Chat now with support
Chat with Support

Security Explorer 9.8 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Revoking permissions on disabled accounts

You also can use the Revoke Unknown advanced task to revoke all permissions on disabled accounts. See Using the Revoke tasks.

To revoke all permissions on disabled accounts
1
Open the module for the type of permission you want to revoke.
2
Open the Browse tab.
3
Select an item in the Navigation pane.
–OR-
Type a path in the Path box, and click Go.
4
Select Advanced Revoke Options.
5
Click Yes.
6
Select Revoke all disabled accounts.
7
Click OK. The Revoking Permissions box displays the progress. See Completing a process.

Using the Revoke tasks

The Revoke task provides a quick way to revoke permissions. You also can use the Revoke All, Revoke Unknown, Revoke Disabled, and Revoke SID History advanced tasks to easily revoke permissions for those specific situations. For more options, add at least one path, and click Switch to Security Explorer Classic (Advanced). See Using the Browse tab to revoke permissions.

 
* 
NOTE: The Tasks tab is hidden by default. To display the Tasks tab, select View | Tasks tab.
To revoke permissions using the Revoke tasks
1
Open the Tasks tab.
2
Open the module for the type of permission you want to revoke, and click Revoke, Revoke All, Revoke Unknown, Revoke Disabled, or Revoke SID.
3
Click Add to select paths.
4
If you clicked Revoke or Revoke All:
•
Click Add to select permissions.
•
To include objects that do not inherit permissions from the parent object, select the check box.
5
Click OK. See Completing a process.

Cloning permissions

Use the Clone feature to copy individual permissions, permissions in an entire domain, or permissions relating to a user’s SID history. The type of permission cloned depends on the selected module. For example, if you want to clone permissions for a printer, open the Printer Security module.

 
* 
NOTE: For NetApp Clustered mode, to see changes after a permission action on folders and shares, you must refresh the tree in the Navigation pane.
NOTE: To customize the clone process in the NTFS module, you can set options for modifying permissions. See Setting advanced options.

Topics:

•
Using the Browse tab to clone permissions
•
Using the Clone task

Using the Browse tab to clone permissions

To clone permissions using the Browse tab
1
Open the module for the type of permission you want to clone.
2
Open the Browse tab.
3
Select an item in the Navigation pane.
–OR-
Type a path in the Path box, and click Go.
4
Select an object in the Objects pane or a permission in the Permissions pane.
5
Select Security | Clone Group or User.
-OR-
Click on the Tool Bar, click Clone on the Control Buttons Bar; or right-click the object or permission, and choose Clone Group or User.
The Clone Folder Permissions box opens to the Manual User/Group Selection tab and displays the path to the selected object and the associated groups and users.
There are five ways to select users and groups for cloning:
•
To select individual users and groups to clone, use the Manual User/Group Selection tab. See Selecting users and groups manually.
•
To select entire domains to clone, use the Automatic User/Group Selection tab. See Selecting users and groups automatically.
•
To update Access Control Lists (ACLs) with SIDs relating to the user’s SID in the new domain, use the SID History tab. See Updating permissions relating to a user’s SID history.
•
To import a .CSV file of users/groups to clone, use the Import User/Group Selection tab. See Importing users and groups.
•
To load a previously saved Security Explorer Clone List (.dat), click Load. Not available in the SQL Server Security, SharePoint Security, and Exchange Security modules.
6
Select options.
 
Table 3. Clone options
Option
Description

Clone Permissions

By default, permissions are cloned.

Clone Ownership

Select to clone ownership.

Clone group memberships

Select to add the destination account to the groups of which the source user is a member.

If you choose this check box, a warning message displays. The destination is cloned into the same parent groups as the source. The contents of the groups selected as the source are not cloned.

Replace source permissions with destination permissions

Select to change the source permissions to match the destination permissions.

Include protected objects when cloning (objects with ‘Inherit Permissions from Parent’ disabled)

Not available in the SQL Server Security, SharePoint Security, Exchange Security, and Active Directory Security modules. Select to include those objects for which the Allow inheritable permissions from parent to propagate to this object check box is unavailable. See Viewing permissions.

7
To save the selections as a Security Explorer Clone List (.dat) for reuse, click Save. Not available in the SQL Server Security, SharePoint Security, Exchange Security, and Active Directory modules.
8
Click OK. See Completing a process.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating