In the Backup File box, type the full path and name for the backup file, or click Load to locate a backup file. The contents of the backup file display in the left pane.

Expand the backup file and examine the contents. You can choose specific objects to restore by selecting the box next to the object. Use De-select all children and Select all children to help you select objects to restore.


	NOTE: When restoring from the Share Security, Registry Security, SharePoint Security, SQL Server Security, and Active Directory modules, the check boxes and the Advanced button are unavailable. The Restore to different paths check box is available in the SharePoint Security module. The Restore permissions check box is selected by default.

Table 4. Restore options
Option	Description
Show differences (folders and files only)	Applies to NTFS Security module only. Select to show the folders and files that have different permissions than the ones in the backup file. If you select this check box, a message box displays. If you click Yes to proceed, the backup file reloads. If the permissions for a folder or file are different than those in the backup file, the name displays in red in the tree. If a folder contains sub-folders or files with different permissions, a red star displays next to the folder icon. Any differences between the current permissions and the backed up permissions are highlighted in yellow.
Include files when previewing backup	Applies to NTFS Security module only. Select to include files in the display. By default, only folders display. If you select this check box, the backup file reloads to display all the files. NOTE: Only select this check box if you are restoring a small number of individual files. If you are restoring a large number of objects, selecting this check box can slow the loading of the backup file.
Restore owner Restore permissions	Applies to NTFS Security module only. By default, both the owner and permissions are restored. Clear the appropriate check box for the item you do not want to restore.
Restore missing folders	Applies to NTFS Security module only. Select to recreate folders that are present in the backup file, but are no longer present in the destination path.
Restore SACL	Select to restore System Access Control List (SACL). Available only if SACL was included in the backup. See Backing up security.
Restore to different paths	Applies to NTFS Security, SQL Security, and SharePoint Security modules only. Select to restore the permissions to different paths. Browse to locate a path. Repeat to add additional paths if desired. Each path you select appears in the drop-down list. NOTE: If you want to restore to a single path, select the path from the drop-down list. When you click Restore, you can choose to restore to the path displayed in the box, or to all paths listed in the drop-down list. IMPORTANT: Applies to NTFS and SQL Security modules only. The alternate restore location must have the same structure as the backup file. IMPORTANT: Applies to SharePoint Security module only. If the alternate restore location does not have the same structure as the backup file, only the permissions for identical site items are restored. All other permissions are ignored.

Available only in the NTFS Security module. Click Advanced to set more options for the restore process. See Setting advanced options for the restore process.

Click Restore. See Completing a process.


	NOTE: If you selected to restore to a different path, you are asked if you want to restore to the selected path that displays in the box, or to all paths in the drop-down list.

Setting advanced options for the restore process

Available only in the NTFS Security module. On the Advanced Restore Settings dialog, you can filter the back up file to help you find permissions to restore. You also can select how the permissions are restored.

To set advanced options for the restore process

On the Restore Security dialog (see Restoring security), click Advanced to set more options for the restore process.

To help you find and select parts of the backup file to restore, you can filter the path and the accounts.


	NOTE: The Path Filter wildcards are applied to the selection first, and the Permission Accounts wildcard is applied second.

Filtering the path

Filter the path if the backup file is exceptionally large, say over 1,000,000 paths. If you try to load the full tree, the process could be slow, so you might want to load only the portion of the backup file that you plan to restore.

In addition to the default option of filtering all the paths, you can choose to apply the filters to root paths only. This option is useful if you have a large number of root paths in your backup, i.e., a flat list of paths. Alternatively, you can apply the filters to all paths except the root paths. This option is useful if you have a large backup in a more complicated tree-like structure.

You can use multiple wildcards, separated by commas. Use the * wildcard to match any number of characters. Use the ? wildcard to match a single character.

Table 5. Path wildcard examples
Selected Paths	Wildcard = *docs	Wildcard = test	Wildcard = *test?
Folder1 = c:\work	skipped	skipped	skipped
Folder2 = c:\work\docs	restored	skipped	skipped
Folder3 = c:\work\test	skipped	restored	skipped
Folder4 = c:\work\test1	skipped	restored	restored
Folder5 = c:\work\test2	skipped	restored	restored

Filtering permission accounts

Filtered out permissions do not display and are not restored. Use the * wildcard to match any number of characters. Use the ? wildcard to match a single character. For example, *smith will skip any group or user that does not include smith in the path. To select a group or user, click Advanced User Selection.

Select the restore mode.

You can overwrite all permissions, restore permissions only for accounts from the backup file, or add permissions from the backup file to the existing permissions. In any case, the restore process skips paths for which no permissions are loaded from the backup, so those permissions remain unchanged.

Select the scope mode.

You can restore permissions for only the paths and subpaths that are visible and selected in the tree, or for all subpaths of the paths selected in the tree, including those that are filtered out or not selected.

Click OK.

Purging backup files

In the NTFS Security module, you can purge backup files.

To purge backup files

Select Security | Purge Backup.

Browse to locate the folder that contains the backup files.


	NOTE: Only files in the selected folder are deleted; subfolders are not processed.

Adjust the number of days that determine which files are purged. The default is 30 days.

Backup files older than the specified number of days are purged every day at midnight. If you enter 0 days, all backup files are purged.

Click OK to purge the files.

Scheduling a backup purge

The Purge Backup Scheduler provides a convenient place in which to create, edit, and delete purge backup jobs.


	NOTE: The Purge Backup Scheduler is available only in the NTFS Security module. NOTE: The option to create tasks remotely is unavailable when purging.

To use the Purge Backup Scheduler to schedule a backup purge

Select Security | Purge Backup Scheduler.

The Purge Backup Scheduler Task List box lists the currently defined purge backup jobs in ascending alphabetical order by computer name.

To sort the columns, click the column heading.

Use the options to manage the list of tasks.

Table 6. Purge Backup Scheduler Task list options

Select the Create single scheduled task on local machine check box.

Browse for the target folder where the backup files are located.

NOTE: Only files in the selected folder are deleted; subfolders are not processed.

To back up only specified file types, type a value, such as *.exe, in the Wildcard box.

In the Account box, browse to locate an account under which to run the backup. If you do not enter an account, the backup runs under the local system account.

Click Schedule.

Edit

Edits the selected task.

Delete

Deletes the selected tasks.

Click Close.