立即与支持人员聊天
与支持团队交流

Security Explorer 9.9.2 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Collecting Access Explorer data

The Access Explorer agents collect data on only the computers you choose to manage. You can choose which folders the Access Explorer agent scans on the managed computer and you can set the schedule when the scan occurs.

 
* 
IMPORTANT: It is very important that the service account you choose to use for the Access Explorer agent is one that has the permissions to install the agent and the service on the selected server. Only a member of the Administrator group on the selected server has the necessary permissions to install the agent and the service.

Topics:

•
Setting up a managed computer
•
Installing the Access Explorer agent locally
•
Installing the Access Explorer agent remotely
•
Managing managed computers
•
Modifying managed computer properties
•
Managing Access Explorer agents

Setting up a managed computer

A managed computer is one that is scanned by the Access Explorer agent for security data. When you add a managed computer, you have the option of installing a local agent on the same computer or configuring a remote agent installed on another computer. If you install a locally managed computer, you can automatically install the agent with the computer, or install the agent manually later.

 
* 
NOTE: Only computers in domains that are managed can be added as managed computers. To add a domain, other than the domain specified during installation, see Adding managed domains.

If you choose to add a remote agent to a managed computer, the first remote agent must be configured during the deployment of the managed computer. You can add more remote agents later, if needed.

TIP: More than one remote agent may be used to scan a managed computer. This is useful if the managed computer has a large set of data roots. Multiple agents may not scan the same data root.
 
 

Figure 2 depicts the possible deployment scenarios for Access Explorer agents and managed computers in remote and local installations.

Figure 2. Possible Access Explorer deployment scenarios

A locally managed computer is one on which the Access Explorer agent is installed and scanning security data on the same server. Local installation is available only for Windows® Servers. With a local installation, you also can choose automatic or manual installation. See Installing the Access Explorer agent locally.

A remotely managed computer is one that has its security data scanned and collected by Access Explorer agents running on different servers. Other than Windows® Servers, all other server types require remote installation. There is no option to install the agent manually. See Installing the Access Explorer agent remotely.

Installing the Access Explorer agent locally

Currently, the only type of server on which you can install the Access Explorer agent locally is Windows® Server.

To install the Access Explorer agent locally
1
Select Tools | Access Explorer Configuration.
2
Click Configure Access Explorer.
3
Open the Manage Computers tab.
4
Click New Managed Computer, and choose Windows Server.
5
Choose Locally Managed, and click Next.
6
Choose Automatic installation (recommended), and click Next.
 
* 
NOTE: If you choose manual installation, the managed computer is added to the list but the Access Explorer service is not installed. The status of the computer remains at Waiting for agent first connection until the service is installed.

To install the Access Explorer service, run the agent installer located in the Security Explorer installation folder (Program Files\Quest\Security Explorer\Access Explorer\Agent Management\Agent).

7
Choose the domain that contains the computers you want to manage.
If the domain is not listed, you need to add it as a managed domain. For more information, see Adding managed domains.
If the list of computers is long, you can type in the blank row at the top to sort the list.
 
* 
NOTE: To quickly add computers to the list, click Import to import a .txt file that contains the fully qualified domain names listed one per line or in a string separated by commas.
8
Select the computers you want to manage and click Add.
To remove a selected computer from the list, click Remove.
9
Click Finish.
The agent will now be installed on the selected computers.
As the agent is installed, the status changes to reflect the progress of the installation. When the Status column is OK the agent is installed. When the initial scan is complete, the Data State column displays Data Available.
By default, the Access Explorer agent scans the entire root drive of the managed computer. To select specific folders to scan, see Modifying the scope of a scan.

Installing the Access Explorer agent remotely

Install the Access Explorer agent remotely when you cannot install the agent on the computer you want to manage. You can install the agent on more than one remote server, so you can have several different servers collecting security information on the same computer.

 
* 
NOTE: You can install the Access Explorer agent remotely on only one managed computer at a time. You can, however, install the agent on multiple remote servers to scan a single managed computer. See Adding an agent to a remotely-managed computer.

Remote installation of the Access Explorer Agent is available for:

•
Windows Servers
•
NAS Servers
•
Clusters
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级