Chat now with support
Chat with Support

Security Explorer 9.9 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Removing permissions on disabled accounts

Removes all permissions associated with disabled Active Directory® accounts on a SharePoint® site.

 
* 
NOTE: Applies to parent SharePoint sites only. The Revoke Disabled task opens the Remove Permissions for Disabled Accounts dialog box. Add at least one path, and click OK.
IMPORTANT: Back up your permissions before running this function. You may want to create a report that shows the items that would change.
To remove permissions on disabled accounts
1
Open the SharePoint Security module, and open the Browse tab.
2
Select a SharePoint server in the Navigation pane.
3
Select an item in the Objects pane, and select Security | Remove Permissions for Disabled Accounts.
-OR-
Right-click the item, and choose Remove Permissions for Disabled Accounts.
4
Select options.
 
* 
NOTE: If you came to the Remove Permissions For Disabled Accounts dialog box from the Revoke SharePoint Permissions dialog box, the Include protected objects (objects with ‘Inherit Permissions from Parent’ disabled) check box is selected automatically (see Revoking SharePoint permissions).
 
Table 7. Remove permissions options
Option
Description

Remove disabled accounts from SharePoint groups

Select to remove permissions for disabled accounts from SharePoint groups.

Remove disabled accounts from AD groups (except primary groups)

Select to remove permissions for disabled accounts that were added to SharePoint from their Active Directory groups, except primary groups.

NOTE: The currently logged on user must have the Read Members and Write Members permissions applied to the Descendant Group on the target domains.

Create report (will list changed items)

Select to create a report that lists changed items. Type a file path or browse to locate a path.

NOTE: If you select the Create Report check box, only the parent container is examined and appears on the report because the child objects are included in the revoke process automatically.

Produce report only (i.e. no changes will be made)

Select to create only a report that shows what items would be changed if you ran the Remove Permissions for Disabled Accounts process.

NOTE: If you select the Produce report only check box, all objects appear on the report.

Managing SharePoint groups

You can manage group membership for SharePoint® groups, including the Site Collection Administrators group for each site collection.

 
* 
NOTE: Applies to parent SharePoint sites only. The SharePoint Groups advanced task opens the SharePoint Groups dialog box. Add a path, and click OK.
To manage SharePoint groups
1
Open the SharePoint Security module.
2
Open the Browse tab.
3
Select a group in the Permissions pane.
4
Click Groups.
You also can select a group from the drop-down list, or browse to locate a SharePoint group.
5
Modify the group.
 
Table 8. Modify SharePoint group options
Button
Description

New Group

Create a new SharePoint group.

Delete Group

Delete the displayed SharePoint group.

New Member

Add a new member to the displayed SharePoint group.

Delete Member

Delete a member from the displayed SharePoint group.

Export

Generate a report that you can print, save, or export.

Show AD Group Contents

Look up the Active Directory® account for the selected member.

Removing accounts from SharePoint groups

Removes accounts from SharePoint® groups on a SharePoint site.

 
* 
NOTE: Applies to parent SharePoint sites only. The Remove Members Advanced task opens the Remove Accounts from SharePoint Groups dialog box.
To remove accounts from SharePoint groups
1
Open the SharePoint Security module.
2
Open the Browse tab.
3
Select a SharePoint server in the Navigation pane.
4
Select an item in the Objects pane, and select Security | Remove Accounts from SharePoint Groups.
–OR-
Right-click the item, and choose Remove Accounts from SharePoint Groups.
5
Click Add to add SharePoint sites and Web Applications.
6
Click Add to add accounts.
7
Click Remove Accounts to remove the listed accounts from the listed SharePoint sites and Web Applications.

Searching for SharePoint objects

 
* 
TIP: The Search basic task provides a quick way to search for permissions. You also can use the Find Unknown and Find Disabled advanced tasks to easily search for those specific situations. See Using the Search tasks.
To search for SharePoint® objects
1
Open the SharePoint Security module.
2
Open the Browse tab.
3
Select an object in the Navigation or Objects pane.
4
Select Search | Search in a New Window (Empty).
-OR-
Click on the Tool Bar; or right-click an object, and choose Search in a New Window.
5
The object you select is added as a Search Scope so you can just set the criteria for the search. See Setting SharePoint security search criteria.
6
If you open the Search tab in the Navigation pane without selecting an object, you need to add a Search Scope before you set criteria. See Adding a search scope.
7
Click Start Search.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating