Player for the Quest TV gallery.
Create a new MessageStats service account with the following rights and permissions.
Note: If you're only updating the existing MessageStats Service Account password, skip this section and proceed to the section below, "Changing the Account and Password in MessageStats".
Permissions Required on the MessageStats server and the SQL Server that hosts the MessageStats database.
Security Groups are needed to assign rights to the database. Either Local or Global Groups can be used. They should be named MessageStats Admin and MessageStats Web (These Groups should already be in place). If the MessageStats database resides on a SQL cluster the Groups will have to be created in Active Directory.
- Add the new MessageStats service account to the local Administrators group on the MessageStats server
- Make sure the MessageStats service account is added to the MessageStats Admin group on Both the MessageStats server and the SQL Server.
- the ‘Everyone’ group is typically added to the MessageStats Web group
Permission Required for Microsoft Exchange Servers
For Exchange 2000 and 2003 servers:
- View Only Administrator rights delegated at the Organization level.
- Read rights for the administrative shares on the Exchange server.
- Read rights to the log files in the tracking log share on the Exchange server.
- Read rights to the file system directory (local, NAS, or SAN) containing all Exchange mailbox and public stores in all storage groups.
For Exchange 2007 Servers:
- Membership in the Exchange View-Only Administrators And the Exchange Recipient Administrators OR just the Exchange Organization Administrators group.(This provides the required access rights to the system mailbox on one of the gathering servers to collect mailbox and public folder information.)
Note: For instructions about how to configure cross-forest administration of an Exchange 2007 organization, see the following article:http://technet.microsoft.com/en-us/bb232078.aspx - Be a member of the local Administrators group on each Exchange server for access to administrative shares.
- Read rights to the log files in the tracking log share on the Exchange server. For instructions about how to enable message tracking on an Exchange 2007 server, see the following article: http://technet.microsoft.com/en-us/library/aa997984.aspx.
- For Exchange 2007, the Exchange server to which you connect to enumerate the organization must have the Mailbox role. However, MessageStats gathers tracking logs only from Hub and Edge Transport servers. The tracking logs on Mailbox servers do not include all the information that is needed for reports.
- Exchange 2007 is the first version of Exchange that does not share the directory that contains the tracking logs by default. You must manually share the tracking log folder for Exchange 2007 servers.
- Read rights to the file system directory (local, NAS, or SAN) that contains the Exchange private and public information stores in all storage groups.
For Exchange 2010 Servers:
- Membership in the Exchange Organization Management security group.
- Be a member of the local Administrators group on each Exchange server for access to administrative shares.
- The account used to run a Public Folder gathering task must be a member of the Public Folder Management security group.
- For Exchange 2010, the Exchange server to which you connect to enumerate the organization must have the Client Access (CAS) role. However, MessageStats gathers tracking logs only from Hub and Edge Transport servers. The tracking logs on CAS servers do not include all the information that is needed for reports.
- To create the connection to the Exchange Client Access Server, MessageStats also requires a mailbox to which the account used to run tasks has full access rights.
- Read rights to the log files in the tracking log share on the Exchange server. For instructions about how to enable message tracking on an Exchange 2010 server, see the following article: http://technet.microsoft.com/en-us/library/aa997984.aspx.
- Exchange 2010 does not share the directory that contains the tracking logs by default. You must manually share the tracking log folder for Exchange 2010 servers.
- Read rights to the file system directory (local, NAS, or SAN) that contains the Exchange private and public information stores in all storage groups
Changing the Account and Password in MessageStats.
1. Close the MessageStats console
2. Open Services.msc and scroll down and Stop the Quest MessageStats Scheduler Service
3. Right-click the MessageStats Scheduler Service and click properties.
4. Select the Log on tab
5. Type in the new account and password or update the password to the existing account.
6. Click OK
7. Click Start | Run and type dcomcnfg
8. Expand Component Services | Computers | My Computer | DCOM Config
9. Sroll down to Quest MessageStats Scheduler Service
10. Right-click and Select Properties
11. Click the Identity Tab
12. Type in the new account and password, or update the password to the existing account.
13. Click OK
14. From the left pane locate Quest MessageStats Task Processor
15. Right-click and Select Properties
16. Click the Identity Tab
17. Type in the new account and password, or update the password to the existing account.
18. Click OK
19. Close DCOM Config
20. Start the MessageStats Scheduler Service
21. Open the MessageStats Console
22. Right-click the Tasks node, and Select Properties
23. Click the Task Credentials tab
24. Type in the new account and password, or update the password to the existing account.
25. Run the Gathering Tasks.
**Note: There is a DCOM credentials tab on the properties of your task execution servers. Do not set the credentials on DCOM Credentials tab as it could cause issues with the access contol list for the "Quest MessageStats Scheduler Service" and "Quest MessageStats Task Processor" DCOM Objects.
If you did make the change on the DCOM Credentials tab to correct the ACL issue follow this article:
https://support.quest.com/messagestats/kb/109108
