Chat now with support
Chat with Support

Security Explorer 9.9 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Viewing group and user memberships

Use the User/Group Membership advanced task to view the groups of which a selected group or user is a member. You can print or save the list of groups.

To view group and user memberships
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click User/Group Membership.
4
Type an account name, or click Advanced selection, and select an account.
5
Click View. The Group Memberships window displays the groups to which the selected account belongs. You can print the list or save it as a .txt file.
 
* 
NOTE: To access the Group Memberships window from the Browse tab, select a type of group or user in the Navigation pane, select a group or user in the Objects pane, and select Tools | Display Memberships.

-OR-

Right-click a group or user in the Objects pane, and choose Display Memberships.

Changing user passwords

 
* 
IMPORTANT: Resetting a password could cause irreversible loss of information for the account the next time the user logs off. Use this feature only if the user has forgotten his or her password or does not have a password reset disk.
NOTE: You also can search for services by account and change the logon password for the account. See Changing the password for a logon account.
TIP: To help you easily change the passwords of local administrator accounts, use the Search module. On the Group/User Search Criteria tab, select Search for local administrator accounts, and run the search. Right-click the results and choose Change Passwords. See Group and user search criteria.
To change user passwords
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click Change Password.
4
Click Add, and select one or more users.
 
5
Click OK. The Set Password box displays.
 
* 
NOTE: To access the Set Password box from the Browse tab, right-click one or more user accounts in the Objects pane, and choose Change Password.

-OR-

Click Change Password from the Properties box of a user. See Modifying group and user properties.

6
Type a new password, or click Generate to generate a random password.
 
* 
NOTE: If you selected multiple users, the password applies to all users in the selection.
To copy the password to the clipboard, click Copy. You can then paste the password into a document for safe keeping or an email to notify users.
-OR-
Select Generate a different random password to generate random passwords for multiple users. The passwords and account names are saved to ChangedPasswords.log, which you can find in the Security Explorer® installation folder. Be aware that this file is overwritten each time you generate new random passwords.
7
To create a log file listing each account with its new password, select Log the change password result. The account names and passwords are saved to ChangedPasswordsResults.log, which you can find in the Security Explorer installation folder. Be aware that this file is overwritten each time you change passwords.
8
Click OK.
9
Click Yes.
 
* 
TIP: To help you see which passwords were not reset, check the Password last change date column in the Object and Search Results panes.
TIP: To quickly repeat the operation on failures, save failed targets to a new scope by clicking Save Failed Computers To Scope on the Search tab. See Adding a search scope and Group and user search criteria.

Modify memberships of multiple local groups

Use the Bulk Change Members advanced task to add members into multiple local groups on different computers or to remove members from these local groups.

To modify memberships of multiple local groups
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click Bulk Change Members.
 
* 
NOTE: From the Browse tab, select Tools | Bulk Change Group Contents, or right-click in the Navigation or Objects pane, and choose Bulk Change Group Contents.
4
Click Add to select computers.
5
Select the local groups whose members you want to modify.
6
Click Add to select the members to add or remove.
•
To add the selected members to the selected groups, click Add Members.
•
To remove the selected members from the selected groups, click Remove Members.

Clearing the local administrator group

To clear the local administrator group
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click Clear Local Admin.
 
* 
NOTE: From the Browse tab, select Tools | Bulk Remove from Local Administrators.

–OR-

Right-click in the Navigation or Objects pane, and choose Bulk Remove from Local Administrators.

4
Click Add to add computers one at a time or click Add all computers from domain.
5
Select options.
 
Table 10. Report options
Option
Description

Produce report

Select to produce a report of the domain users that were removed in the process. In the Report file path box, type a path to where you want to place the report file, or click Select file path to choose the path.

Produce report only

Select to just produce a report without actually removing the domain users. You can examine the report prior to completing the process. In the Report file path box, type a path to where you want to place the report file, or click Select file path to choose the path.

NOTE: If you select Produce report only, domain users are not removed from the local Administrators group when you click Remove all domain users.
6
Click Remove all domain users.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating