Chat now with support
Chat with Support

Metalogix Archive Manager for Exchange 8.1.1 - Advanced Installation Guide

Introduction Getting started Pre-installation tasks Installing Archive Manager for Exchange Post-installation tasks Addendum

Installation of the .NET Framework

Since Archive Manager is built on .NET technology, both .NET Framework 3.5 and 4.5 is required.

You can download .NET Framework 3.5 from the following link:

http://www.microsoft.com/en-us/download/details.aspx?id=21

You can download .NET Framework 4.5 from the following link:

http://www.microsoft.com/en-us/download/details.aspx?id=30653

In case of Windows Server 2008 R2 SP1 it is necessary to download and install only .NET Framework 4.5. The .NET Framework 3.5 has already been added as a feature.

In case of Windows Server 2012/2016/2019 both .NET versions are added via Server Manager.

info

NOTE: In case of Windows Server 2008 R2 SP1 run the following command:

C:\Windows\Microsoft.NET\Framework64\v4.0.30319  aspnet_regiis.exe -i

 

Assigning administrator rights to the super-user over the Archive Manager Server

We have already created a super-user domain account (see “Creating a super-user account”). Now you need to assign to it local administrator rights on your Archive Manager server computer. In case that the Archive Manager Server will NOT be running on the Domain Controller, follow the steps described in a). In case that Archive Manager Server will be running on the Domain Controller, follow the steps described in b).

a) Assigning local administrator rights to the super-user (not on the Domain Controller)

Assume that Archive Manager will not be running on the Domain Controller. Then you need to assign local administrator rights to the super-user on the Archive Manager Server computer.

To assign local administrator rights to the super-user (srv_exchange) on the Archive Manager server computer:

1.On the intended Archive Manager Server computer open Computer Management (e.g. run compmgmt.msc).

2.Double-click the Local Users and Groups folder to expand it.

3.Double-click the Groups folder.

4.In the right pane right-click Administrators and, in the context menu, select Properties. The Administrators Properties window opens.

5.Click the Add button.

6.Enter srv_exchange in the text box and click OK.

7.Confirm by clicking Apply and OK.

NOTE: This super-user account must not be a domain administrator.

b) Assigning local administrator rights to the super-user (on the Domain Controller)

Assume that the Archive Manager will be running on the Domain Controller. Then to assign it the local administrator rights:

1.On the Archive Manager Server open the Active Directory Users and Computers (click Start \Administrative tools \Active Directory Users and Computers).

2.Locate the super-user account (srv_exchange) in your Active Directory. You can search for it using the Find icon on the toolbar.

3.Double-click srv_exchange to open its Properties.

4.In the srv_exchange Properties window click the Member of tab.

5.Click the Add button to open the Select groups window.

6.In the Select groups window make sure to insert your domain name in the From this Location box.

7.In the Enter the object name to select text box write Administrators and click the Check Names button.

8.Click OK. Click Apply and then OK.

Assigning rights to the super-user over the Configuration Container

We have to grant the super-user Read permission over the organization’s Configuration container recursively. There are more ways to grant this permission, one way is to use ADSI Editor (which is part of the Windows Support Tools). We will demonstrate how to grant the necessary permissions using ADSI Editor.

NOTE: These permissions are required to read the list of Exchange servers and Information Stores of the organization.

If you run MMC on a domain controller you will find the ADSI Edit tool. On other machines (like MS Exchange or others) this tool may not be present in the MMC snap in console. In that case the ADSIEDIT.MSC tool can be freely downloaded from the following link where you can find a good knowledgebase about this tool as well:

http://www.computerperformance.co.uk/w2k3/utilities/adsi_edit.htm#Download_ADSI_Edit

After downloading and saving it e.g. on your Exchange Server, it is necessary to register the adsiedit.dll via the regsv32 (%systemroot%\System32\regsv32 adsiedit.dll), otherwise it will not be possible to run this tool, even if it is copied under windows\system32.

To configure super-user rights over Configuration Container:

1.Open the “MMC” by clicking Start and typing MMC.

2.Console dialog opens. To add ADSI (Active Directory Services Interface) Edit, click File / AddRemove Snap-in.

b-snap in

3.In the pop-up window select ADSI Edit in the pop-up Snap-in list and click Add again. Then click OK.

c-add

4.The ASDI Edit will be added to the Console root. Right-click it and select Connect to to define the connection settings.

d-connect to

5.New dialog pops-up. In the Select a well known Naming Context dropdown box select Configuration and click OK.

e-configuration

6.Now you will set the super-user permissions over Configuration container. Back in the Console window, unfold the ADSI Edit down to the CN=Configuration container. Right-click the CN=Configuration node and select Properties.

f-properties

7.On the Security tab of the Properties window, click Add to add the super-user.

g-security

8.When the super-user is added, locate it in the list view and click Advanced.

h-advanced

9.Locate the super-user. You can see that the permissions do not apply to child objects. To apply the permissions to child objects as well, click Edit.

i-edit

10. In the Apply onto dropdown box select “This object and all descendant objects”.

j-permissions

11.Click OK, then Apply.

Granting the super-user permissions in MS Exchange Server

Archive Manager for Exchange requires that the super-user be granted some administrative permissions and access to the mailboxes which will be archived. In Exchange 2013/2016/2019, the super-user must be assigned the “View-Only Organization Management” role. This ensures that the mailboxes and public folders can be accessed using the required administrative privileges. Further, the access to the mailboxes is granted by setting the “Receive As” permission to the super-user. This can be achieved on mailbox level or on database level (Exchange Information Store). In this document we demonstrate the right assignment on the database level.

Exchange Server 2013/2016/2019 uses client throttling policies to track the bandwidth that each user consumes and enforce bandwidth limits as necessary. Archive Manager needs more resources than the allowed limit, therefore the throttling policy must be changed for the super-user.

Summary of tasks:

I.Assign super-user (srv_exchange)  the “View-Only Organization Management” role

II.Assign super-user (srv_exchange) the “Public Folder Management” role

III.Grant super-user (srv_exchange) permissions to all mailboxes

IV.Change client throttling for super-user (srv_exchange)

Summary of cmdlets which carry out the above mentioned tasks:

Add-RoleGroupMember –Identity "View-Only Organization Management" -Member "srv_exchange"

 

Add-RoleGroupMember –Identity "Public Folder Management" -Member "srv_exchange"

 

Get-MailboxDatabase | Add-ADPermission -User "srv_exchange" -AccessRights ExtendedRight –ExtendedRights Receive-As, ms-Exch-Store-Admin -InheritanceType 'All'

 

New-ThrottlingPolicy MAM4Exchange

 

Set-ThrottlingPolicy MAM4Exchange -EwsCutoffBalance Unlimited -EwsMaxBurst Unlimited -EwsMaxConcurrency Unlimited -EwsMaxSubscriptions Unlimited -EwsRechargeRate Unlimited -RcaMaxConcurrency Unlimited -RcaCutoffBalance Unlimited -RcaMaxBurst Unlimited -RcaRechargeRate Unlimited -CpaMaxConcurrency Unlimited -CpaCutoffBalance Unlimited -CpaMaxBurst Unlimited -CpaRechargeRate Unlimited

 

Set-Mailbox "srv_exchange" -ThrottlingPolicy MAM4Exchange

Find the detailed description of the process in the following lines.

Add super-user (srv_exchange) the “View-Only Organization Management” role:

1.Run the Exchange Management Shell.

Run the following cmdlet in PowerShell to assign super-user (srv_exchange) to the View-Only Organization Management role:

Add-RoleGroupMember –Identity "View-Only Organization Management" -Member "srv_exchange"

Snap1-MS server

2.Run the cmdlet to assign super-user (srv_exchange) to the Public Folder Management role:

Add-RoleGroupMember –Identity "Public Folder Management" -Member "srv_exchange"

3.Then run the cmdlet to grant srv_exchange permissions to all mailboxes:

Get-MailboxDatabase | Add-ADPermission -User "srv_exchange" -AccessRights ExtendedRight –ExtendedRights Receive-As, ms-Exch-Store-Admin -InheritanceType 'All'

Snap2-MS server

NOTE: It may take some time until the super-user rights are assigned.

4.Lastly, run the 3 following cmdlets to set the throttling policy for srv_exchange:

New-ThrottlingPolicy MAM4Exchange

 

Set-ThrottlingPolicy MAM4Exchange -EwsCutoffBalance Unlimited -EwsMaxBurst Unlimited -EwsMaxConcurrency Unlimited -EwsMaxSubscriptions Unlimited -EwsRechargeRate Unlimited -RcaMaxConcurrency Unlimited -RcaCutoffBalance Unlimited -RcaMaxBurst Unlimited -RcaRechargeRate Unlimited -CpaMaxConcurrency Unlimited -CpaCutoffBalance Unlimited -CpaMaxBurst Unlimited -CpaRechargeRate Unlimited

 

Set-Mailbox "srv_exchange" -ThrottlingPolicy MAM4Exchange

Related Documents