Chat now with support
Chat with Support

Security Explorer 9.8 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Setting options for Active Directory Security

By default, the Active Directory Security module attempts to connect to the default naming context of the current domain on which the user is logged on. You can add more connections to reach the default naming context of other domains with specified credentials. If you add a connection for the current domain, Security Explorer will use the new connection setting instead of the default connection.

 
* 
NOTE: Security Explorer only supports domains that have a trusted relationship with the current domain on which the user is logged on.
To add more connections
1
Select Tools | Options.
2
Open the Active Directory tab.
3
Click Add.
4
Type the target domain DNS name or domain controller server name with or without the port number.
 
* 
NOTE: If no port number is specified, Security Explorer uses the default port number 389.
5
Set optional credentials.
 
* 
NOTE: If you do not specify alternate credentials, the credentials of the currently logged on user are used.
6
Click OK.
You can add more connections; or edit or delete selected connections. To remove all connections from the list, click Clear.
7
Click OK.

 

Customizing Security Explorer

The Security Explorer® Options provide flexibility to the appearance and functionality of Security Explorer.

 
* 
NOTE: The tabs available with Tools | Options that are not described in this chapter are covered in other chapters. See Setting SharePoint options, Setting options for SQL Server, Setting options for Exchange security, Setting options for Access Explorer, and Setting options for Active Directory Security.

Topics:

•
Setting general options
•
Setting view options
•
Setting alternate credentials for workgroups
•
Setting alternate credentials for services and tasks
•
Setting alternate credentials NAS devices
•
Setting advanced options
•
Controlling access to Security Explorer

Setting general options

To set general options
1
Choose Tools | Options.
2
Set the startup option.
 
Table 1. Startup option
Option
Description

Reload window state (size and view menu entries)

By default, the size of the Security Explorer window and choices on the View menu are saved upon exiting the application. Clear to use the standard size and center the Security Explorer window on your display.

3
Set options to occur when modifying permissions.
 
Table 2. Modify options
Option
Description

Always display progress dialog

Display progress dialog for long operations only

Never display progress dialog

Select an option to manage the display of the progress dialog when you modify permissions. Choosing to display the progress dialog for long operations only (default) or to never display the progress dialog may help with memory management.

Auto-close progress dialog on completion

Select to always close the progress dialog upon completion of a process, such as granting or cloning.

Perform an inheritance check after creating new folders

Select to always perform an inheritance check and repair after creating new folders.

4
Set the option for Windows® Explorer.
 
Table 3. Windows Explorer option
Option
Description

Include Security Explorer context menu

Select to display the Security Explorer context menu in Windows Explorer. You can access the context menu from the Start menu, the Windows Explorer File menu or a shortcut menu.

NOTE: If you are running Windows Vista®, deactivate User Account Control (UAC) in Windows Vista before selecting the Include Security Explorer context menu check box.
NOTE: If the current user is not a member of local Administrator group, the Include Security Explorer context menu check box is disabled.
5
Set options for scheduled backups.
 
Table 4. Scheduled backups option
Option
Description

Prefix backup name with date and time

By default, backup file names begin with the date and time. To remove the date and timestamp prefix from backup file names, clear the check box.

Purge NTFS Backup Files

Click to purge backup files. See Purging backup files and Scheduling a backup purge.

6
Set options for logging.
 
Table 5. Logging options
Option
Description

Log all security changes

Select to log all permission changes to the selected root path displayed in the box. Browse to locate the root folder. Only information about the selected root path is logged; no information about changes to sub-items is logged.

To prefix each security change entry, type a string in the Change management prefix box. If the Change Management prefix is set to 0 (zero), no prefix is used.

Show detailed error messages

Select to show detail for error messages in the log file.

7
Click OK.

Setting view options

To set view options
1
Choose Tools | Options, and open the View tab.
2
Set permissions options.
 
Table 6. Permission options
Option
Description

Use advanced style for users and groups

Select to include a UPN, if available, following the name in the Name column. For example: Joseph Smith (J.Smith@123.com). If the UPN is unavailable, the basic style is used. The advanced style may slow the display of permissions.

Use basic style for users and groups (ie name only)

By default, only the domain name\user name displays in the Name column. For example: ACME\JSmith.

Include SID on permission change/search dialogs

Select to show the SID column in dialog boxes. By default, the SID column is hidden.

3
Set options for objects, such as groups, users, or shares.
 
Table 7. Objects options
Option
Description

Show Workgroup collection (Groups/Users module only)

Group and User Management module only. Select to display workgroup computers of local groups and local users in the navigation pane. Also adds the Workgroup tab to Security Explorer options. See Setting alternate credentials for workgroups.

Show domain controllers when selecting groups and users

Select to enable domain controller selection when browsing groups and users on the Grant, Revoke, and Clone dialog boxes. In addition, a Domain Controllers node displays under each domain parent node in the Navigation pane.

Show description column for permissions (not SharePoint, Exchange)

Select to display a Description column in the Permissions pane. Not available in the Exchange Security and SharePoint Security modules.

Highlight disabled users (may slow browsing performance)

Select to display an icon next to disabled users in the Permissions pane and Owner box.

Highlight shared folders (may slow performance)

Select to display icons next to shared folders in the Navigation pane and in the Objects pane.

Show Printer Shares

Select to display printer shares in the Objects pane. By default, printer shares do not display.

Do not show disabled users (Groups/Users module only)

Group and User Management module only. Select to hide disabled users from the display.

4
Set options for warnings.
 
Table 8. Warnings options
Option
Description

Display warning message before loading large NTFS folders, registry keys and Exchange mailboxes

By default, a warning message displays if the number of NTFS subfolders and files, registry keys, or Exchange mailboxes exceeds the value specified in the Trigger box.

Display warning if inheritance fault detected (NTFS only)

Select to display a warning if incorrectly inherited permissions are found.

5
Click OK.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating