Archive Manager 5.9.3

We recommend that you create the Archive Manager Exchange Admin group and grant permissions to the group; however, you can instead just grant the permissions to a user. The advantage to adding the permissions to a group is that you don’t have to modify Exchange if you want to change the user; you can just add a user to or remove a user from the group.

Permissions can be granted at various levels within Exchange: at a site level, across multiple servers, on an individual server, or for a single mailbox.

To grant permissions in Exchange 2019, 2016, 2013 or 2010:

Add <your Archive Manager user or group> to the "View-Only Organization Management" role group.

Run this PowerShell command:

get-mailboxdatabase | add-adpermission -extendedright receive-as -user <your Archive Manager user or group>.

NOTE: These permission changes may take quite some time to propagate. To speed the process, it may be worth restarting the Exchange Information Store service or rebooting the Exchange server.

NOTE: When Exchange 2019, 2016 or 2013 works with Outlook 2019 or Outlook 2013 SP1 (32-bit, with KB3114941 and KB4022169 installed), and MAPI over HTTP is enabled on both ends,

•

The ESM service account must have full access permissions to the exported mailboxes. To grant full access, run the following command at the Exchange PowerShell command prompt:

Add-MailboxPermission -Identity <mailboxIdentity> -User <your Archive Manager user or group> -AccessRights FullAccess -InheritanceType All -AutoMapping $false

To test your changes, go to a PC that has Microsoft Outlook installed and sign in as the user or a user in the group to which you granted permission. Try to add the new mailboxes that have been created to that user's profile. If the user is able to access those mailboxes, the security has been configured successfully.

Granting permissions to Lync Admin group

Microsoft Exchange security needs to be configured in order to run the Archive Manager Exchange Store Manager Service and to export email from the current Exchange store into Archive Manager.

To grant permissions in Skype for Business Server 2019, 2015, 2013 or 2010, add the Service Account to the following groups (default account name is ArchiveMgr_Service):

•

CSAdministrator

•

RTCHSUniversalServices

•

RTCComponentUniversalServices

•

RTCUniversalServerAdmins

•

RTCUniversalConfigReplicator

Configuring the Exchange server for journaling

Journaling is not required for store management. If you intend to install Archive Manager with journaling, to capture messages to meet a legal standard of compliance, you can enable envelope journaling with Archive Manager. In that case, you must first turn on envelope journaling and then enable journaling for each mailbox store you want to journal.

Configuring Exchange 2019, 2016 or 2013

To configure Exchange 2019, 2016 or 2013:

Open the Exchange Management Shell.

Add your Archive Manager Service user account (ArchiveMgr_Service) to the "View-Only Organization Management" security role.

Sample syntax:

>Add-RoleGroupMember "View-Only Organization Management" -Member <youruseraccount>

To create a Journal Mailbox in Exchange 2019, 2016 or 2013:

Create a new mailbox for Archive Manager on the Exchange Server. For example, name the mailbox ArchiveMgr_Journal.

Create a user mailbox object in the Microsoft Exchange Admin Center recipients page.

To implement Journaling Rules for Exchange 2019, 2016 or 2013:

Open the Exchange Admin Center to begin setting up journaling rules.

In the compliance management page, select the Journal Rules tab.

In the Actions pane, select New.

In the Send Journal reports to email address box, enter the name of the mailbox you created for journaling on the Exchange Server for Archive Manager. This refers to the ArchiveMgr_Journal mailbox created in the Create a Journal Mailbox section.

In the Rule name box, enter a name for the journal rule you are about to create.

In *If the message is sent to or received from, select [Apply to all messages]

In *Journal the following messages …, select All Messages.

Click Save.

In the warning “Do you want this rule to apply to all future messages? “, click Yes.

To configure the Hub Transport for Exchange 2019, 2016 or 2013:

To allow the Archive Manager Website to send email using SMTP through Exchange 2019, 2016 or 2013, you must configure the Hub Transport Receive Connector to accept anonymous connections.

Use the Exchange Admin Center Console (ECP) to perform this procedure:

In the Mail Flow Configuration page, select the Receive Connectors tab.

Double-click the default connector for the Exchange server, for which the role must be HubTransport.

Click the Security tab, and locate the Permission Groups area.

Check the Anonymous users check box.