Chat now with support
Chat with Support

Security Explorer 9.9 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Granting Exchange permissions

 
* 
IMPORTANT: If Exchange Server 2013, 2016, or 2019 is installed in a child domain, you cannot grant directory permissions to mail-enabled public folders.
TIP: The Grant task provides a quick way to grant permissions. See Using the Grant task. For more options, add a path, and click Switch to Security Explorer Classic (Advanced). The path carries to the Grant Exchange Permissions dialog box, but permissions do not.
To grant Exchange permissions using the Browse tab
1
Open the Exchange Security module.
2
Open the Browse tab.
3
Select an item in the Navigation pane, or type a path in the Path box, and click Go.
4
Select an object in the Objects pane or a permission in the Permissions pane.
5
Select Security | Grant Permissions.
-OR-
Click , click Grant on the Control Button Bar; or right-click the object or permission, and choose Grant Permissions.
6
Select the groups and users to grant the permission. There are a variety of ways to select groups and users. See Using the Browse tab to grant permissions.
7
Select a permission type, a permission to grant and how to apply it.
•
To select more than one permission, select how to apply the permission, and click Advanced Permission Selection.
•
To propagate the permission to subfolders, select the check box.
8
To add the group/user to the List of users and groups to grant list, click Add.
9
Click OK. See Completing a process.

Revoking Exchange permissions

 
* 
TIP: The Revoke basic task provides a quick way to revoke permissions. You also can use the Revoke Unknown and Revoke Disabled advanced tasks to easily revoke permissions for those specific situations. See Using the Revoke tasks.

For more options, add a path, and click Switch to Security Explorer Classic (Advanced). The path carries to the Revoke Exchange Permissions dialog box, but the permissions do not.

To revoke Exchange permissions using the Browse tab
1
Open the Exchange Security module.
2
Open the Browse tab.
3
Select an item in the Navigation pane, or type a path in the Path box, and click Go.
4
Select an object in the Objects pane or a permission in the Permissions pane.
5
Select Security | Revoke Permissions.
-OR-
Click , click Revoke in the Control Button Bar; or right-click the object, and choose Revoke Permissions.
6
Select the groups and users to revoke the permission. There are a variety of ways to select groups and users. See Using the Browse tab to revoke permissions.
7
From the Permission list, select the permissions to revoke, and whether or not to Allow or Deny. If the choice is not available in the list, click Advanced Permission Selection to create a custom choice.
8
To add the group/user to the List of users and groups to revoke list, click Add.
9
Select options.
 
Table 1. Revoke options
Option
Description

Revoke all permissions (Allow and Deny) for the selected user

Select to revoke all permissions (Allow and Deny) for the selected user.

Propagate permissions down to subfolders

Select to revoke permissions in any subfolders for the selected user.

Advanced Revoke Options

If you select this check box, a warning message displays and the Revoke Folder Permissions dialog box becomes inactive, so the other users/groups and permissions you selected are not included in this action. To continue, click Yes.

Revoke all unknown and deleted accounts

Active only when the Advanced Revoke Options check box is selected. Select to revoke permissions on unknown or deleted accounts.

Revoke all disabled accounts

Active only when the Advanced Revoke Options check box is selected. Select to revoke permissions on all disabled accounts.

NOTE: For Exchange 2010, mailbox folder disabled permissions do not display in Security Explorer, therefore the Revoke Disabled Accounts function will not be able to revoke those permissions.
NOTE: For Exchange 2010, public folder disabled permissions display with NT User: within the account name and cannot be revoked.
10
Click OK. See Completing a process.

Cloning Exchange permissions

 
* 
IMPORTANT: If Exchange Server 2013, 2016, or 2019 is installed in a child domain, you cannot manage directory permissions nor disable the mail-enabled property for public folders.
TIP: The Clone task provides a quick way to clone permissions. See Using the Clone task. For more options, add a path, and click Switch to Security Explorer Classic (Advanced). The path carries to the Clone Exchange Permissions dialog box, but the permissions do not.
To clone Exchange permissions using the Browse tab
1
Open the Exchange Security module.
2
Open the Browse tab.
3
Select an object in the Objects pane or a permission in the Permissions pane.
4
Select Security | Clone Group or User.
-OR-
Click on the Tool Bar; or right-click the object, and choose Clone Group or User.
5
In the Source Group or User area, click Advanced User Selection to select the domain or object from which to pull the permissions.
6
In the Destination Group or User area, click Advanced User Selection to select the domain or object to receive the cloned permissions.
 
* 
IMPORTANT: Do not select a pair of accounts where the source is the same as the target. The permissions for the accounts will be deleted as a result of the cloning process.
7
Click Add. The selected pair displays in the List of users and groups to clone list.
•
To clear all pairs from the list, click Clear.
•
To remove selected users from the list, click Remove.
8
Select options.
 
Table 2. Clone options
Option
Description

Clone Permissions

By default, permissions are cloned.

Clone group memberships

Select to add the destination account to the groups of which the source user is a member.

9
Click OK. See Completing a process.

Searching for Exchange server objects and permissions

 
* 
TIP: The Search basic task provides a quick way to search for permissions. You also can use the Find Unknown and Find Disabled advanced tasks to easily search for those specific situations. See Using the Search tasks.
To search for Exchange server objects and permissions using the Browse tab
1
Open the Exchange Security module.
2
Open the Browse tab.
3
Select an object in the Navigation or Objects pane.
4
Select Search | Search in a New Window (Empty).
-OR-
Click on the Tool Bar, or right-click an object, and choose Search in a New Window.
5
The object you select is added as a Search Scope so you can just set the criteria for the search. See Setting Exchange security search criteria.
If you open the Search tab in the Navigation pane without selecting an object, you need to add a Search Scope before you set criteria. See Adding a search scope.
6
Click Start Search. See Using the Browse tab to search.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating