Notice: will be retired soon. Please visit our new site at
Simplify Windows Security
Quest Security Explorer is a powerful yet intuitive solution for easily managing access control on Windows files, folders, SharePoint, SQL, Exchange and workstations.
Download free trial »
Datasheet: Security Explorer
Security Explorer takes the complexity out of security management with a single, intuitive interface to manage, search, clone, back up and recover permissions across your Windows network.
Read datasheet »

Security Explorer

The Complete Permissions Management Solution

Security Explorer delivers a unified solution for complete access control and security management across your entire Windows network. You can back up, recover, manage, search, migrate and report on permissions for Windows Server, Exchange Server, SharePoint Server and SQL Server—all from a common graphical user interface.

Moreover, Security Explorer enhances the management of Windows Server 2012 Dynamic Access Control by enabling you to add, remove, modify, back up, restore, copy and paste permissions that include conditional expressions.


  • Manage – Don’t open a dozen Windows Explorer windows to manage permissions. Security Explorer enables you to grant, revoke, modify and clone permissions, including those applied with Windows Server 2012 Dynamic Access Control – all from a single, easy-to-use console. You don’t have to worry about changing permissions for individual resources because you can modify permissions at the server level from a single solution. You can force permissions onto protected objects in order to overcome “access denied” errors, and delegate administrative responsibilities for different Microsoft technologies using role-based access management. Learn more »
  • Search – Quickly find “who has access to what.” With Security Explorer, you can easily locate over-privileged users and identify users who should have access but don’t. You can search for permissions by group membership, resources and claim types. You can even search for permissions that were created with Dynamic Access Control. Learn more »
  • Recover – Back up and recover permissions, including those applied with Windows Server 2012 Dynamic Access Control, without affecting the data those permissions apply to. Data remains available, servers remain online, and users remain productive. You can create access control baselines and reinvent them at any time, as well as easily roll back accidental or malicious changes to ensure that you remain compliant. You can even restore permissions to the same resources on another server or location, making migrations and troubleshooting fast, effective and error-free. Learn more »
  • Report – Create ad-hoc security reports to facilitate auditing or troubleshooting. Security Explorer enables you to export search results (such as a list of permissions on items anywhere in the Windows server) to a database or spreadsheet, so you can meet almost any requirement. Security Explorer also includes a variety of built-in reports that enable you to easily review permissions assignments, group memberships, permissions applied with Windows Server 2012 Dynamic Access Control, and more. For example, you can produce a complete list of everything a user has permission to – even through group membership – or show only permissions that differ from a parent folder. Learn more »
  • Migrate – Keep security permissions intact by migrating permissions whenever you move resources. With Security Explorer, you can compare migrated passwords to a backup baseline to ensure accuracy after a migration. You can find all resources to which a user or group has permissions, and transfer that access to another user with the same needs. And you can update account settings and passwords for services and tasks across the network. Learn more »

Sys Reqs

System Requirements

Important: The minimum system requirements listed are for the computer on which Security Explorer is installed. Security Explorer can only be used to manage permissions on other computers that have Microsoft Windows as an operating system.


Pentium 600MHz or faster

Operating Systems

  • Windows XP
  • Windows Vista
  • Windows 7
  • Windows 8.1
  • Windows Server® 2003
  • Windows Server 2008
  • Windows Server 2008 R2
  • Windows Server 2012
  • Windows Server 2012 R2
  • Microsoft.NET Framework 4.0 or higher
    Note: Install either the Full or Standalone version. Do not install just the Client Profile

Disk Space

50 MB

Memory (RAM)

256 MB 

Screen Resolution

1024 x 768

Supported Versions of...

  • Microsoft Office SharePoint Server 2007
  • Windows SharePoint Services 3.0
  • Microsoft SharePoint Server 2010
  • Microsoft SharePoint 2013
  • SharePoint Foundation 2010

SQL Server

  • SQL Server 2005
  • SQL Server Express 2005
  • SQL Server 2008
  • SQL Server 2008 R2
  • SQL Server 2012

     Datacenter and Standard Editions are also supported, as well as 64- and 32-bit variants

Exchange Server

  • Microsoft Exchange 2003
  • Microsoft Exchange 2007
  • Microsoft Exchange 2010
  • Microsoft Exchange 2013
  • Mixture of Microsoft Exchange Servers

Microsoft products no longer supported


  • Microsoft SQL 2000
  • Microsoft Exchange 2000
  • Microsoft SQL Server Desktop Engine (MSDE)

For more information please refer to the "Minimum System Requirements" section in the Security Explorer Installation Guide.

User Privilege Requirements

To start Security Explorer, a user must be a member of the local Administrators, otherwise errors messages display.

For more information please refer to the "Minimum System Requirements" section in the Security Explorer Installation Guide.


  • Security Explorer Overview

    Learn how easy it is to manage security and permissions in Active Directory with Security Explorer, Quest Software’s complete solution for access control and security management across your Windows network.

    Watch the Video »


Security Explorer – Overview

Security Explorer – Overview

Use a single console to manage permissions for file systems, SharePoint, SQL Server and Exchange.

Security Explorer – Search

Security Explorer – Search

Searching for specific permissions across your enterprise is a simple task with Security Explorer.

Security Explorer – Manage

Security Explorer – Manage

Manage access (grant/revoke/modify) on Windows servers and desktops, as well as NAS/SAN devices.

Security Explorer – Recover

Security Explorer – Recover

Back up and restore access control lists separate from the associated data to maintain availability.

Security Explorer – Report

Security Explorer – Report

Create security reports or export a list for all locations that a user or group has access.

Security Explorer – Exchange

Security Explorer – Exchange

Find, manage and report on permissions for mailboxes, mailbox folders and more Exchange objects.

Security Explorer – SQL Server

Security Explorer – SQL Server

Determine who effectively has access to SQL Server resources, and restrict that access when needed.

Security Explorer – SharePoint

Security Explorer – SharePoint

Discover and manage SharePoint sites and permissions for users and AD or SharePoint groups.