Hello everyone, and thank you for joining us in today's presentation of Security Explorer. My name is Doug Maul, I'm one of the senior systems engineers, and I'll be conducting today's presentation. Security Explorer is a complete permission management solution. It will allow you to manage positions across your organization from a single console. The areas we can manage permissions are NTFS Security, Share Security, Registry Security, Printer and Service Security, Task Management, Group and User management, SharePoint, SQL, and Exchange. I'm going to go through each of these areas one by one, give a very general overview to give you an idea of how we can make life easier for you.
Security Explorer gets installed on any workstation or server. We do not require any kind of database back-end and we do not run agents on any of your servers. Everything that we're looking at functions in real time. So starting with NTFS Security, I'm simply going to browse my organization, I pull a server I want to manage. Now we see some red X's here, no problem. Those servers simply aren't being contacted because I have them powered off. What we're looking at is my server name, PENGUINDC.
And under PENGUINDC, I'm looking at a directory called DataShares. DataShares shares, that child directory is going to populate on the right. Whatever item I highlight, we will see permissions populate for that item on the bottom. So for my DataShares directory, we see permissions populated here. For example, Wile E. Coyote has list folder contents. Everyone, full control. Ronald Reagan, full control.
Now, these are areas I want to manage. What we're going to do is we're really eliminating the need for you to have to UNC path to a server to manage information. We're eliminating the need for you to have to RDP or remote connect into multiple servers to manage permissions. We're going to give you everything you need for the entire organization from this one console. So starting with DataShares, before I even start changing permissions, what Security Explorer will allow you to do is go ahead and backup security.
Now we could backup security at the parent folder, we could back up at the child folder. It just depends on where we're going to make our changes. So I'm going to make some changes on the parent DataShares. I've already backed up security. So really what I want to do here is I'm just remove Ronald Reagan. I'll go ahead and delete Wile E. Coyote's permissions. What I can do here is simply revoke those permissions.
Now if I want to go ahead and add permissions, I could do that also. Instead of using revoke, I simply hit add. Let me go ahead and revoke permissions here. I'm going to revoke Wile E. Coyote. And I need to just select the user and I'm going to revoke Ronald Reagan's and I'm going to remove those permissions. So we can see now this time, they did disappear. I'm left with only four permissions instead of the six. If I want to add permissions to this directory, it's the same thing. I simply right click, grant permissions, browse for the user that I want to add permissions, and I'm simply pulling information directly out of AD, and I can go ahead and add permissions.
Maybe I've made some massive changes, I need to roll this back, people are complaining. No problem. What I could do is I could simply go and restore security on this object by loading the backup I've taken already. The backup is a flat file. You can have it stored anywhere you want as long as accessible by Security Explorer at the time of restore. So I'm going to browse my backup, and we can see here all the child directories. Now, if I want to restore security on these child directories independently, I can, but I want to restore security on the parent level, which would be a DataShare directory.
The nice thing here is we're giving you current permissions versus backup permissions. So if I only want to restore deleted items, I could. I also have some options on the bottom left. I could restore the owner, I could even restore these permissions to a different path. What that's going to allow me do is take these permissions and restore them to a completely separate server or separate resource on a completely different part of the organization.
So I'm going to go ahead and I'm going to restore my permissions. Green check is good. And we can see here, Wile E. Coyote and Ronald Reagan have their permissions back on the DataShare. If I need to modify or change permissions on a child share, I can. Maybe I want to take Elmer Fudd's directory and make some changes here. I could do that also. We're not limited to only a parent or only a child directory.
If I'm not sure where someone has permissions, I can go ahead and perform a search. My search is scope-related. When I say scope-related, we can go ahead and narrow our search down. So if we have 18 terabytes of data, we don't necessarily want to search all 18 terabytes. If I only want to look at a certain directory or directories on certain servers, I can to run my search.
So I've added a search here where I have my local DataShare directory and then a remote server called TigerShark and directory DataShares there. I'm going to search for group or user permissions simply by browsing active directory. I've chosen to browse for Wile E. Coyote's permissions. I can include group memberships, that's what we're seeing here, search for permissions for groups. I have some other group options here as well.
I'm going to keep this search fairly simple, and I'm going to search for Wile E. Coyote. So really, any permissions, any effective permissions this user has that are assigned to the user,
10:21
