Archive Manager 5.9.3 - Installation and Configuration Guide for Exchange


	NOTE: When using enhanced security on any server-based operating system, the Archive Manager website must be added to the list of trusted sites to work correctly.

•

Microsoft Edge

•

Firefox (latest version) running on Windows or Macintosh

•

Chrome (latest version) running on Windows or Macintosh

•

Safari running on Macintosh or mobile devices

•

Android browsers

Archive Manager rights and permissions

•

Administrator Account: The account you are logged in with when you run the Archive Manager Install program.

•

The user who runs the installer must be an administrator over the local computer, as well as on the SQL Server and the Exchange Server.

•

The account you specify during the installation must have the same permissions.

•

Service Account (default account name is ArchiveMgr_Service): Specified in the configuration Console. Used by the Directory Connector, Alert Service, Full-Text Index, Full-Text Search and Message Retention Services. If no Journal dataloader is created at install time, then this account will be used for the Data Load Service too.

•

Account is granted full access to the Archive Manager and AfterMail_TEMP databases by the installer.

•

Requires read access to AD, and to the Exchange Organization so it can determine Storage Group information.

•

Must be in the Users group on the local machine, and a member of the local IIS_WPG group on the Web Servers. This is typically done by the installer.

•

Is a member of ArchiveManagerServiceUsers group.

•

You may want to add the service account to the Domain Administrators group. This will ensure that the Active Directory Connector has access to deleted user accounts for the purpose of disabling the accounts in Archive Manager. Or, Microsoft provides a program that grants Administrator rights on a per user basis. The utility is available at http://support.microsoft.com/kb/892806.

•

Journal Account (default account name is ArchiveMgr_Journal): Specified after the Database Install/Upgrade in the installer. Used by the Dataloader. This is configured for use by the DataLoader only if a Journal DataLoader is configured. If Journaling is not present, then the ArchiveMgr_Service user is used.

•

Account requires "Receive-As" rights to any account nominated as a Journal Mailbox Account. This user must also be an Exchange View-Only Administrator.

•

Should be a Domain User; does not need to be an Administrator.

•

Is a member of ArchiveManagerServiceUsers group.

•

ESM Account (default account name is ArchiveMgr_ESM): Specified after the Database Install/Upgrade in the installer. Used by the Exchange Store Manager Service.

•

Account needs access to all mailboxes; however this permission is granted to the group Archive Manager Exchange Admins, rather than to the account itself.

•

Should be a domain user; does not need to be an Administrator.

•

Is a member of ArchiveManagerServiceUsers group.

•

ArchiveManagerServiceUsers Group: A Domain Group containing the Service, Journal and ESM accounts.

•

Group is used by installer to apply permissions to file-system locations used by Archive Manager.

•

Archive Manager Exchange Admins Group: A Domain Group containing the ESM Account. Note that this group is not created by the installer, so must be created manually. It is recommended that this account be created before Archive Manager is installed.

•

Group must contain the ArchiveMgr_Service and ArchiveMgr_ESM users. If journaling is enabled on the Exchange Server and a MAPI DataLoader is required, then the ArchiveMgr_Journal user must also be added to this group. This group must be granted Exchange "Receive-As" permission on all mailboxes. Should also be a member of the Exchange View-Only Administrators group.

•

If a new Exchange mailbox store is added after Archive Manager is installed, the permissions for this group must be set again. Otherwise, an error may occur when the ESM processes mailboxes in the new mailbox store.