Chat now with support
Chat with Support

Security Explorer 9.8 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Using the Grant task

The Grant task provides a quick way to grant permissions. For more options, add at least one path, and click Switch to Security Explorer Classic (Advanced). See Using the Browse tab to grant permissions.

NOTE: The Tasks tab is hidden by default. To display the Tasks tab, select View | Tasks tab.
2
Open the Tasks tab, and click Grant.
3
Click Add to select paths.
4
Click Add to select permissions.
6
Click OK. The Granting Permissions box displays the progress. See Completing a process.

Revoking permissions

You can revoke access for users and groups. The type of permission revoked depends on the selected module. For example, if you want to revoke permissions for a printer, open the Printer Security module.

In the NTFS Security module, you can create a schedule to temporarily revoke a permission.

Topics:

Using the Browse tab to revoke permissions

2
Open the Browse tab.
Type a path in the Path box, and click Go.
5
Select Security | Revoke Permissions.
Click on the Tool Bar; click Revoke on the Control Buttons Bar; or right-click the object or permission, and choose Revoke Permissions.
The Revoke Folder Permissions dialog box displays the path, and the associated groups and users for the current object. The navigation tree is hidden by default. To view the navigation tree, click 4.
To return the full list to view, click Reset. The list returns to full view the next time you open Revoke Permissions.
To display users in the list, click Show Users. To return the list to show only groups, click Refresh.
7
From the Permission list, select the permissions to revoke, and whether or not to Allow or Deny. If the choice is not available in the list, click Advanced Permission Selection to create a custom choice.
8
To add the group/user to the List of users and groups to revoke list, click Add.

Revoke all permissions (Allow and Deny) for the selected user

Not available in the Task Management and Groups and Users modules. Select to revoke all permissions (Allow and Deny) for the selected user.

Include SID history search when adding permissions for revoking

Select to invoke a SID history search when you click Add to add the selected group/user to the List of users and groups to revoke list. Since there may be more than one SID associated with the selected account, selecting this check box adds all existing SIDs to the List of users and groups to revoke list so that all existing permissions are revoked.

Advanced Revoke Options

If you select this check box, a warning message displays and the Revoke Folder Permissions dialog box becomes inactive, so the other users/groups and permissions you selected are not included in this action. To continue, click Yes.

Revoke all unknown and deleted accounts

Select to revoke permissions on unknown or deleted accounts.

Revoke all disabled accounts

Select to revoke permissions on all disabled accounts.

Log Actions

Select to create a log file. Browse to name the log file.

Include protected objects (objects with ‘Inherit Permissions from Parent’ disabled)

Select to revoke permissions on protected objects.

10
NTFS Security module only. You can temporarily revoke this permission by creating a schedule.
a
Click Schedule.
c
d
Click Yes to open the task.
e
On the Triggers tab, click New.
11
Click OK. The Revoking Permissions box displays the progress. See Completing a process.

Revoking permissions on unknown accounts

You also can use the Revoke Unknown advanced task to revoke all permissions on unknown and deleted accounts. See Using the Revoke tasks.

2
Open the Browse tab.
Type a path in the Path box, and click Go.
4
Select Advanced Revoke Options.
5
Click Yes.
6
Select Revoke all unknown and deleted accounts.
7
Click OK. The Revoking Permissions box displays the progress. See Completing a process.
Related Documents