Tchater maintenant avec le support
Tchattez avec un ingénieur du support

Security Explorer 9.9.2 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Checking minimum requirements

The first time you expand an Exchange server in the Navigation pane of the Exchange Security module, an information message displays the minimum requirements for managing Exchange security.

For more detailed information about minimum requirements, see the Security Explorer Installation Guide.

To check minumum requirements
1
Open the Exchange Security module for the first time.
•
To view the minimum requirements, click the version of Exchange.
•
To view a list of prerequisites for the current account, click Pre-Requisites.
2
If you click Yes to proceed, you are asked to enable Exchange Impersonation for the selected organization. Exchange Impersonation must be enabled for the currently logged on user.
 
* 
IMPORTANT: If you are using Exchange Server 2013, 2016, or 2019, you do not have the opportunity to enable Exchange Impersonation at this point. You must enable Exchange impersonation prior to accessing the Exchange Server in Security Explorer.

Viewing Exchange permissions

 
* 
IMPORTANT: If Exchange Server 2013, 2016, or 2019 is installed in a child domain, you cannot manage directory permissions nor disable the mail-enable property for public folders.
To view Exchange permissions
1
Open the Exchange Security module.
2
Open the Browse tab.
3
Select an item in the Navigation pane. Alternatively, type a path, in either drive letter notation or UNC pathname format, in the Path box, and click Go.
The Objects pane displays objects along with the extended information. The Permissions pane displays permissions for the selected object.
 
* 
NOTE: If user has a different login name and display name, the login name is used to display directory permissions, and the display name (from Address book) is used to display Mailbox/Public Folder permissions.

Granting Exchange permissions

 
* 
IMPORTANT: If Exchange Server 2013, 2016, or 2019 is installed in a child domain, you cannot grant directory permissions to mail-enabled public folders.
TIP: The Grant task provides a quick way to grant permissions. See Using the Grant task. For more options, add a path, and click Switch to Security Explorer Classic (Advanced). The path carries to the Grant Exchange Permissions dialog box, but permissions do not.
To grant Exchange permissions using the Browse tab
1
Open the Exchange Security module.
2
Open the Browse tab.
3
Select an item in the Navigation pane, or type a path in the Path box, and click Go.
4
Select an object in the Objects pane or a permission in the Permissions pane.
5
Select Security | Grant Permissions.
-OR-
Click , click Grant on the Control Button Bar; or right-click the object or permission, and choose Grant Permissions.
6
Select the groups and users to grant the permission. There are a variety of ways to select groups and users. See Using the Browse tab to grant permissions.
7
Select a permission type, a permission to grant and how to apply it.
•
To select more than one permission, select how to apply the permission, and click Advanced Permission Selection.
•
To propagate the permission to subfolders, select the check box.
8
To add the group/user to the List of users and groups to grant list, click Add.
9
Click OK. See Completing a process.

Revoking Exchange permissions

 
* 
TIP: The Revoke basic task provides a quick way to revoke permissions. You also can use the Revoke Unknown and Revoke Disabled advanced tasks to easily revoke permissions for those specific situations. See Using the Revoke tasks.

For more options, add a path, and click Switch to Security Explorer Classic (Advanced). The path carries to the Revoke Exchange Permissions dialog box, but the permissions do not.

To revoke Exchange permissions using the Browse tab
1
Open the Exchange Security module.
2
Open the Browse tab.
3
Select an item in the Navigation pane, or type a path in the Path box, and click Go.
4
Select an object in the Objects pane or a permission in the Permissions pane.
5
Select Security | Revoke Permissions.
-OR-
Click , click Revoke in the Control Button Bar; or right-click the object, and choose Revoke Permissions.
6
Select the groups and users to revoke the permission. There are a variety of ways to select groups and users. See Using the Browse tab to revoke permissions.
7
From the Permission list, select the permissions to revoke, and whether or not to Allow or Deny. If the choice is not available in the list, click Advanced Permission Selection to create a custom choice.
8
To add the group/user to the List of users and groups to revoke list, click Add.
9
Select options.
 
Table 1. Revoke options
Option
Description

Revoke all permissions (Allow and Deny) for the selected user

Select to revoke all permissions (Allow and Deny) for the selected user.

Propagate permissions down to subfolders

Select to revoke permissions in any subfolders for the selected user.

Advanced Revoke Options

If you select this check box, a warning message displays and the Revoke Folder Permissions dialog box becomes inactive, so the other users/groups and permissions you selected are not included in this action. To continue, click Yes.

Revoke all unknown and deleted accounts

Active only when the Advanced Revoke Options check box is selected. Select to revoke permissions on unknown or deleted accounts.

Revoke all disabled accounts

Active only when the Advanced Revoke Options check box is selected. Select to revoke permissions on all disabled accounts.

NOTE: For Exchange 2010, mailbox folder disabled permissions do not display in Security Explorer, therefore the Revoke Disabled Accounts function will not be able to revoke those permissions.
NOTE: For Exchange 2010, public folder disabled permissions display with NT User: within the account name and cannot be revoked.
10
Click OK. See Completing a process.
Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation