Note: Before to begin with the Azure AD connector in AM, you need to complete first the next prerequisites:
1. Credentials configured in the Azure AD Connector (Proxy Credentials) page must have Exchange Online licenses and be members of “Recipient Management” group.
*We strongly recommend customers not use the credentials for other purposes as of the limitations from Office 365 throttling policy.*
2. Hybrid environment customer must configure On-Premises Active Directory for Hybrid in Azure AD Connector page.
3. The configuration setting (CONFIGURATION CONSOLE) “Max Enable Store Manager MailBox Count Per O365 MailServer” must be configured before ADC starts to sync the Office 365 mailboxes.
4. ADC for Office 365 cannot get the deleted objects yet. So a deleted/deactivated Office 365 user/mailbox cannot be updated.
5. Proxy credentials for Office 365 mailboxes must be assigned with Exchange Online licenses.
6. To support Office 365 mailboxes, MAPI over Http cannot be disabled in client side.
7. The setting “Autodiscover Prefer Mapi Over Http” must be configured if the ESM service needs run in on-premises environment.
8. Full-Access permission must be granted to the service account (Archivemgr_ESM by default):
Get-Mailbox -ResultSize unlimited -Filter {(RecipientTypeDetails -eq 'UserMailbox')} | Add-MailboxPermission -User ArchiveMgr_ESM@example.com -AccessRights fullaccess -InheritanceType all -AutoMapping:$false
To check Permissions:
Get-MailboxPermission chris.marsh@quest.com (use this to check just one mailbox)
Get-mailbox | Get-MailboxPermission - user proxyuser@company.com (to list all mailboxes the proxy account has rights to)
9. PowerShell 3.0 must exist in AM server
10. Outlook 2013 32 bits must be installed. with KB3114941 & KB4022169:
Right now this is the only support version to work with Office 365. Once installed, turn off the automatic updates as patches could interfere.
SECTION II: INSTALLATION OF REQUIRED MODULES
Run the next PS cmdlets to install the required modules.
Execution Policy (run this one first) :
Type “Y” to confirm.
NOTE: The PowerShell ExecutionPolicy must be RemoteSigned at least.
Azure AD Preview:
Azure AD Module:
Install-Module -Name AzureAD
NOTE: AzureAD module must be installed by Administrator or service (Web Application Pool identity)
The term 'Connect-AzureAD' will not recognized as the name of cmdlet, function and script file
MS-Online module:
Install-Module -Name MSOnline
https://www.microsoft.com/en-us/download/details.aspx?id=54616
SECTION III: CONFIGURATION CONSOLE SETTINGS
4. Select the “Office 365 Worldwide” provider. If your organization corresponds to the US Government, Germany, or China, select the corresponding provider.
5. Click on Next to validate the provider
7. Once you add your On-Premises settings, click on FINISH to complete the wizard and then click on Apply to save the settings in the Configuration Console.
SECTION IV : ARCHIVE MANAGER ADMINISTRATION SITE
1. In the ArchiveManager administration site, click on Proxy Credentials, and then on “Click here to Add credentials” to add the proxy credentials.
NOTE: If the Login Domain is still not reflected, restart the ArchiveManager Active Directory Connector Service and run the next command from the command prompt to speed up the Proxy Credentials update:
After running the command the proxy credentials, the Login Domain can take several minutes to appear. If the Login Domain never appears to send us a copy of the ADC.wlog to check it.
ActiveDirectoryConnectorService.exe -console -mspermission -remove
SECTION V: ADDITIONAL INFORMATION
https://support.quest.com/technical-documents/archive-manager/5.7/administration-guide
Exchange Store Manager
- Autodiscover
Check the auto-discover URL cache value under the registry key: HKCU\Software\Quest\Archive Manager\Autodiscover Url.
The URL's for Office 365 are:
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
https://autodiscover-s.partner.outlook.com/autodiscover/autodiscover.xml
***Remember any issues during the configuration, feel free to open a service request to support for assistance.***
