Chat now with support
Chat with Support

Metalogix Archive Manager for Exchange 8.1.1 - Advanced Installation Guide

Introduction Getting started Pre-installation tasks Installing Archive Manager for Exchange Post-installation tasks Addendum

Granting super-user impersonation permissions in MS Exchange Server

Super-user must be granted impersonation permissions in Exchange Server just in case that you plan to access archived emails via OWA. Otherwise these permissions are not necessary.

NOTE: To install and configure the OWA extension of Archive Manager, the Archive Manager for Exchange_64bit_Extensions setup has to be downloaded and installed on Exchange Server (see the “Installation of optional features” manual).

Use the PowerShell to grand the super-user Impersonation permissions over all Exchange 2013/2016 Servers in your environment:

1.Run the Exchange Management Shell.

2.To grant the super-user Impersonation permissions, run the following command:

New-ManagementRoleAssignment –Name "Impersonation-MAM4Exchange" –Role "ApplicationImpersonation" –User “srv_exchange”

Assigning DCOM rights on Windows Server 2008, 2012, 2016 or 2019

When installing Archive Manager on a MS Windows Server 2008 R2 SP1, 2012, 2016 or 2019, additional DCOM settings need to be taken into consideration.

To set DCOM rights on a MS Windows Server 2008 R2 SP1, 2012, 2016 or 2019, follow these steps:

1.Open Computer Management (run compmgmt.msc). Or right-click My Computer and select Manage.

2.In the Computer Management window expand the Local Users and Groups node and then select the Groups node.

NOTE: If you are installing Archive Manager on a Domain Controller machine, please note that by managing your computer you will not find the Local users and Groups node in the Computer Management window. Therefore to locate the Distributed COM Users group, use the Active Directory Users and Computers tool. To do so, click Start /Administrative Tools /Active Directory Users and Computers and simply search for the Distributed COM Users group (click on the Action menu and then click Find and search in Entire directory).

a-DCOM

3.Double-click the Distributed COM Users group in the right pane to open its Properties window and then add the super-user (srv_exchange account) to this group:

b-DCOM group

4.After adding the required account to the Distributed COM Users group you need to give this group both access and launch permissions on Component Services.
 
To do so, run Component Services (click Start /Administrative Tools /Component Services).
 
In the Component Services window expand the Component Services tree down to Component Services \Computers \My Computer and then right-click My Computer to open its Properties window.

c-open prop.

5.In the Properties window switch over to the COM Security tab.
 
In order to assign the Distributed COM Users group and NETWORK SERVICE the Access Permissions you need to click on the Edit Default button in the Access Permissions section.

d-properties1

6.In the Access Permission dialog add the Distributed COM Users group and the NEWORK SERVICE using the Add button. The Distributed COM Users group needs both local and remote Access permissions. The NETWORK SERVICE needs only local Access permissions. Then click OK.
 
IMPORTANT NOTE: When trying to Find Distributed COM Users and the computer is not a domain controller, change the location to local computer.
e-access perm.

7.Back in the Properties window on the COM Security tab you need to grant launch permissions. In order to grant the Distributed COM Users group and NETWORK SERVICE the Launch Permissions you need to click on the Edit Default button in the Launch and Activation Permissions section.
f-properties2

8.In the Launch and Activation Permissions dialog add the Distributed COM Users group and the NETWORK SERVICE using the Add button. The Distributed COM users group needs both local and remote Launch and Activation Permissions. The NETWORK SERVICE needs only the local Launch and Activation Permissions:

g-launch perm.

Creating a Public Folder Mailbox

Before creating an Organizational Forms library, which is a system folder stored in public folders, you must create a Public Folder. When creating public folder, public folder mailbox must be created first.

NOTE: You can skip this step if you already have the Public Folder created. Check it in Exchange Admin Center / Public folders. In case that public folder mailbox exists, proceed with the chapter “Creating an Organizational Forms Library”.

To create a Public Folder:

1.Log on to the Exchange Admin Center.

2.From the feature pane select Public Folders. Then click Public Folder Mailboxes and click + (New public folder) icon.

a-new PF mailbox

3.In the pop-up dialog enter the mailbox name (e.g. PF_mailbox) and click Save.

b-name

4.Now click the Public Folders tab / + (New public folder) icon. In the pop-up dialog enter name (e.g. Public Folder) and click Save.

c-new PF

NOTE: Provided that you have more Exchange 2013 servers, replicate the Public Folder mailbox to all of them.

Creating an Organizational Forms Library

You need to have an Organizational forms library (which is actually a system folder stored in public folders) on your MS Exchange Server, i.e. you need to have a folder under the EFORMS REGISTRY where you will publish all Archive Manager forms. If such a folder doesn’t exist yet, you have to create one.

NOTE: There can be several libraries created, one for each language.

Organizational forms library – if such exists – is located under the EFORMS REGISTRY. If the library exists under the EFORMS REGISTRY, you don’t need to create another one. In that case proceed with the chapter “Assigning owner rights to the super-user over the Organizational Forms library”.

To check whether an Organizational forms library exists:

1.Open Outlook.

2.Click click Home tab / New Items / More Items / Choose Form.

3.In the Look in down-drop box look for Organizational Forms Library, if it exists.

 

To create an Organizational forms library, follow these instructions:

1.Run the Exchange Management Shell.

2.Create an Organizational forms library in Exchange Management Shell using the following command:

New-PublicFolder –Path "\NON_IPM_SUBTREE\EFORMS REGISTRY" -Name "Organizational Forms" -vb

Parameter “-vb” is optional; it gives the verbose output.

a-create

Check in Outlook that the public folder is shown under Home tab / New Items / More Items / Choose Form. Restart the Microsoft Exchange Information Store service if not (Start / Programs / Administrative Tools / Services).

Other way how to bring the Organizational Forms on Outlook 2010 (if it didn’t load up after creation), is just adding another PowerShell line Set-PublicFolder "\NON_IPM_SUBTREE\EFORMS REGISTRY\Organizational Forms" -EFormslocaleID EN-US.

Related Documents