Chat now with support
Chat with Support

MessageStats 7.8.1 - Quick Start Guide

About This Guide Requirements for Installing the MessageStats Components Prerequisites for Gathering from Microsoft Exchange Planning a MessageStats Installation Appendix A: IIS Configuration Issues

Additional Exchange rights required for specialized gathering tasks

The following rights and permissions are also required to run specific gathering tasks that collect information for specific types of reports. The gathering tasks are used to populate reports such as the Public Folder reports and the Content Analysis reports.

See the following table for details:

 
Table 2. Additional rights required for specific gathering tasks.
Gathering Task
Rights and Permissions Required

Exchange Public Folders Gathering

Allows MessageStats to gather from Exchange public folders

For Exchange 2010 and 2013, the account used to run the public folder gathering tasks must be a member of the Public Folder Management security group.

When gathering against Exchange 2013 public folders, the DCOM credentials of MessageStats Task Processor must trust the SSL certificate for the proxy (CAS) server.

Exchange Mailbox Content and Attachment Gathering

Allows MessageStats to gather the content and attachment information from mailboxes.

For MessageStats to collect mailbox content and attachment information, the task credentials specified in each Mailbox Content and Attachment gathering task must have sufficient rights.

By default, the rights to access mailbox content are denied. Additional access rights must be added to each Active Directory object with an associated mailbox from which you want to collect content and attachment information.

You can create Mailbox Content and Attachment gatherings for Exchange 2010, 2013, 2016, and 2019.:

•
For Exchange 2010, the account that is used to run the task must have Full Mailbox Access to the specific mailbox or to all mailboxes from which you want to gather information. For details, see Content and Attachment Gatherings— Granting Mailbox Access for Exchange 2010 .
•
For Exchange 2013, Exchange 2016, or Exchange 2019, the account that is used to run the task must have Exchange impersonation rights for the target mailboxes. For details, see Content and Attachment Gatherings— Granting Impersonation Rights for Exchange 2013 and later .

Exchange Public Folder Content and Attachment Gathering

Allows MessageStats to gather the content and attachment information from public folders.

The Public Folder Content and Attachment gathering task is supported only for Exchange 2010.

•
The account that is used to run the task must have Full Mailbox Access to the specific mailbox or to all mailboxes from which you want to gather information. For details, see Content and Attachment Gatherings— Granting Mailbox Access for Exchange 2010 .
•
The account also requires access to the Exchange 2010 public folders.

Content and Attachment Gatherings—Granting Mailbox Access for Exchange 2010

Content and Attachment Gatherings—
Granting Mailbox Access for Exchange 2010

In Exchange 2010, when permissions are assigned to the server object, the permissions cannot be propagated down to the mailbox databases since the databases are not located under the server object in AD. Use the following steps to grant Full Mailbox Access to mailboxes on the Exchange 2010 servers using PowerShell cmdlets.

To grant Full Mailbox Access to a specific mailbox
1
Open the Exchange Management Shell.
2
Run the Add-MailboxPermission command in Windows PowerShell.
3
For example, if the mailbox is called mailboxName and the account is called userName, the command would be:
Add-MailboxPermission -id:mailboxName -User:userName -AccessRights FullAccess
To grant Full Mailbox Access to a specific mailbox database
1
Open the Exchange Management Shell.
2
Run the Add-MailboxPermission command in Windows PowerShell.
3
For example, if the mailbox database is called DatabaseName and the account is called userName, the command would be:
Get-MailboxDatabase Databasename | Add-ADPermission -User "userName" -ExtendedRights Send-As, Receive-As
To grant Full Mailbox Access to the entire server
1
Open the Exchange Management Shell.
2
Use the Add-ADPermission command in Windows PowerShell to grant the Send-As and Receive-As permissions.
3
For example, if the server is called MyServer and the account is called UserA, the commands are as follows:
Get-MailboxServer Myserver | Get-MailboxDatabase | Add-ADPermission -User "UserA" -ExtendedRights Send-As, Receive-As

Content and Attachment Gatherings—Granting Impersonation Rights for Exchange 2013 and later

Content and Attachment Gatherings—
Granting Impersonation Rights for Exchange 2013 and later

The Mailbox Contents and Attachment gathering task uses Exchange Web Services (EWS) to connect to Exchange 2013, Exchange 2016, and Exchange 2019 mailboxes. The credentials that are used for the gathering task must have Exchange Impersonation permissions to the target mailboxes.

Configuring impersonation for all users

You can configure Exchange impersonation for all users in an organization.

To configure credentials to impersonate all users in an organization
1
Open the Exchange Management Shell.
2
Run the New-ManagementRoleAssignment cmdlet to add the permission to impersonate to the specified user.
The following example shows how to configure Exchange Impersonation to enable a service account to impersonate all other users in an organization.
New-ManagementRoleAssignment –Name:impersonationAssignmentName –Role:ApplicationImpersonation –User:serviceAccount
Configuring impersonation for specific users or groups

You can configure Exchange impersonation for specific users or groups.

To configure credentials to impersonate specific users or groups of users
1
Open the Exchange Management Shell.
2
Run the New-ManagementScope cmdlet to create a scope to which the impersonation role can be assigned. If an existing scope exists, you can skip this step.
The following example shows how to create a management scope for a specific group.
New-ManagementScope –Name:scopeName –RecipientRestrictionFilter:recipientFilter
3
Run the New-ManagementRoleAssignment cmdlet to add the permission to impersonate the members of the specified scope.
The following example shows how to configure Exchange Impersonation to enable a service account to impersonate all users in a scope.
New-ManagementRoleAssignment –Name:impersonationAssignmentName –Role:ApplicationImpersonation –User:serviceAccount –CustomRecipientWriteScope:scopeName

Configuring Lync to include presence in mailbox reports

The Microsoft Exchange reports that contain mailbox information can include the user presence status.

Report users can see the presence status icons and can access Communicator functionality in the mailbox-specific reports if they have Microsoft Outlook and Microsoft Office Communicator installed and running on the computer on which they are viewing the report.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating