Security Explorer 9.9 - Release Notes

Security Explorer® provides a single console for managing access controls, permissions, and security across Microsoft platforms that span multiple servers. The product provides a broad array of security enhancements including the ability to identify who has rights to resources across the entire organization. It also provides the ability to grant, revoke, clone, modify, and overwrite permissions quickly and from a central location.

Unlike native tools, Security Explorer provides the ability to back up and restore permissions only, ensuring the integrity of data. To help meet auditing requirements, Security Explorer provides convenient reports that can be generated at your convenience. Lastly, the product's cleanup capabilities address common post-migration security issues.

Security Explorer 9.9 is a minor release, with enhanced features and functionality. See New features and Enhancements.

Supported platforms

Table 1. Supported platforms for Security Explorer®

Security Explorer Module

Group & User Management

Windows 8.1

Windows 10

Windows Server 2012

Windows Server 2012 R2

Group & User Management

Dell™ Fluid File System (FluidFS)

EMC® Isilon®

EMC Celerra®

EMC VNX®

NetApp® 8.2 (7-Mode and Clustered Mode)

NetApp 8.3, 9.0, 9.1, 9.2, 9.3, and 9.4 Clusters

NOTE: If Security Explorer is installed on a device with Windows Server 2012 or higher, EMC Celerra is not supported. The workaround is to disable Server Message Block version 2 (SMBv2) and enable Server Message Block version 1 (SMBv1).

To disable SMBv2 and enable SMBv1

Use the following commands:

sc config lanmanworkstation depend= bowser/mrxsmb10/nsi

sc config mrxsmb20 start= disabled

Restart the computer.

For more information, see https://support.microsoft.com/kb/2696547?wa=wsignin1.0

NOTE: vsadmin must be entered in NAS credentials dlg for full management of NetApp Clusters 8.2, 8.3, 9.0, 9.1, 9.2, 9.3 and 9.4.

NOTE: NetApp 8.2.7-Mode is not supported on Windows 10.

NOTE: For NetApp Clustered Mode, to see changes after a permission action, such as Grant, Revoke, or Modify, on folders and shares, you must refresh the tree in the Navigation pane.

NOTE: Security Explorer supports only default NetApp vFiler units. Additional vFiler units are not supported.

NOTE: Security Explorer supports CIFS volumes. Mixed CIFS/UNIX volumes are supported if the volume root owner is a Windows account.

NOTE: If Security Explorer is running as a user who is not Domain Administrator, that user must be added to local Administrators group on NAS devices.

SQL Security

SQL Server® 2019

SQL Server 2019 Reporting Services

SQL Server 2017

SQL Server 2017 Reporting Services

SharePoint® 2019

SharePoint Foundation

Active Directory Security

Windows Server® 2019 Functional Level

Windows Server 2016 Functional Level

Windows Server 2012 R2 Functional Level

Windows Server 2012 Functional Level

New features

New features in Security Explorer 9.9:

•

Search for permissions using SxpSearch.exe. Introduced a new command line program that allows you to search for permissions from the command line with the following arguments:

•

<module name>: Specifies a module.

•

<search definition file path>: Specifies an XML file that defines the search scope and criteria.

•

<report file name>: Specifies the path to save the search report and status file.

See the user guide for more information about SxpSearch.exe.

•

Schedule a permission export or search. You can now schedule a permission export or search, and choose to automatically send the report by email or to a specified shared folder.

•

Introduced the Search Scheduler to the NTFS Security, Share Security, Registry Security, Printer Security, Group And User Security, SharePoint Security, SQL Security, Exchange Security, and Active Directory modules.

•

More modules now support the Export Scheduler: Share Security, Task Management, Service Security, Group and User Management, SQL Server Security, Exchange Security, SharePoint Security, and Active Directory Security.

•

Compare security. In the NTFS Security module, you can now select Security | Compare Security to compare permissions of two folders. The feature offers a side-by-side comparison view and uses color cues to highlight the differences.

•

Set auto-pause time for a scheduled backup. In the NTFS Security module, you can now configure a scheduled backup to automatically pause at a specified time. The paused backup will automatically resume when the task runs again.

•

Support for Managed Service Accounts. The Group and User Management module now supports for Managed Service Accounts. You can perform the following actions to manage your Managed Service Accounts:

•

Creating a new Managed Service Account

•

Modifying properties of a Managed Service Account

•

Modifying Active Directory properties of a Managed Service Account

•

Viewing memberships of a Managed Service Account

•

Deleting a Managed Service Account

•

Additional supported platforms: