Chat now with support
Chat with Support

Security Explorer 9.9 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Viewing SharePoint permissions

 
* 
NOTE: The View Permissions task opens the Browse tab.
NOTE: The first time you select a SharePoint® server, you are prompted to install the SharePoint Web Services. See Deploying the SharePoint web service.
NOTE: If the Always open authentication dialog check box is selected on the SharePoint tab of the Options dialog box, the SharePoint Authentication box appears. Enter the necessary credentials, and click OK. See Setting SharePoint options.
NOTE: If the path you enter includes page information, such as default.aspx, you see a warning box. Click Yes to remove page information from the path.

There are three ways to select a SharePoint server. See Using the Navigation pane.

•
Expand Network Neighborhood in the Navigation pane to view a list of all sites for a selected server, including the Central Administration site.
•
Type a URL in the Path box, and click Set. A new root node is created in the Navigation pane.
•
Type a URL in the Path box, and click Go. The site is added automatically to the Favorites list.
 
* 
NOTE: Only root SharePoint sites can be added to the Favorites list. If you want to display sub-sites, lists, or other items, use one of the other two methods.

The Objects pane displays the sites, subsites, lists, and items, such as documents, calendar items, and events, for the selected server. See Using the Objects pane. Select an object to view its permissions in the Permissions pane. See Using the Permissions pane.

Granting SharePoint permissions

 
* 
TIP: The Grant task provides a quick way to grant permissions. See Using the Grant task. For more options, add a path, and click Switch to Security Explorer Classic (Advanced).
To grant SharePoint® permissions
1
Open the SharePoint Security module.
2
Open the Browse tab.
3
Select an item in the Navigation pane, or type a path in the Path box, and click Go.
4
Select an object in the Objects pane or a permission in the Permissions pane.
5
Select Security | Grant Permissions.
-OR-
Click on the Tool Bar; click Grant on the Control Button Bar; or right-click the object or permission, and choose Grant Permissions.
The Grant SharePoint Permissions dialog box displays the object, and the associated groups and users for the current object.
6
Select the groups and users to grant the permission. There are a variety of ways to select groups and users. See Using the Browse tab to grant permissions.
7
Select a permission type, a permission to grant and how to apply it. To select more than one permission, select how to apply the permission, and click Advanced Permission Selection.
8
To add the group/user to the List of users and groups to grant list, click Add.
9
Click OK. See Completing a process.

Revoking SharePoint permissions

 
* 
TIP: The Revoke basic task provides a quick way to revoke permissions. See Using the Revoke tasks. For more options, add a path, and click Switch to Security Explorer Classic (Advanced).
TIP: You also can use the Revoke Unknown and Revoke Disabled advanced tasks to easily revoke permissions for those specific situations.
To revoke SharePoint® permissions
1
Open the SharePoint Security module.
2
Open the Browse tab.
3
Select an item in the Navigation pane, or type a path in the Path box, and click Go.
4
Select an object in the Objects pane or a permission in the Permissions pane.
5
Select Security | Revoke Permissions.
-OR-
Click on the Tool Bar; click Revoke on the Control Button Bar; or right-click the object, and choose Revoke Permissions.
6
Select the groups and users to revoke the permission. There are a variety of ways to select groups and users. See Using the Browse tab to revoke permissions.
7
Select the permissions to revoke, and whether or not to Allow or Deny. If the choice is not available in the list, click Advanced Permission Selection to create a custom choice.
8
To add the group/user to the List of users and groups to revoke list, click Add.
9
Select options.
 
Table 3. Revoke options
Option
Description

Revoke all permissions for the selected user

Select to revoke all permissions for the selected user.

Verify SharePoint accounts when adding to the list below

Select to verify the selected account when you click Add.

Advanced Revoke Options

Available only for SharePoint sites. If you select this check box, a warning message displays and the Revoke Folder Permissions dialog box becomes inactive, so the other users/groups and permissions you selected are not included in this action. To continue, click Yes.

Revoke all unknown and deleted accounts

Active only when the Advanced Revoke Options check box is selected. Select to revoke permissions on unknown or deleted accounts. The Remove Permissions for Deleted Accounts dialog box opens. See Revoking permissions on unknown accounts.

Revoke all disabled accounts

Active only when the Advanced Revoke Options check box is selected. Select to revoke permissions on all disabled accounts. The Remove Permissions for Disabled Accounts dialog box opens. See Revoking permissions on disabled accounts.

Include protected objects (objects with ‘Inherit Permissions from Parent’ disabled)

Select to revoke permissions on protected objects. If you select the Advanced Revoke Options check box, the Include protected objects check box is selected automatically.

10
Click OK. See Completing a process.

Cloning SharePoint permissions

 
* 
TIP: The Clone task provides a quick way to clone permissions. See Using the Clone task. For more options, add a path, and click Switch to Security Explorer Classic (Advanced).
To clone SharePoint® permissions
1
Open the SharePoint Security module.
2
Open the Browse tab.
3
Select an object in the Objects pane or a permission in the Permissions pane.
4
Select Security | Clone Group or User.
-OR-
Click on the Tool Bar; click Clone on the Control Button Bar; or right-click the object, and choose Clone Group or User.
5
Select the groups or users to clone. You can select the groups and users manually or import a list of groups and users from a CSV file. The CSV file must contain a list of source and destination accounts where each pair is separated by a new line and the source and destination are separated by a comma. For example: ACME\BSmith,ACME\JAdams.
To select groups or users manually
a
In the Source Group or User area, click Advanced User Selection to select the domain or object from which to pull the permissions.
b
In the Destination Group or User area, click Advanced User Selection to select the domain or object to receive the cloned permissions.
 
* 
IMPORTANT: Do not select a pair of accounts where the source is the same as the destination. The permissions for the accounts are deleted in the cloning process.
c
Click Add.
6
You also can specify optional domain controllers for both the source account and the destination account. The domain controller is used to perform a SID lookup during the import operation.
7
Set the options for the clone process.
 
Table 4. Clone options
Option
Description

Clone Permissions

By default, permissions are cloned.

Clone group memberships

Select to add the destination account to the groups of which the source user is a member. If you choose this check box, a warning message displays. The destination is cloned into the same parent groups as the source. The contents of the groups selected as the source are not cloned. SharePoint groups cannot have their group memberships cloned.

Replace source permissions with destination permissions

Select to change the source permissions to match the destination permissions.

Include protected objects when cloning (objects with ‘Inherit Permissions from Parent’ disabled)

Select to include those objects for which the Allow inheritable permissions from parent to propagate to this object check box is unavailable. See Viewing SharePoint permissions.

8
Click OK. See Completing a process.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating