Chat now with support
Chat with Support

Security Explorer 9.9 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Deleting groups and users

To delete groups and users
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click Delete User/Group.
4
Click Add to select the accounts to delete.
5
Click Delete.
 
* 
NOTE: From the Browse tab, select a type of group or user in the Navigation pane, select one or more groups or users in the Objects pane, select Tools | Delete.

-OR-

Click on the Tool Bar; or right-click selected groups or users, and choose Delete.

Creating a new Managed Service Account

Prerequisites

Before creating a Group Managed Service Account, run the following PowerShell cmdlet:

Add-KdsRootKey -EffectiveTime ((get-date).addhours(-10))

This cmdlet makes domain controllers wait 10 hours for Active Directory replication convergence before the creation of a Group Managed Service Account.

To create a new Managed Service Account
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click Create User/Group, and select Managed Service Account.
4
Type a domain name, or click Select scope to select a domain.
5
Click OK. The New Managed Service Account box displays the current selection.
* 
NOTE: To open the New Managed Service Account box on the Browse tab, select Domain Managed Service Accounts in the Navigation pane, and select Tools | New.

-OR-

Click on the Tool Bar; or right-click Domain Managed Service Accounts, and choose New.

6
Type the Common-Name for the new Managed Service Account in the Name field.
7
Type the SAM-Account-Name for the new Managed Service Account in the Account Name field.
8
(for Group MSA only) Type the DNS hostname.
9
Select a type for the new Managed Service Account.
10
Click Create.

Modifying Managed Service Account properties

To modify Managed Service Account properties
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click User/Group Properties.
4
Type a Managed Service Account name, or click Advanced selection, and select a Managed Service Account.
5
Click View. The Properties for the selected Managed Service Account displays.
 
* 
NOTE: To open Properties from the Browse tab, select Domain Managed Service Accounts in the Navigation pane, select a Managed Service Account in the Objects pane, and select Tools | Properties.

-OR-

Click ; double-click a Managed Service Account in the Objects pane; or right-click a Managed Service Account, and choose Properties.

Modifying Managed Service Account Active Directory properties

To modify Managed Service Account Active Directory properties
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click AD Properties.
4
Type a Managed Service Account name, or click Advanced selection, and select a Managed Service Account.
5
Click View. The Properties for the selected Managed Service Account appears.
* 
NOTE: To open Properties from the Browse tab, select Domain Managed Service Accounts in the Navigation pane, select a Managed Service Account in the Objects pane, and select Tools | Active Directory Properties.

–OR-

Right-click a Managed Service Account in the Objects pane, and choose Active Directory Properties.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating