Tchater maintenant avec le support
Tchattez avec un ingénieur du support

Security Explorer 9.8.1 - Installation Guide

Minimum permissions for Access Explorer

 
Table 4. Minimum permissions for Access Explorer
Account
Requirement

Logged in user
•
To install the Access Explorer agent, the user must have administrator access on the local computer.
•
To create the Access Explorer database, the logged in user (Windows® Authentication) or SQL account must have rights to create databases, logins, and groups on the computer running SQL Server®.
•
Must have rights to create groups in Active Directory®.
•
Must be able to enumerate the targets during scope selection.

Security Explorer service account
•
Must have Login as service right on the computer on which it is being installed.
•
Will be automatically granted Read and Write permissions on the Security Explorer database (Windows Auth.)
•
If the server is configured to use SQL authentication, the SQL credentials will be used to access the database instead of the service account.
•
Must be able to write to the Admin$ share to deploy the node (local admin rights)

Service accounts for managed computers
•
Local Administrator rights for managed computers is recommended.
•
To create the database, Sysadmin rights on the computer running SQL Server are required. Once the database is created, the service account can be granted dbowner rights on the database alone.
•
The database has to be created using the wizard in Security Explorer.
•
Full Administrator rights are required on the Netapp filer / EMC
•
Must be able to do group expansion and SID resolution for managed accounts and their membership (Domain Admin recommended).

Port requirements for Access Explorer

On the server where the Access Explorer agent is installed, configure the firewall to allow outgoing traffic on TCP port 8721, as well as incoming traffic on TCP port 18530. Also, ensure that the Access Explorer service firewall has the following exceptions configured: incoming TCP 8721, 8722, and outgoing 18530.

Minimum requirements for Microsoft Exchange for Security Explorer

Client access server configuration
1
Check that all Exchange Windows services that have Automatic startup type are started.
2
Check that IIS Admin Service and World Wide Web Publishing Service IIS Services are started.
3
Check that the Exchange Web Application is configured correctly in IIS:
•
Authentication: Windows Authentication is Enabled
•
SSL Settings: Require SSL is switched on
4
Exchange Server 2010 - 2019: Enable Windows PowerShell® Remoting on the Exchange Server by running the Windows PowerShell command: Enable-PSRemoting –force.
Client Configuration
1
Open port 443 on the firewall.
2
Install an Exchange Server SSL certificate.
Required software

The following versions of Microsoft® Exchange are supported for Security Explorer®. This section contains the required software for each version.

•
Exchange 2007
•
Exchange mixed modes: 2007–2010 and 2007–2013
•
Exchange 2010, 2013, 2016, 2019
•
Exchange mixed modes: 2010–2013, 2010–2016, 2010-2019, 2013–2016, 2013-2019, 2016-2019

Exchange 2007

 
Table 5. Required software for Microsoft® Exchange 2007
Client type
Required software

Windows Vista®

Windows Server® 2008
•
IIS 6.0 Management Compatibility from Windows Features
•
Windows PowerShell 1.0 or 2.0 from Windows Features

Windows® 7

Windows Server 2008 R2
•
IIS 6.0 Management Compatibility from Windows Features
•
Windows PowerShell 2.0 or later from Windows Features

Windows 8

Windows 8.1

Windows 10

Windows Server 2012

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019
•
IIS 6.0 Management Compatibility from Windows Features
•
NET Framework 3.5 from Windows Features

All Operating Systems
•
Management Tools from Exchange Server 2007 Installation Package
Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation