Chat now with support
Chat with Support

Security Explorer 9.9.2 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Modify memberships of multiple local groups

Use the Bulk Change Members advanced task to add members into multiple local groups on different computers or to remove members from these local groups.

To modify memberships of multiple local groups
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click Bulk Change Members.
 
* 
NOTE: From the Browse tab, select Tools | Bulk Change Group Contents, or right-click in the Navigation or Objects pane, and choose Bulk Change Group Contents.
4
Click Add to select computers.
5
Select the local groups whose members you want to modify.
6
Click Add to select the members to add or remove.
•
To add the selected members to the selected groups, click Add Members.
•
To remove the selected members from the selected groups, click Remove Members.

Clearing the local administrator group

To clear the local administrator group
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click Clear Local Admin.
 
* 
NOTE: From the Browse tab, select Tools | Bulk Remove from Local Administrators.

–OR-

Right-click in the Navigation or Objects pane, and choose Bulk Remove from Local Administrators.

4
Click Add to add computers one at a time or click Add all computers from domain.
5
Select options.
 
Table 10. Report options
Option
Description

Produce report

Select to produce a report of the domain users that were removed in the process. In the Report file path box, type a path to where you want to place the report file, or click Select file path to choose the path.

Produce report only

Select to just produce a report without actually removing the domain users. You can examine the report prior to completing the process. In the Report file path box, type a path to where you want to place the report file, or click Select file path to choose the path.

NOTE: If you select Produce report only, domain users are not removed from the local Administrators group when you click Remove all domain users.
6
Click Remove all domain users.

Deleting groups and users

To delete groups and users
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click Delete User/Group.
4
Click Add to select the accounts to delete.
5
Click Delete.
 
* 
NOTE: From the Browse tab, select a type of group or user in the Navigation pane, select one or more groups or users in the Objects pane, select Tools | Delete.

-OR-

Click on the Tool Bar; or right-click selected groups or users, and choose Delete.

Creating a new Managed Service Account

Prerequisites

Before creating a Group Managed Service Account, run the following PowerShell cmdlet:

Add-KdsRootKey -EffectiveTime ((get-date).addhours(-10))

This cmdlet makes domain controllers wait 10 hours for Active Directory replication convergence before the creation of a Group Managed Service Account.

To create a new Managed Service Account
1
Open the Group and User Management module.
2
Open the Tasks tab.
3
Click Create User/Group, and select Managed Service Account.
4
Type a domain name, or click Select scope to select a domain.
5
Click OK. The New Managed Service Account box displays the current selection.
* 
NOTE: To open the New Managed Service Account box on the Browse tab, select Domain Managed Service Accounts in the Navigation pane, and select Tools | New.

-OR-

Click on the Tool Bar; or right-click Domain Managed Service Accounts, and choose New.

6
Type the Common-Name for the new Managed Service Account in the Name field.
7
Type the SAM-Account-Name for the new Managed Service Account in the Account Name field.
8
(for Group MSA only) Type the DNS hostname.
9
Select a type for the new Managed Service Account.
10
Click Create.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating