Chat now with support
Chat with Support

MessageStats 7.8.1 - Quick Start Guide

About This Guide Requirements for Installing the MessageStats Components Prerequisites for Gathering from Microsoft Exchange Planning a MessageStats Installation Appendix A: IIS Configuration Issues

Miscellaneous Rights

The following rights and permissions are also required to use specific MessageStats functionality:

 
Table 9. Service Account Required Permissions.
Action
Rights and Permissions Required

Specify User Context in MessageStats Task Properties

The service account and/or the account used to run the MessageStats console requires the right “Act as a part of the operating system” to impersonate other security contexts.

Additionally, any user account specified on the Server Properties tab must be a member of the Administrators local group on the MessageStats Server.

Assigning permissions

You assign this permission to the Service account through the MessageStats Installer. Windows does not immediately enable this right.

If you are logged on as the Service account when the privileges are granted, you must log off and on for the changes to take effect.

 

Prerequisites for Gathering from Microsoft Exchange

Prerequisites for Gathering from Microsoft Exchange

Before MessageStats can collect and report information from your Microsoft Exchange network, You must ensure that certain prerequisites are met. These are described in the following sections.

Sharing the tracking log folder
Enabling message tracking
Required rights on Exchange servers
About the Exchange mailbox used for connection
Additional Exchange rights required for specialized gathering tasks
Configuring Lync to include presence in mailbox reports

Sharing the tracking log folder

If you are reporting against on-premise Exchange, you must have at least one server running Exchange with tracking logs enabled and shared. Exchange does not share the directory that contains the tracking logs by default. You must manually share the tracking log folder.

The tracking log folder is located as follows for the following versions of Exchange:

•
Exchange 2010
C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking
•
Exchange 2013 / 2016 / 2019
C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\MessageTracking
Enabling message tracking

Message tracking must be enabled for the Exchange servers:

•
For instructions about how to enable message tracking on an Exchange 2010 server, see the following article: http://technet.microsoft.com/en-us/library/aa997984(v=exchg.141).aspx.
•
For instructions about how to enable message tracking on an Exchange 2013 server, see the following article: http://technet.microsoft.com/en-us/library/aa997984.aspx.
•
For instructions about how to enable message tracking on an Exchange 2016 or Exchange 2019 server, see the following article: https://technet.microsoft.com/en-us/library/aa997984(v=exchg.160).aspx

Required rights on Exchange servers

The account used to run the MessageStats gathering tasks (task credentials) must have the following rights and permissions on the Exchange servers from which you gather data.

 
Table 1. Credentials required to gather from different Exchange environments.
Requirements for account credentials to gather from Exchange

Required to gather from Exchange

•
Membership in the following security group:
Organization Management
- OR -
If you do not want the task credentials to be a member of the Exchange Organization Management group, add the task credentials to the following security groups instead:
View-Only Organization Management
Public Folder Management
In some environments, you can encounter gathering errors unless you ensure that one of the security groups has access to the Microsoft Exchange System Objects container in Active Directory for each domain. For instructions, see Granting Access to the Microsoft Exchange System Objects container .
•
Membership in the local Administrators group on each Exchange server to gather Exchange database information.
If you do not want to add the credentials to the local Administrators group, provide the account certain WMI permissions instead. For details, see Running the Exchange Databases Gathering for Exchange 2010 Without Being a Local Administrator .
•
For Exchange 2010, the Exchange server to which you connect to enumerate the organization must have the Client Access (CAS) role. However, MessageStats gathers tracking logs only from Hub and Edge Transport servers. The tracking logs on CAS servers do not include all the information that is needed for reports.
•
To create the connection to the Exchange CAS (2010) or Mailbox server (2013), MessageStats requires a mailbox to which the account used to run tasks has full access rights. To grant an account full rights on the Exchange 2010 or 2013 mailbox, see Granting Full Rights to an Exchange 2010 or 2013 Mailbox .
•
Read rights to the log files in the tracking log share on the Exchange server.
•
Read rights to the file system directory (local, NAS, or SAN) that contains the Exchange mailbox and public folder databases.
•
The account used to run a Public Folder gathering task must be a member of the Public Folder Management security group.
•
For Exchange 2013, the CAS server that is used for connection must be configured to include NTLM among the IIS authentication methods allowed. For example, you could allow NTLM, Basic, and Negotiate by entering the following PowerShell command:
Get-OutlookAnywhere | Set-OutlookAnywhere -IISAuthenticationMethods basic,ntlm,negotiate
•
To run the Server Uptime gathering to populate the Server Uptime report, task credentials must belong to the Performance Monitor Users group. You must also grant the task credentials access to certain registry keys. For instructions, see Granting Access for Server Uptime Information Without Being a Local Administrator .

Some specialized gathering tasks, such as the Content and Attachment gathering tasks, require additional rights and permissions. For more information about these rights, see Additional Exchange rights required for specialized gathering tasks .

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating