Security Explorer 9.9.2

Searching

Have you ever wondered just which files and directories on your network the group Everyone can delete permissions on? Finding information like this is a snap with Security Explorer®. Simply choose a group or user, and a set of permissions to search for, and begin your search. When the search results display, you can click on any files or directories in your search results to modify their permissions immediately.


	NOTE: For searching the SQL Security module, see Searching for SQL Server objects and permissions. For searching the Exchange Security module, see Searching for Exchange server objects and permissions. For searching in SharePoint Security module, see Searching for SharePoint objects. For searching the Active Directory Security module, see Searching for Active Directory objects.

Topics:

•

Using the Browse tab to search

•

Managing saved searches

•

Adding a search scope

•

Setting search criteria

•

Using the Search tasks

•

Replacing permissions

•

Scheduling a search

•

Managing search tasks

Using the Browse tab to search

To use the Browse tab to search

Open the module for the type of search.

Open the Browse tab.

Select an object in the Navigation or Objects pane, and select Search | New Search Window (Empty).

-OR-

Click

, press Shift + F3, or right-click an object, and choose Search in a New Window.

If you want to change the search scope, see Adding a search scope.

Add criteria for the search. See Setting search criteria.

Click Start Search.

The Permissions column in the Permissions pane may list abbreviations of some permissions.

To see what permissions are set, right-click the permission, and choose Modify Permission.

-OR-

Click Modify in the Control Button bar, or select Security | Modify Permission.

Select Auto-update results to automatically update the search results after you select to grant, revoke, clone, replace, modify, or delete a permission. The search is performed again during the refresh, so if you have a search that takes a long time, you may want to clear this check box.

Use the buttons to manage the results. You can save the search, save the search results, generate a report, or export the results.

Table 1. Search tab buttons
Button	Description
Add Scope	Add a Search Scope, which is what you want to search, such as domains, computers, or folders. See Adding a search scope.
Load from Share	NTFS Security module only. Load saved search scope and criteria from an XML file exported from the Share Security module.
Load from NTFS	Share Security module only. Load saved search scope and criteria from an XML file exported from the NTFS Security module.
Save	Save the Search Scope and selected criteria to reuse at a later time. The saved search displays under User Searches.
Start Search	Start the search based on the current Search Scope and selected criteria.
Stop Search	Stop the search process.
Clear Results	Clear the results area.
Defaults	Return to the default selections on all search criteria tabs.
Save Results	Save the results as a .txt file.
Report	Display the results in a report format that you can save, print, or export.
Export	Service Security and Task Management modules only. Export the results. See Using the Browse tab to export security.
Schedule	Schedule a search using the current Search Scope and selected criteria. See Scheduling a search.

Managing saved searches

You can save the search scope and selected criteria to reuse. You also can export the scope and settings to an XML file for later import into another module. Saved searches appear under Saved Searched | User Searches.

To managed saved searches

•

Right-click a saved search, and choose from the menu.

Table 2.
Option	Description
Load	Load a saved search to run.
Delete Saved Search	Delete the saved search.
Import	Import the search scope and search criteria from an exported XML file. NOTE: You can only import an XML file that was exported from the same module with the exception of the NTFS Security and Share security modules. In these modules, you can import an XML file that was exported by the other module.
Export	Export the search scope and search criteria to an XML file.

Adding a search scope

The Search Scope determines what objects to search, such as domains, computers, or folders.

To add a search scope

Click Add Scope.

Select from the tree.

-OR-

Type a location (all modules) or LDAP path (Service Security and Active Directory Security modules only) in the box. If you enter a location or LDAP path, you must select a type: Domain, Computer, Folder (NTFS Security module only), AD Forest, AD OU, or AD Container (Service Security module only).


	TIP: Use the Select all children for the current item or De-select all children for the current item check boxes to help you create the scope. NOTE: In the Service Security module, you can import a list of servers. Click Import, and choose a text file. NOTE: In the Group and User Management module, you can select individual computers, computers in a Network node, or Active Directory® organizational units and containers that contain computers. When the Active Directory tree is used in the search scope, Security Explorer® searches only local users and groups for the computers in the selected organizational unit or container, or local users and groups for selected computers. Security Explorer does not search domain users and groups in Active Directory. If you want to search for domain users and groups, select computers in the Network node. NOTE: You can search Users/Groups for OU in an AD using filtering.

Click OK.


	NOTE: In the Group and User Management module, you can select to save any failed computers to the search scope to repeat the search with only the failed computers. This option is helpful when trying to reset passwords. You can repeat the search with the failed computers, right-click the results, and choose Change Password. See Changing user passwords.