Tchater maintenant avec le support
Tchattez avec un ingénieur du support

Security Explorer 9.9 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Selecting users and groups manually

With the manual method, you select permissions one at a time. For example, use the Manual User/Group Selection tab to clone the permissions on the Everyone group to the BobV user account. The BobV user account will have the same access rights as the Everyone group

To select users and groups manually
1
Open the Manual User/Group Selection tab.
2
In the Source Group or User area, select the domain or object from which to pull the permissions. The default is the current object, whose path displays in the top box.
In the Destination Group or User area, select the domain or object to receive the cloned permissions. The default is the current object, whose path displays in the top box.
•
To add all users to the Source and Destination lists, click Show Users.
•
To select a specific user to add to the Source and Destination lists, click Advanced User Selection.
•
To return the Source and Destination lists to groups only, click Refresh.
 
* 
IMPORTANT: Do not select a pair of accounts where the source is the same as the target. The permissions for the accounts will be deleted as a result of the cloning process.
3
Click Add.
4
Continue with step 6 of the clone process. See Using the Browse tab to clone permissions.

Selecting users and groups automatically

The Clone feature is useful when you are migrating domains. After you create all the new groups and users in the new domain, use the Automatic User/Group Selection tab to copy the permissions from the old domain to the new domain.

 
* 
NOTE: The Automatic User/Group Select tab is not available in the SQL Server Security, SharePoint Security, Exchange Security, and Active Directory Security modules.
TIP: You also can use the Auto Clone advanced task to automatically pair accounts for cloning. Once you enter a path, and click OK, the Automatic User/Group Selection tab opens with the path list automatically populated.
To select users and groups automatically
1
Open the Automatic User/Group Selection tab.
2
From the Source list, select the domain to use as the source.
3
From the Destination list, select the domain to use as the destination.
4
Select to search for groups and/or users.
5
Click Start Automatic Selection.
6
Scroll through the list of pairs that display in the bottom pane and remove any pairs you do not want to clone.
7
Continue with step 6 of the clone process. See Using the Browse tab to clone permissions.

Updating permissions relating to a user's SID history

Updating permissions relating to a user’s SID history

Use SID History to update Access Control Lists (ACLs) with SIDs relating to the user’s SID in the new domain.

 
* 
NOTE: You also can update ACLS with SIDs in the Group and User Management module. Right-click one or more domain users, choose Clone Permissions (using SID History), and choose the path. The SID History tab displays any pairs found.
To select users and groups based on SID history
1
Open the SID History tab.
2
In the Domain and AD Query boxes, create a query filter to find the user or group in Active Directory®.
 
* 
NOTE: For assistance in constructing a query filter, see Creating a Query Filter.
To display a progress bar while Security Explorer® searches Active Directory, select the Display Progress check box.
3
Click Find SID History Accounts.
Security Explorer finds a set of groups and users based on the specified domain and AD query, and steps through each of the groups and users looking for any SID history.
When the process is complete, the number of groups and users checked display.
4
Click Close.
5
To see the groups and users checked during the process, click Browse SID History.
The Browse SID History dialog box displays the domain and AD query entered on the SID History tab. You can change the domain and AD query, if necessary.
•
To include the SID in the display, select the Include SID check box.
6
Click Load. The groups and users are listed as they are checked.
•
To sort the list in alphabetical order, click Sort.
•
If you selected the Include SID check box, you can use the scroll bar to view the entire SID, or point the cursor to group or user.
7
Continue with step 6 of the clone process. See Using the Browse tab to clone permissions.

Importing users and groups

You can import source/destination pairs for cloning. The CSV file must contain a list of source and destination accounts, where each pair is separated by a new line and the source and destination are separated by a comma. For example: ACME\BSmith,ACME\JAdams.

To import users and groups from a .CSV file
1
Open the Import User/Group Selection tab.
2
Type the path to the import file or browse for the file.
3
Specify optional domain controllers for both the source account and the destination account. The domain controller is used to perform a SID lookup during the import operation.
4
Click Execute Import.
5
Continue with step 6 of the clone process. See Using the Browse tab to clone permissions.
Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation