Chatta subito con l'assistenza
Chat con il supporto

Security Explorer 9.9.2 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Setting options for Access Explorer

To set options for Access Explorer
1
Choose Tools | Options, and open the Access Explorer tab.
2
Set view options.
 
Table 9. View options
Option
Description

Display folder and file resource groups

By default, folders and files are grouped into resource groups. You have to select a resource group to display the folders and files in that group. To display all the files and folders when you select an account or computer, clear the check box. It is recommended that you keep this option selected as the list of folders and files could be very large.

Use “Paging” when displaying results

By default, when you select a resource group, the folders and files are grouped in pages with a maximum of 2500 results per page. You can change the number of results per page by typing a new value in the Page Size box. To display all the folders and files at once, clear the check box. It is recommended that you keep this option selected as the list of folders and files could be very large.

3
Set options for Grant, Revoke, and Clone operations.
 
Table 10. Grant, Revoke, and Clone options
Option
Description

Always reload results when performing management operations

By default, management operations, such as Grant, Revoke, or Clone, and changes applied through the Permission Wizard are performed on cached Access Explorer results. A warning message displays and gives you the opportunity to force an update and reload the results before the operation is performed. If you want to bypass this warning message and always reload the results, select this check box.

Allow operations to be performed directly on Enterprise objects

By default, management operations, such as Grant, Revoke, or Clone, are performed on Access Explorer results (folders and files) only. If you want to perform these operations on Access Explorer objects (accounts, computers, and resource groups), select this check box.

NOTE: It is strongly recommended that you use the Permissions Wizard to perform these operations on Access Explorer objects (accounts, computers, and resource groups).

Show warning dialogs for grant, revoke, and clone operations

By default, a warning message displays if a Grant, Revoke, Clone, or Set Owner operation is selected for an Access Explorer account, computer, or resource group. If you want to suppress the display of this warning message, clear the check box. Available only if Allow operations to be performed directly on Enterprise objects is selected.

Include group memberships

By default, only explicit permissions for the parent account are included in any Security Explorer management operation. If you want to also include group membership results, select this check box.

Do not perform operations on the ‘Domain User’ group

By default, operations are not performed on the Domain User group.

 

Working with Microsoft Active Directory

In the Active Directory Security module, you can easily manage permissions on objects in Active Directory® to secure and protect your data.

Topics:

•
Viewing Active Directory permissions
•
Granting Active Directory permissions
•
Revoking Active Directory permissions
•
Cloning Active Directory permissions
•
Searching for Active Directory objects
•
Modifying Active Directory permissions
•
Modifying group memberships
•
Modifying Active Directory properties
•
Deleting Active Directory permissions
•
Backing up and restoring Active Directory security
•
Exporting Active Directory permissions
•
Setting options for Active Directory Security

Viewing Active Directory permissions

 
* 
NOTE: The View Permissions task opens the Browse tab.
To view Active Directory permissions
1
Open the Active Directory Security module.
2
In the Navigation pane, expand the Active Directory® node to browse all Active Directory objects in the default naming contexts of the specified domains. See Using the Navigation pane.
•
If loading is taking too long, you can click Stop in the loading progress bar. To reload the current node, click Reload or press F5. See Using the loading progress bar.
3
In the Navigation pane, select an object.
The Objects pane displays the LDAP path, the children of the selected object, the object name, and owner. See Using the Objects pane.
4
In the Objects pane, select a child object. The Permissions pane displays permissions for the selected object. The Owner box displays the user or group that owns the selected object.
5
Set options for the displayed permissions. See Using the Permissions pane.
 
* 
TIP: The contents of the columns may be too long to view on the page. You can size the columns or select the permissions, use Ctrl+C to copy the selection to the clipboard, and paste into a text file. You also can select the object and export a permissions report. See Exporting Active Directory permissions.

Granting Active Directory permissions

You can grant permissions to domain users and groups without affecting the permissions of any other user. First, choose the permissions to grant, and select a domain user or group. You can grant different permissions for several domain users and groups with one operation.

 
* 
TIP: The Grant task provides a quick way to grant permissions. See Using the Grant task. For more options, add a path, and click Switch to Security Explorer Classic (Advanced).
NOTE: You can grant permissions on only domain groups and users.
To grant permissions
1
Open the Active Directory Security module.
2
Locate the object with the permission to grant. See Viewing Active Directory permissions.
3
Right-click selected permission(s), and choose Grant Permissions.
The Grant Active Directory Permissions dialog box displays the path, and the associated groups and users for the current object. The navigation tree is hidden by default. To view the navigation tree, click 4.
4
Select the domain groups and users to apply the permission. There are a few methods for selecting groups and users.
•
Choose from the list of domain groups and users in the navigation tree.
•
To filter the list in the left pane, type a server name or base path in the box, and click Set.
•
To return the full list to view, click Reset. The list returns to full view the next time you open Grant Permissions.
•
Select from the list of domain groups and users associated with the current object.
•
To change to another domain, select the domain from the List Names From list.
•
To display users in the list, click Show Users. To return the list to show only groups, click Refresh.
•
To select a group/user not displayed, type a name or click Advanced User Selection.
•
Browse for a domain group or user.
5
From the Permission list, select the permissions to grant, and whether or not to Allow or Deny. If the choice is not available in the list, click Advanced Permission Selection to create a custom choice.
6
From the Applies To list, select how to apply the permissions.
7
To propagate the client permission to the subtree, select the check box.
8
To add the domain group/user to the List of users and groups to grant list, click Add.
 
* 
TIP: To add additional domain groups or users to the List of users and groups to grant list with the selected permission settings, you can hold down CTRL or SHIFT, and click a domain group or user from the list, or double-click a group or user in the navigation tree.
9
Click OK. The Granting Permissions box displays the progress. See Completing a process.
Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione