Chat now with support
Chat with Support

The Quest and One Identity Support Portals will be unavailable on Friday July 10, 2020 from 5:30 PM to 6:30 PM for website maintenance.

Security Explorer 9.8 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Searching for Active Directory objects

1
Open the Active Directory Security module.
NOTE: If you open the Search tab in the Navigation pane without selecting an object, you need to add a Search Scope before you set criteria. See Adding a search scope.
3
Select Search | Search in a New Window (Empty).

Name

Enter or browse for the name of the principal that you want to find. Use * to match any number of characters. Use ? to match any single character. The comparison is not case sensitive.

Include all group memberships

Select to include all group memberships. The groups to which the account belongs appear in the drop-down list.

Permission

You can search for a name or a permission type. If you want to search for permissions, type the permissions in the box separated by commas. Alternatively, browse to select permissions from a list.

Allow Permissions

By default, allow permissions are included in the search results. To exclude allow permissions, clear the check box.

Inherited Permissions

By default, inherited permissions are included in the search results. Inherited permissions are indicated by (I) in the Type column. To exclude inherited permissions, clear the check box.

Deny Permissions

By default, deny permissions are included in the search results. To exclude deny permissions, clear the check box.

Explicit Permissions

By default, explicit permissions are included in the search results. To exclude explicit permissions, clear the check box.

Search for unknown accounts

Select to include accounts deleted from Active Directory.

Search for disabled accounts

Select to include accounts that are disabled.

5
Click Start Search.

Start Search

Start the search based on the current Search Scope and selected criteria.

Stop Search

Stop the search process.

Clear Results

Clear the results area.

Defaults

Return to the default selections on all search criteria tabs.

Save Results

Save the results as a .txt file.

Report

Display the results in a report format that you can save, print, or export.

Modifying Active Directory permissions

Modify the permissions of groups or users on the selected Active Directory® object. Use this feature for quick changes to accounts displayed in the permissions list. Use the Grant feature to give permissions to accounts that are not displayed in the permissions list. See Granting Active Directory permissions.

IMPORTANT: You cannot modify inherited permissions directly. Inherited permissions are indicated by Allow (I) in the Type column. To modify these permissions, you must modify the parent object.
1
Open the Active Directory Security module.
4
Select Security | Modify Permission.

Propagate modifications down to subtree

The selected modifications are propagated to child objects.

10
11
Click Yes.

Modifying group memberships

1
Open the Active Directory Security module.
Click Contents in the Control Button Bar; or right-click a group, and choose Display Group Contents
Right-click a user and choose Display Memberships.

Add

Add members to the selected group.

Remove

Remove selected members from the selected group.

Refresh

Refresh the list after adding or removing a member.

Print

Print the list.

Save

Save the list as a .txt file.

Show Group Contents

View the members of a selected group.

Show Memberships

Show the groups of which the selected group or user is a member.

Close

Close the Group contents box.

Modifying Active Directory properties

1
Open the Active Directory Security module.
Related Documents