Chat now with support
Chat with Support

MessageStats 7.8.1 - Quick Start Guide

About This Guide Requirements for Installing the MessageStats Components Prerequisites for Gathering from Microsoft Exchange Planning a MessageStats Installation Appendix A: IIS Configuration Issues

Granting Access to the Microsoft Exchange System Objects container

One of the security groups to which the task credentials belong must have access to the Microsoft Exchange System Objects container in Active Directory. Use the following procedure to ensure this access. You must perform the procedure for each domain from which information is gathered.

To grant access to the Microsoft Exchange System Objects container
1
Open Active Directory Users and Computers.
2
In the View menu, ensure that Enhanced Features is selected.
3
Locate the Microsoft Exchange System Objects container under the domain from which MessageStats will be gathering
4
Right-click and select Properties.
5
Select the Security tab.
6
Search the Group or user names list.
7
Ensure that at least one of the security groups to which you’ve added the MessageStats account has Read access.

Running the Exchange Databases Gathering for Exchange 2010 Without Being a Local Administrator

Running the Exchange Databases Gathering for Exchange 2010 Without Being a Local Administrator

The Exchange 2010 Databases gathering uses WMI to gather the database volume information and requires access to the root\CIMV2 WMI namespace. To access the root\CIMV2 WMI namespace without being a member of the local Administrator group, the gathering credentials need the following permissions:

•
The account must be a member of the local DCOM group (Distributed COM Users). Membership in this group allows DCOM access that is required by remote WMI.
•
The account must have the Remote Enabled and Enable Account WMI permissions set for the root\CIMV2 namespace.
To enable the required WMI permissions for the root\CIMV2 WMI namespace
1
Open Computer Management.
2
Under the Services and Applications node, select WMI Control.
3
Right-click and select Properties.
4
Select the Security tab and select CIMV2.
5
Click the Security button at the bottom.
6
In the Group or user names list, select the credentials that are used to run the gathering task. (This might be the MessageStats service account).
7
In the Permissions pane, select the Allow check boxes for Enable Account and Remote Enable.
8
Click OK.

Granting Access for Server Uptime Information Without Being a Local Administrator

Granting Access for Server Uptime Information Without Being a Local Administrator

To give the task credentials the ability to collect performance monitoring information without being an administrator on the Exchange 2010 server, the task credentials must be a member of the Performance Monitor Users group. You must also grant the credentials read-access permissions on specific registry keys.

To grant read-access to the Perfmon-related registry keys
1
On the Exchange 2010 server, open the Registry Editor. Click Start and select Run.
2
Enter regedit and click OK.
3
Navigate to the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
4
Right-click on winreg and select Permissions.
5
Add the task credentials to which you want to grant Read access.
6
Exit the Registry Editor and restart Windows.

About the Exchange mailbox used for connection

When you create a connection to an organization that contains either Exchange 2010 or 2013 mailbox servers, you must specify a mailbox that will be used for MAPI logon to collect mailbox and public folder information. The account that will be used to run tasks (task credentials) must have full access rights to this mailbox.

Since MAPI looks up mailboxes using the global address book, ensure that the mailbox does not have the Hide From Exchange Address Lists option selected in its properties.

To verify that the mailbox is available through Exchange address lists
1
Open the Properties dialog box for the mailbox-enabled user account by double-clicking the user name in the Exchange Management Console.
2
Select the General tab.
3
Ensure that the Hide From Exchange Address Lists check box is clear and click OK.
Granting Full Rights to an Exchange 2010 or 2013 Mailbox

The user account that will be used to run mailbox gathering tasks must have access to a specific mailbox. To grant permissions to the account, and to specify the mailbox to which permissions are granted, you can run the following PowerShell commands. (A PowerShell script that contains these commands can be found in the Scripts folder in the MessageStats installation directory.)

Run the commands in the Exchange 2010 management shell. Replace the mailboxName and the userName in following scripts to grant full rights to the specified user account.

Add-ADPermission -id:mailboxName -User:userName -AccessRights:extendedright
Add-MailboxPermission -id:mailboxName -User:userName -AccessRights:FullAccess

You may have to wait a few minutes or manually force an AD replication.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating