Remove "everyone" permissions in bulk (web client)

<< Display table of contents >>

Navigation:  Start > Using 8MAN - The Services > User Provisioning > File server > Administrator >

Remove "everyone" permissions in bulk (web client)

Background / Value

If "Everyone accounts" are used for the assignment of access rights, (almost) everyone has access to the connected resources. The consequence is an excessive assignment of access rights and a high probability for unauthorized access. These go against the principle of least privilege and should therefore not be used. Before deleting permissions you should assign specific groups to the appropriate resources.

 

"Everyone accounts" are:

Everyone

Authenticated Users

Domain-Users

 

Additional Services

Report: Identify usage of "Everyone" (rich client)

Report: Identify usage of "Authenticated Users" (rich client)

 

Step by step process

E049-01 EN Jeder Berechtigungen im Bulk entfernen

 

1.Select "New analyze session".

2.Click "Globally accessible directories".




E049-04 EN Jeder Berechtigungen im Bulk entfernen

1.Select groups.
You can add one additional group. This is very useful for "catch-all" groups, e.g. "mycompany-complete".

2.Select the file servers.

3.Start the calculation.




E049-05 EN Jeder Berechtigungen im Bulk entfernen

 

1.8MAN lists all globally accessible directories.

2.Use sorting, filtering, grouping and column selection to locate the desired rows.

3.Select the desired entries.

4.Click "Remove ACE".




E049-06 EN Jeder Berechtigungen im Bulk entfernen

 

1.Leave a comment.

2.Click "Execute Action".

 

The job will be transferred to the 8MAN server and executed there. You can find the status in "Jobs overview".