Chat now with support
Chat with Support

Security Explorer 9.9 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Using the Grant task

The Grant task provides a quick way to grant permissions. For more options, add at least one path, and click Switch to Security Explorer Classic (Advanced). See Using the Browse tab to grant permissions.

 
* 
NOTE: The Tasks tab is hidden by default. To display the Tasks tab, select View | Tasks tab.
To grant permissions using the Grant task
1
Open the module for the type of permission you want to grant.
2
Open the Tasks tab, and click Grant.
3
Click Add to select paths.
4
Click Add to select permissions.
5
To include objects that do not inherit permissions from the parent object, select the check box.
6
Click OK. The Granting Permissions box displays the progress. See Completing a process.

Revoking permissions

You can revoke access for users and groups. The type of permission revoked depends on the selected module. For example, if you want to revoke permissions for a printer, open the Printer Security module.

In the NTFS Security module, you can create a schedule to temporarily revoke a permission.

 
* 
NOTE: For NetApp Clustered mode, to see changes after a permission action on folders and shares, you must refresh the tree in the Navigation pane.
NOTE: To customize the revoke process in the NTFS module, you can set options for modifying permissions. See Setting advanced options.

Topics:

•
Using the Browse tab to revoke permissions
•
Revoking permissions on unknown accounts
•
Revoking permissions on disabled accounts
•
Using the Revoke tasks

Using the Browse tab to revoke permissions

To revoke permissions using the Browse tab
1
Open the module for the type of permission you want to revoke.
2
Open the Browse tab.
3
Select an item in the Navigation pane.
–OR-
Type a path in the Path box, and click Go.
4
Select an object in the Objects pane or a permission in the Permissions pane.
5
Select Security | Revoke Permissions.
–OR-
Click on the Tool Bar; click Revoke on the Control Buttons Bar; or right-click the object or permission, and choose Revoke Permissions.
The Revoke Folder Permissions dialog box displays the path, and the associated groups and users for the current object. The navigation tree is hidden by default. To view the navigation tree, click 4.
6
Select the groups and users to revoke the permission. There are a few methods for selecting groups and users.
•
Choose from the list of local and domain groups and users in the navigation tree.
•
To filter the list in the left pane, type a server name or base path in the box, and click Set.
•
To return the full list to view, click Reset. The list returns to full view the next time you open Revoke Permissions.
•
Select from the list of groups and users associated with the current object.
•
To change to another domain or to the local computer, select the domain or the local computer from the List Names From list.
•
To display users in the list, click Show Users. To return the list to show only groups, click Refresh.
•
To select a group/user not displayed, type a name or click Advanced User Selection.
•
Browse for a group or user.
7
From the Permission list, select the permissions to revoke, and whether or not to Allow or Deny. If the choice is not available in the list, click Advanced Permission Selection to create a custom choice.
8
To add the group/user to the List of users and groups to revoke list, click Add.
 
* 
TIP: To add additional groups or users to the List of users and groups to grant list with the selected permission settings, you can hold down CTRL or SHIFT, and click a group or user from the list or double-click a group or user in the navigation tree.
9
Choose options.
 
Table 2. Revoke options
Option
Description

Revoke all permissions (Allow and Deny) for the selected user

Not available in the Task Management and Groups and Users modules. Select to revoke all permissions (Allow and Deny) for the selected user.

Include SID history search when adding permissions for revoking

Select to invoke a SID history search when you click Add to add the selected group/user to the List of users and groups to revoke list. Since there may be more than one SID associated with the selected account, selecting this check box adds all existing SIDs to the List of users and groups to revoke list so that all existing permissions are revoked.

Advanced Revoke Options

If you select this check box, a warning message displays and the Revoke Folder Permissions dialog box becomes inactive, so the other users/groups and permissions you selected are not included in this action. To continue, click Yes.

Revoke all unknown and deleted accounts

Select to revoke permissions on unknown or deleted accounts.

Revoke all disabled accounts

Select to revoke permissions on all disabled accounts.

Log Actions

Select to create a log file. Browse to name the log file.

Include protected objects (objects with ‘Inherit Permissions from Parent’ disabled)

Select to revoke permissions on protected objects.

10
NTFS Security module only. You can temporarily revoke this permission by creating a schedule.
To temporarily revoke a permission
a
Click Schedule.
b
Type a name for the task and browse for the account under which to run the revoke process.
c
Click OK.
If the task was scheduled successfully, you are asked if you want to open the task. If you see a message that the task is already scheduled, open Windows® Task Scheduler to edit the task.
d
Click Yes to open the task.
e
On the Triggers tab, click New.
f
Set the schedule and click OK.
11
Click OK. The Revoking Permissions box displays the progress. See Completing a process.

Revoking permissions on unknown accounts

You also can use the Revoke Unknown advanced task to revoke all permissions on unknown and deleted accounts. See Using the Revoke tasks.

To revoke all permissions on unknown accounts
1
Open the module for the type of permission you want to revoke.
2
Open the Browse tab.
3
Select an item in the Navigation pane.
–OR-
Type a path in the Path box, and click Go.
4
Select Advanced Revoke Options.
5
Click Yes.
6
Select Revoke all unknown and deleted accounts.
7
Click OK. The Revoking Permissions box displays the progress. See Completing a process.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating