Chat now with support
Chat with Support

Security Explorer 9.9.2 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Repairing limited access permissions

SharePoint® automatically creates Limited Access permissions on a parent object when a new permission is created on a child item. For example, if you create a new Full Control permission on a subobject for AccountX, then SharePoint®, if necessary, automatically creates a Limited Access permission for AccountX on the parent object. If you delete the Full Control permission, the parent Limited Access permission is not automatically deleted. The Repair Limited Access Permissions function cleans up all orphaned Limited Access permissions that should no longer exist.

 
* 
NOTE: Applies to parent SharePoint sites only. The Repair task opens the Repair Limited Access Permissions dialog box.
IMPORTANT: Back up your permissions before running this function. You may want to create a report that shows only the items that would change.
To repair limited access permissions
1
Open the SharePoint Security module.
2
Open the Browse tab.
3
Select a SharePoint server in the Navigation pane.
4
Select an item in the Objects pane, and select Security | Repair Limited Access Permissions.
-OR-
Click on the Tool Bar; or right-click the item, and choose Repair Limited Access Permissions.
5
Select options.
 
Table 5. Report options
Option
Description

Create report (will list changed items)

Select to create a report that lists changed items. Type a file path or browse to locate a path.

Produce report only (i.e. no changes will be made)

Select to create only a report that shows what items would be changed if you ran the Repair Limited Access Permissions process.

Removing permissions on deleted accounts

If you remove an Active Directory® account, the permissions are still retained on the SharePoint® server. Use this feature to remove all permissions associated with deleted Active Directory accounts on a SharePoint site.

 
* 
NOTE: Applies to parent SharePoint sites only. The Revoke Unknown task opens the Remove Permissions for Deleted Accounts dialog box. Add at least one path, and click OK.
IMPORTANT: Back up your permissions before running this function. You may want to create a report that shows only the items that would change.
To remove permissions on deleted accounts
1
Open the SharePoint Security module.
2
Open the Browse tab.
3
Select a SharePoint server in the Navigation pane.
4
Select an item in the Objects pane, and select Security | Remove Permissions for Deleted Accounts.
-OR-
Click on the Tool Bar; or right-click the item, and choose Remove Permissions for Deleted Accounts.
5
Select options.
 
Table 6. Remove permissions options
Option
Description

Remove deleted accounts from SharePoint groups

Select to remove permissions for deleted accounts on the selected SharePoint site.

Create report (will list changed items)

Select to create a report that lists changed items. Type a file path or browse to locate a path.

Produce report only (i.e. no changes will be made)

Select to create only a report that shows what items would be changed if you ran the Remove Permissions for Deleted Accounts process.

Removing permissions on disabled accounts

Removes all permissions associated with disabled Active Directory® accounts on a SharePoint® site.

 
* 
NOTE: Applies to parent SharePoint sites only. The Revoke Disabled task opens the Remove Permissions for Disabled Accounts dialog box. Add at least one path, and click OK.
IMPORTANT: Back up your permissions before running this function. You may want to create a report that shows the items that would change.
To remove permissions on disabled accounts
1
Open the SharePoint Security module, and open the Browse tab.
2
Select a SharePoint server in the Navigation pane.
3
Select an item in the Objects pane, and select Security | Remove Permissions for Disabled Accounts.
-OR-
Right-click the item, and choose Remove Permissions for Disabled Accounts.
4
Select options.
 
* 
NOTE: If you came to the Remove Permissions For Disabled Accounts dialog box from the Revoke SharePoint Permissions dialog box, the Include protected objects (objects with ‘Inherit Permissions from Parent’ disabled) check box is selected automatically (see Revoking SharePoint permissions).
 
Table 7. Remove permissions options
Option
Description

Remove disabled accounts from SharePoint groups

Select to remove permissions for disabled accounts from SharePoint groups.

Remove disabled accounts from AD groups (except primary groups)

Select to remove permissions for disabled accounts that were added to SharePoint from their Active Directory groups, except primary groups.

NOTE: The currently logged on user must have the Read Members and Write Members permissions applied to the Descendant Group on the target domains.

Create report (will list changed items)

Select to create a report that lists changed items. Type a file path or browse to locate a path.

NOTE: If you select the Create Report check box, only the parent container is examined and appears on the report because the child objects are included in the revoke process automatically.

Produce report only (i.e. no changes will be made)

Select to create only a report that shows what items would be changed if you ran the Remove Permissions for Disabled Accounts process.

NOTE: If you select the Produce report only check box, all objects appear on the report.

Managing SharePoint groups

You can manage group membership for SharePoint® groups, including the Site Collection Administrators group for each site collection.

 
* 
NOTE: Applies to parent SharePoint sites only. The SharePoint Groups advanced task opens the SharePoint Groups dialog box. Add a path, and click OK.
To manage SharePoint groups
1
Open the SharePoint Security module.
2
Open the Browse tab.
3
Select a group in the Permissions pane.
4
Click Groups.
You also can select a group from the drop-down list, or browse to locate a SharePoint group.
5
Modify the group.
 
Table 8. Modify SharePoint group options
Button
Description

New Group

Create a new SharePoint group.

Delete Group

Delete the displayed SharePoint group.

New Member

Add a new member to the displayed SharePoint group.

Delete Member

Delete a member from the displayed SharePoint group.

Export

Generate a report that you can print, save, or export.

Show AD Group Contents

Look up the Active Directory® account for the selected member.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating