Security Explorer 9.9

Managing security

With Security Explorer®, administrators can back up and restore their NTFS permissions, providing the ability to recover permissions. Additionally, permissions can be exported for reporting and backup.

Topics:

•

Backing up security

•

Scheduling a backup

•

Using the backup scheduler

•

Restoring security

•

Comparing security

•

Purging backup files

•

Scheduling a backup purge

•

Exporting security

Backing up security

Before modifying any security permissions, make a backup in case you need to restore the permissions to their original state. You also can back up permissions on files for which you do not have access. As long as you are an administrator, or have the Backup files and directories user right, you can back up and restore permissions on all files, which is helpful when backing up and restoring a user's home directories.


	NOTE: The Backup function is available only in the NTFS Security, Share Security, Registry Security, Printer Security, SharePoint Security, SQL Server Security, Exchange Security, and Active Directory Security modules. You can back up only SQL databases in the SQL Server Security module.

Table 1. Backup file types
Module	File Type	File Extension
NTFS Security	Security Explorer NTFS Backup File	.sec /.tmp
Registry Security	Security Explorer Registry Backup File	*.ser
Share Security	Security Explorer Share Backup File	*.ses
Printer Security	Security Explorer Printers Backup File	*.sep
SharePoint Security	Security Explorer SharePoint Backup File	*.spb
SQL Server Security	Security Explorer SQL Backup File	*.sqb
Exchange Security	Security Explorer Exchange Backup File	*.exb
Active Directory Security	Security Explorer Active Directory Backup File	*.adb

Topics:

•

Using the Browse tab to back up security

•

Using the Backup task

Using the Browse tab to back up security

To back up security using the Browse tab

Open the module with the permissions you want to back up.

Open the Browse tab.

From the Navigation or Object pane, select an object.

Acceptable objects are Enterprise Scopes, volumes, folders, shares, or Active Directory® objects. Files cannot be backed up individually, but can be backed up within the parent folder.

Select Security | Backup Security.

-OR-

Click

on the Tool Bar; or right-click an object, and choose Backup Security.

In the Backup File Name box, browse to locate a path and name the backup file.


	IMPORTANT: SharePoint Security module only. It is strongly recommended that root backup objects do not inherit permissions from their parents.

To add additional paths, click Add to browse for a path.

-OR-

Type the full path name in the New Path box, and click Add. Available only in the NTFS Security module.

-OR-

Click Load to load a previously saved Security Explorer Backup List (*.bkn) file. Not available in the Registry Security, SharePoint Security, SQL Server Security, Exchange Security, and Active Directory Security modules.

Set options for the backup.

Table 2. Backup options
Option	Description
Recurse all subfolders and files for supplied paths	Available only in NTFS Security module. By default, all subfolders and files in the selected path are backed up. To select the level to which the subfolders and files are backed up, clear the check box, and type a number in the (Depth) box.
Perform a check/repair inheritance operation before executing backup	Available only in NTFS Security module. Select to check and repair inheritance before backing up the selected paths. NOTE: If you select this check box and want to schedule the backup, the task needs to run under an account that has sufficient privileges to make changes to permissions on the target computer.
Include System Access Control List (SACL) in backup	Available only in NTFS Security module. Select to include System Access Control List in the backup.
File Filter \| Wildcard Node Filter \| Wildcard	Not available in the Registry Security, SharePoint Security, SQL Server Security, Exchange Security, and Active Directory modules. To back up only specified file types, type a value, such as *.exe, in the Wildcard box.
Backup Scheduler \| Job Name	Not available in the Registry Security and SharePoint Security modules. To schedule the backup, type a name for the backup job in the Job Name box, and click Schedule. See Scheduling a backup.