Security Explorer 9.8 - Release Notes

Table of Contents

Quest® Security Explorer® 9.8 About this release Supported platforms New features Enhancements Resolved issues Known issues System requirements

Hardware requirements Software requirements User privilege requirements Minimum permissions for Access Explorer Minimum requirements for Microsoft Exchange for Security Explorer

Client access server configuration Client Configuration Required software for Microsoft Exchange for Security Explorer

Exchange 2007 Exchange mixed modes: 2007–2010 and 2007–2013 Exchange 2010, 2013, 2016 Exchange mixed modes: 2010–2013, 2010–2016, 2013–2016

Permission requirements to manage Microsoft Exchange in Security Explorer

Restrictions with mailbox management

Exchange 2007 Exchange 2010 Exchange 2013 and 2016 Mixed Mode (Exchange 2007–2010) Mixed Mode (Exchange 2007–2013) Mixed Mode (Exchange 2010–2013, 2010–2016, 2013–2016)

Upgrade and compatibility

Product licensing Upgrade and installation instructions More resources Globalization About us

Enhancements

The following is a list of enhancements implemented in Security Explorer® 9.8.

Table 2. General enhancements
Enhancement	Issue ID
Added the ability to view EMC Isilon devices through a load balancer.	12233
Added the ability to run multiple instances of Security Explorer on the same system with the same user.	12244
Added the ability to search all computers for a certain registry key and to view the value.	12264
Added a license dashboard to show licensed users, enabled users, and license information.	12266
Added the ability to log exceptions when running scheduled tasks. If a task runs normally. it is not logged. The log file name format is {call_exe_name}_{datetime}.log. Logs are located at C:\Program Files\Quest\Security Explorer\v9\Logs.	12268
Added the ability to use alternate credentials for shares.	12493
Added the ability to use an OU in the search scope.	12502
Added an exclusion option for SXPExport.exe.	12503
Allowed SXPGrant.exe to incorporate variables such as %USERNAME% to allow multiple folders to be sequenced for use in assigning permissions and ownership.	12505
Added recursion depth to SXPBackup.exe.	12507
Added a retry option for resetting passwords	12511
Sped up the process when browsing NetApp® 7-mode shares.	12512
When using SXPExport.exe, added the ability to select summary mode and to specify that specific columns be exported.	12513
Added the ability to export the search scope and settings to an XML file for later import into another module. Saved searches appear under Saved Searched \| User Searches. NOTE: You can only import an XML file that was exported from the same module with the exception of the NTFS Security and Share security modules. In these modules, you can import an XML file that was exported by the other module.	12514
Added a setting that allows each user to change where their settings are stored, such as a home folder or drive.	12519
Added the ability to change bulk permissions based on criteria, such as the folder name.	14512
Added the Select all children for current item and De-select all children for current item to the Add Search Scope dialog box for all modules.	14533
Added the Favorites node to the Add Search Scope dialog box for the NTFS, Share, Printer, Service, Task, and Exchange modules. Added the Active Directory node to the Add Search Scope dialog box to the Share, Registry, Printer, Group and User Management, SharePoint, and SQL Server modules.	14533
Allowed SXPExport.exe to export security group information for directories to Microsoft® Excel®.	14892
Improved query account performance.	17108
Allowed more than a 260 character file path length.	21255
Added support for the Access Explorer PowerShell® snap-in in Security Explorer.	21342
Added the ability to add Active Directory alternate credentials for multiple domains to Security Explorer Favorites.	24206

Table 3. NTFS Security module enhancements
Enhancement	Issue ID
Added the ability to schedule exports with options.	12491
Added the ability to use wild cards when restoring security to a different path.	12492
Added the ability to back up a root folder (01) and its subfolders, and restore it to all other root folders (02, 03, 04, and so on).	12494
Added the ability to back up permissions on one folder, and then import a list of up to 1000 or more target folders to which the permissions may be restored.	12495
Added the ability to manage permissions at the drive root level.	12497
Added the ability to modify selected multiple permissions. Selected multiple permissions must be under the same path or object.	12498
Added the ability to restore security to multiple paths that have identical file structures.	12500
Added the ability to create a schedule to temporarily grant or revoke a permission.	12508
Added the ability to purge backup files (Security \| Purge Backup Files) and a Purge Backup Scheduler to manage scheduled purges of backup files (Security \| Purge Backup Scheduler).	12575
Added the ability to exclude selected files and folders from an export.	14532

Table 4. Group and User Management module enhancements
Enhancement	Issue ID
Added the ability to set alternate credentials for workgroup computers. Select to show workgroups in the navigation pane in Tools \| Options \| View and then use the Workgroup tab to set alternate credentials (Tools \| Options \| Workgroup).	12517

Table 5. Exchange Security module enhancements
Enhancement	Issue ID
Inactive Room mailbox in exchange does not display folders.	12230

Resolved issues

The following is a list of issues addressed in this release.

Table 6. General resolved issues
Resolved issue	Issue ID
In some cases, there is no reaction after clicking OK in the License dialog.	12937 14138
Cannot remove a disabled account from Active Directory® groups.	13316
Added the domain name to account names in the Revoke Disabled Accounts log file.	13458 14092
The Not a valid Win32 FileTime error occurs when performing an NTFS search on an EMC® Isilon® NAS device.	14096 14097
When modifying security for a user with two ACEs on an object editing on ACE will remove the other if they overlap.	14098 14099
An error occurs when creating a user account that spans multiple computers and the cache is on.	14810
SXPExport.exe is not working as expected and produces the error Object reference not set to an instance.	15244
Issue in permission comparison with backup.	15632 16252 16253
The Enterprise Reporter Suite license is not valid in Security Explorer® 9.7.	15947 15948
When recovering security from a backup, existing security setting are overwritten when Append security is selected.	17943
When adding or modifying permissions, Security Explorer removes some permissions.	18820
Navigation menu in Security Explorer is not being populated.	19591
Receive an error when attempting to manage root drive permissions from Windows Explorer.	20458
When removing deleted accounts from a site, the scope is enlarges to the site collection.	21198
Closing the main Security Explorer window when modifying permissions causes Security Explorer to lock up.	21201
Memory leak issues and all memory used on a file server after four days.	24362

Table 7. SharePoint Security module resolved issues
Resolved issue	Issue ID
It is impossible to add two different domain accounts to a SharePoint® group.	13320 14093
Updated an error message that occurs when restoring a backup of SharePoint 2013 if the user does not provide credentials.	14531
Issue getting orphaned user accounts out of SharePoint.	16250 16251
Unable to find a user in SharePoint and the sites to which they have access from another domain.	18226

Table 8. Access Explorer module resolved issues
Resolved issue	Issue ID
Access Explorer agents always show Update Available.	14072
On the Managed Computers tab in the Access Explorer module, Upgrade Available displays for agents after an Upgrade is performed.	14270 14286
Access Explorer agents unregister when a new agent is installed on the same agent host.	14287
Unavailable to see user's shares.	16404

Known issues

The following is a list of issues, including those issues attributed to third-party products, known to exist at the time of release.

Table 9. General known issues
Known issue	Issue ID
PowerShell CmdLets & CmdUtils: impossible to Grant/Revoke/Clone for short names of accounts in another domain.	12162
Cannot grant/modify deny permissions when the user has no permissions and is not an owner.	12171
The Security Explorer context menu does not allow managing multiple folders and files.	12180
Modifying one permission for a user with two ACEs sometimes incorrectly removes the other.	12183

Table 10. Exchange Security module known issues
Known issue	Issue ID
It is impossible to create a mailbox as a new user if Exchange 2013 in mode: Active Directory split permission security model to the Exchange organization.	12141
It is impossible to restore Exchange permissions if they were backed up in previous versions of Security Explorer.	13550