System Requirements

• 

  Important: The minimum system requirements listed are for the computer on which Security Explorer is installed. Security Explorer can be used to manage permissions on other computers that have Windows NT or Windows 2000 as an operating system.

  • Processor: Pentium 600MHz or faster
  • Operating Systems:
  • Windows XP
  • Windows Vista
  • Windows 7
  • Windows Server 2003
  • Windows Server 2008
  • Windows Server 2008 R2
  • Microsoft.NET Framework 4.0 or higher
  • Disk Space: 50 MB
  • Memory: 256 MB
  • Screen resolution: 1024 x 768
• 

  Supported Versions of SharePoint for Security Explorer

  • Microsoft Office SharePoint Server 2007
  • Windows SharePoint Services 3.0
  • Microsoft SharePoint Server 2010
  • SharePoint Foundation 2010
• 

  Supported Versions of SQL Server for Security Explorer

  • SQL Server 2000
  • SQL Server 2005
  • SQL Server Express 2005
  • SQL Server 2008
  • SQL Server 2008 R2
  • Microsoft SQL Server Desktop Engine (MSDE)

Supported Versions of Microsoft Exchange for Security Explorer

Exchange 2000/2003

Client Type	Prerequisites
32 Bit OS: Windows XP 32 bit Windows Vista 32 bit Windows Server 2003 32 bit	CDOXEM Can be installed with Microsoft Exchange 2003 Management Tools, which comes from Microsoft Exchange Server 2003 distributive or from Microsoft Exchange Server 2003 Service Pack 2 (Download) To install Microsoft Exchange 2003 Management Tools, the following must be installed: Internet Information Services Windows Administration Tools Pack Download
Windows Vista 32 bit Windows Vista 64 bit	CDOXEM Can be installed with Exchange System Manager for Windows Vista (Download) To install Exchange System Manager Exchange 2003 Management Tools, the following must be installed: Internet Information Services Microsoft Exchange Server MAPI Client and Collaboration Data Objects (Download) Windows Administration Tools Pack 32 bit version: Download 64 bit version: Download
Windows 7 32 bit Windows Server 2008 32 bit	Not officially supported. There is no CDOEXM version. Please see Exchange System Manager for Windows Vista - Release Notes.
64 Bit OS: Windows XP 64 bit Windows 7 64 bit Windows Server 2003 64 bit Windows Server 2008 64 bit Windows Server 2008 R2	Security Explorer cannot manage Exchange 2003 if Security Explorer is installed on a 64 bit operating system. There is no CDOEXM version for a 64 bit operating system and Security Explorer requires CDOEXM.

Exchange 2007

Client Type	Prerequisites
Windows XP 32 bit Windows XP 64 bit Windows Server 2003 32 bit Windows Server 2003 64 bit	Exchange 2007 Management Tools 32 bit version can be downloaded from Download 64 bit version comes from Microsoft Exchange Server 2007 To install Exchange 2007 Management Tools, the following must be installed: Internet Information Services .NET Framework 4.0 or higher Download Microsoft Management Console (MMC) 3.0 Download Windows PowerShell Download
Windows Vista 32 bit Windows Vista 64 bit Windows 7 32 bit Windows 7 64 bit Windows Server 2008 32 bit Windows Server 2008 64 bit	Exchange 2007 SP1 Management Tools 32 bit version can be downloaded from Download 64 bit version comes from Microsoft Exchange Server 2007 Before installing Exchange 2007 Management Tools, the following must be installed: Internet Information Services 6 (IIS 6 Management Console, IIS 6 Metabase and IIS 6 configuration compatibility are mandatory) Windows PowerShell (only for Windows Vista) Download To manage Exchange 2007 if Security Explorer is installed on 32 bit or 64 bit Vista (with or without SP1), Exchange Server 2007 SP1 tools must be installed. Security Explorer cannot manage Exchange 2007 from Vista if a previous version of the tools is installed. See this link. Exchange 2007 SP2 Management Tools cannot be installed on Windows7, however Exchange 2007 SP1 Management Tools can be installed.
Windows Server 2008 R2	Exchange Server 2007 does not officially support Windows Server 2008 R2. The support is to be implemented in Exchange Server 2007 SP3 (Download)

Exchange 2003 – Exchange 2007 (Mixed Mode)

Client Type	Prerequisites
32 bit OS: Windows XP32 bit Windows Server 2003 32 bit	Exchange 2007 SP1 Management Tools 32 bit version can be downloaded from Download 64 bit version comes from Microsoft Exchange Server 2007 CDOXEM Can be installed with Microsoft Exchange 2003 Management Tools, which comes from Microsoft Exchange Server 2003 distributive or from Microsoft Exchange Server 2003 Service Pack 2 (Download) Important: Exchange 2007 Management Tools should be installed before Exchange 2003 Management Tools. Order is important. To install Exchange 2007 Management Tools, the following must be installed: Internet Information Services .NET Framework 4.0 or higher Download Microsoft Management Console (MMC) 3.0 Download Windows PowerShell Download To install Microsoft Exchange 2003 Management Tool, IIS and Windows Administration Tools Pack are required, so to install CDOEXM the following are needed: Internet Information Services Windows Administration Tools Pack Download
Windows Vista 32 bit Windows Vista 64 bit	Exchange 2007 SP1 Management Tools 32 bit version can be downloaded from Download 64 bit version comes from Microsoft Exchange Server 2007 CDOEXM Can be installed with Exchange System Manager for Windows Vista (Download) Important: Exchange 2007 Management Tools should be installed before Exchange System Manager. Order is important. To install Exchange 2007 Management Tools, the following must be installed: Internet Information Services 6 (IIS 6 Management Compatibility: IIS 6 Metabase Compatibility and IIS 6 Management Console are mandatory) Windows PowerShell Download To install Exchange System Manager, the following must be installed: Internet Information Services Microsoft Exchange Server MAPI Client and Collaboration Data Objects Download Windows Administration Tools Pack 32 bit version: Download 64 bit version: Download Note: Exchange 2007 Management Tools SP1 must be installed. Security Explorer cannot manage Exchange 2007 from Vista of a previous version of the tools is installed.
Windows 7 32 bit Windows 2008 server 32 bit	Not officially supported. There is no CDOEXM version. Please see Exchange System Manager for Windows Vista - Release Notes.
64bit OS: Windows XP 64 bit Windows 7 63 bit Windows Server 2003 64 bit Windows Server 2008 64 bit Windows Server 2008 R2	Not supported There is no CDOEXM version for a 64 bit operating system and Security Explorer requires CDOEXM if there is Exchange Server 2003 in Organization.

Exchange 2010

Client Type	Prerequisites
Windows XP 32 bit Windows Vista 32 bit Windows Vista 64 bit Windows Server 2003 32 bit Windows Server 2003 64 bit Windows Server 2008 32 bit Windows Server 2008 64 bit	Windows Management Framework Core 32 bit and 64 bit versions for different operating systems can be downloaded from this link.
Windows 7 32 bit Windows 7 64 bit Windows Server 2008 R2	No prerequisites are required. Windows Management Framework Core components are included in Windows 7 and Windows 2008 Server R2 operating systems.
Windows XP 64 bit	Not supported. There is no Windows Management Framework Core for Windows XP 64 bit.

Exchange 2007 – Exchange 2010 (Mixed Mode)

Client Type	Prerequisites
Windows XP 32 bit Windows Vista 32 bit Windows Vista 64 bit Windows Server 2003 32 bit Windows Server 2003 64 bit Windows Server 2008 32 bit Windows Server 2008 64 bit	Windows Management Framework Core 32 bit and 64 bit versions for different operating systems can be downloaded from this link. Exchange 2007 SP1 Management Tools 32 bit version Download 64 bit version comes from Microsoft Exchange Server 2007 To install Exchange 2007 Management Tools, the following must be installed: Internet Information Services 6 (IIS 6 Management Compatibility: IIS 6 Metabase Compatibility and IIS 6 Management Console are mandatory) .NET Framework 4.0 or higher Download Microsoft Management Console (MMC) 3.0 (only for WindowsXP and Windows Server 2003) Download Windows PowerShell Download
Windows 7 32 bit Windows 7 64 bit Windows Server 2008 R2	Exchange 2007 SP1 Management Tools 32 bit version Download 64 bit version comes from Microsoft Exchange Server 2007 To install Exchange 2007 Management Tools, the following must be installed: Internet Information Services 6 (IIS 6 Management Compatibility: IIS 6 Metabase Compatibility and IIS 6 Management Console are mandatory) .NET Framework 4.0 or higher Download Exchange 2007 SP2 Management Tools cannot be installed on Windows 7 and Windows Server 2008 R2, however Exchange 2007 SP1 Management Tools can be.
Windows XP 64 bit	Not supported. There is no Windows Management Framework Core for Windows XP 64 bit.

User Privilege Requirements

To start Security Explorer, a user must be a member of the local Administrators, otherwise errors messages display.

Permission Requirements to Manage Microsoft Exchange in Security Explorer

• 

  To connect to an Exchange Server, a user must be a domain user, have mailbox on one of the Exchange Servers, and be an Exchange Administrator.

  • To connect to an Exchange 2000/2003 Organization, a user must be a domain user, have a mailbox on one of the Exchange 2003 Servers, and have been delegated Exchange Full Administrator rights on Exchange Organization level.
  • To connect to an Exchange 2007 Organization (Mixed Mode), a user must be a domain user, have a mailbox on one of the Exchange Servers, be a member of the Exchange Organization Management group, and have impersonation rights on Exchange 2007 client access server(s) and mailbox database(s). For more details on configuring user impersonation please see this link.
  • To connect to an Exchange 2003-2007 Organization (Mixed Mode), a user must be a domain user, have a mailbox on Exchange 2007 Server, have been delegated Exchange Full Administrator rights on Exchange Organization level, be a member of the Exchange Organization Management group, and have impersonation rights on Exchange 2007 client access server(s) and mailbox database(s). For more details on configuring user impersonation please see this link.
  • To connect to an Exchange 2010 Organization, a user must be a domain user, have a mailbox on one of Exchange Servers, be a member of the Organization Management group, and have impersonation rights. For more details on configuring user impersonation please see this link.
  • To connect to an Exchange 2007?2010 Organization (Mixed Mode), a user must be a domain user, have a mailbox on Exchange 2010 Server, be a member of the Exchange Organization Administrators group, and have impersonation rights on all versions of Exchange servers. For more details on configuring user impersonation please see this link and this link.

  Only a user who is a Domain Administrator and Exchange Administrator has no restrictions for mailbox management in Security Explorer. There are possible restrictions in Security Explorer for mailbox management.

If a user uses Run As to start Security Explorer and that user does not have enough privileges and enters valid Alternative Credentials (Domain User, Exchange Administrator, Local Administrator, Has Mailbox, Has Impersonation), there are some restrictions with mailbox management in Security Explorer.

Exchange 2000/2003

Privileges for user entered in Run as window	Privileges used to connect to Exchange Server	Possible actions in Security Explorer
Domain Administrator Full Exchange Administrator	Windows Authentication	No restrictions
	Valid Alternative Credential
Domain User Full Exchange Administrator	Windows Authentication	Cannot create and delete mailboxes Cannot manage Active Directory and mailbox permissions for mailboxes (View only mode)
	Valid Alternative Credential
Domain User	Windows Authentication	Cannot connect to Exchange
	Valid Alternative Credential	Cannot create and delete mailboxes Cannot manage Active Directory permissions for mailboxes (View only mode)

Exchange 2007

Privileges for user entered in Run as window	Privileges used to connect to Exchange Server	Possible actions in Security Explorer
Domain Administrator Exchange Organization Administrator	Windows Authentication	No restrictions
	Valid Alternative Credential
Domain User Exchange Organization Administrator	Windows Authentication	Cannot create, delete and manage security and distribution groups (except dynamic distribution groups) Cannot manage Active Directory permissions for mailboxes and public folders (View only mode)
	Valid Alternative Credential
Domain User	Windows Authentication	Cannot connect to Exchange
	Valid Alternative Credential	Cannot create, delete and manage security and distribution groups (except dynamic distribution groups) Cannot manage Active Directory permissions for mailboxes and public folders (View only mode)

Exchange 2010

Privileges for user entered in Run as window	Privileges used to connect to Exchange Server	Possible actions in Security Explorer
Domain Administrator Exchange Organization Administrator	Windows Authentication	No restrictions
	Valid Alternative Credential
Domain User Exchange Organization Administrator	Windows Authentication	Cannot create, delete and manage security and distribution groups (except dynamic distribution groups) Cannot manage Active Directory permissions for mailboxes and public folders (View only mode)
	Valid Alternative Credential
Domain User	Windows Authentication	Cannot connect to Exchange
	Valid Alternative Credential	Cannot create, delete and manage security and distribution groups (except dynamic distribution groups) Cannot create mail-enabled public folders Cannot manage Active Directory permissions for mailboxes and public folders (View only mode)

Mixed mode (Exchange 2003 – 2007)

Privileges for user entered in Run as window	Privileges used to connect to Exchange Server	Possible actions in Security Explorer
Domain Administrator Exchange Organization Administrator (2007)	Windows Authentication	No restrictions
	Valid Alternative Credential
Domain User Exchange Organization Administrator (2007)	Windows Authentication	Cannot create, delete and manage security and distribution groups (except dynamic distribution groups) Cannot manage Active Directory permissions for mailboxes (View only mode)
	Valid Alternative Credential
Domain User	Windows Authentication	Cannot connect to Exchange
	Valid Alternative Credential	Cannot create, delete and manage security and distribution groups (except dynamic distribution groups) Cannot manage Active Directory permissions for mailboxes (View only mode)

Mixed mode (Exchange 2007 – 2010)

Privileges for user entered in Run as window	Privileges used to connect to Exchange Server	Possible actions in Security Explorer
Domain Administrator Exchange Organization Administrator (2007)	Windows Authentication	No restrictions
	Valid Alternative Credential
Domain User Exchange Organization Administrator (2007)	Windows Authentication	Cannot create, delete and manage security and distribution groups (except dynamic distribution groups) Cannot manage Active Directory permissions for mailboxes and public folders (View only mode)
	Valid Alternative Credential
Domain User	Windows Authentication	Cannot connect to Exchange
	Valid Alternative Credential	Cannot create, delete and manage security and distribution groups (except dynamic distribution groups) Cannot manage Active Directory permissions for mailboxes and public folders (View only mode)

Before You Begin

Download the latest version of Security Explorer from the ScriptLogic Web site: www.scriptlogic.com

Install Microsoft .NET Framework 4.0 or higher

If you do not have Microsoft .NET Framework 4.0 or higher on the computer where you want to install Security Explorer, the Security Explorer installation process provides an opportunity to download and install Microsoft .NET Framework 4.0 or higher.

You must restart the install process once Microsoft .NET Framework 4.0 or higher is installed, so to avoid this you might want to install it before you begin the installation of Security Explorer.