立即与支持人员聊天
与支持团队交流

MessageStats 7.8.1 - Deployment Guide

MessageStats Architecture Overview Planning for Deployment Deployment Recommendations and Solutions

1. Establish the Trust Relationship

In order to use an alternate account for connecting to the Exchange organization, at a minimum a one-way Trust must be established.

1
In Domain A, create an Outgoing Trust with Domain B.
2
In Domain B, create an Incoming Trust with Domain A.

2. Create the MessageStats Service Account

To connect to the Exchange organization within Domain B, you must create an account within Domain B and grant the account the proper permissions.

To create the service account in Domain B
1
In Domain B, create a user account. For example, QMSTATS.
2
Grant the account membership in the Local Administrators group of each Exchange server in the Exchange organization.
3
Grant the account membership in the Exchange Organization Management security group in the Exchange organization

3. Configure Permissions, Set Credentials, and Create Gathering

Since the MessageStats is to be installed in Domain A (HP ECS), you must configure MessageStats to use alternate credentials for connecting to the Exchange organization in Domain B.

To grant the required memberships
1
Grant the Domain B\QMMSTATS account membership in the Local Administrators group on the MessageStats computer.
2
Grant the Domain B\QMMSTATS account membership in the MessageStats Admin Group on the SQL server that hosts the MessageStats database.
To configure the connection
1
Open the MessageStats console and right click on Exchange Organizations.
2
Select Connect.
3
Select the Exchange versions for which there are mailbox servers in the organization.
4
Specify the NetBIOS name of an Exchange server in the other organization and click Next.
•
Exchange 2010: Specify a server with a CAS role. You must also specify a mailbox to which the account you are using to connect has full mailbox rights.
•
Exchange 2013: Specify a server with a CAS role to provide proxy service to MAPI client. You must also specify a mailbox to which the account you are using to connect has full mailbox rights.
•
Exchange 2016/2019: Specify a server with the Mailbox role.
5
Select Specify Explicit Credentials and enter the domain\username of the alternate account (such as DomainB\QMSTATS) and the password.
6
Complete the wizard. The organization should now appear in the console.
To configure the gathering

To run a gathering using the new connection to the Exchange organization in Domain B, perform the following steps:

1
Right-click on the Domain B Exchange Organization and select Create Task.
2
Click Next through the wizard to display the Task Credentials page.
3
Clear the Use Default Configuration check box at the bottom and specify the alternate account that you created to connect to the Exchange organization in Domain B (DomainB\QMSTATS)
4
Complete the wizard and run the gathering task.

Manually Creating the MessageStats Database in a Distributed Installation

In some distributed installation scenarios, due to security considerations, you might be unable to run the MessageStats installation wizard on the SQL server. In this case, you can use the MessageStats database creation script (MessageStatsDatabase.sql) to manually create the SQL database.

You must also manually create the necessary security groups to allow access to the MessageStats database.

To manually create the MessageStats database on both clustered and non-clustered SQL servers
1
Copy the MessageStats database creation script (MessageStatsDatabase.sql) from the SQL folder in the MessageStats Installation folder to your SQL server.
2
Open the SQL Server Management Studio.
3
Connect to the SQL Server that is going to host the MessageStats Database (for example, Server Type = Database Engine, Server Name = SQL Server Name and Authentication = either Windows Authentication or SQL Server Authentication).
4
Expand SQL Server Name and expand Databases.
5
Right-click Databases and select New Database.
6
Create an empty database called MessageStats.
7
Right-click the newly created MessageStats database and select New Query
8
After the Query window opens, select the File | Open | File.
9
Locate the MessageStatsDatabase.sql script and open it.
10
Provide either Windows Authentication or SQL Server Authentication and click Connect.
To use Windows authentication for an installation in which the database and reports are on different servers, Kerberos delegation is required. For information about configuring Kerberos delegation, see Deploying a Distributed Installation Using Windows Authentication .
11
Select the Query Menu and select Execute.

This will create all the MessageStats database tables and views.

Creating the required security groups and assigning permissions

Security groups are needed to assign rights to the database. You can use either local or global groups. The groups must be named MessageStats Admin and MessageStats Web.

If the MessageStats database resides on a SQL cluster, you must create the groups in Active Directory.

To create the required security groups
1
Launch Computer Management and expand System Tools | Local Users and Groups| Groups to create local groups
- OR -
Open Active Directory Users and Computers to create global groups.
2
Create two groups that are named as follows:
•
MessageStats Admin
(for accounts that perform gatherings and that administer the MessageStats console).
•
MessageStats Web
(for accounts that view the reports)
3
Ensure that the MessageStats service account is added to the MessageStats Admin group.
Typically the Everyone group is added to the MessageStats Web group if you want to ensure all your users can view the reports.
To assign the MessageStats Admin group to the MessageStats database
1
Open the SQL Management Studio and expand Security | Logins.
2
Right-click Logins and choose New Login.
3
Click Search and locate the MessageStats Admin group. Click OK.
4
Select Windows Authentication.
5
For the Default Database, select MessageStats from the drop-down list.
6
In the left column, click User Mapping.
7
For the Users Mapped to this Login section, check the box beside the MessageStats database.
8
Under the Database Role Memberships for section, select the following:
•
Public
•
MessageStats_Admin
•
db_securityadmin
•
db_ddladmin.
9
Click OK.
To assign the MessageStats Web group to the MessageStats database
1
Open the SQL Management Studio and expand Security | Logins.
2
Right-click Logins and select New Login.
3
Click Search and find the MessageStats Web group. Click OK.
4
Select Windows Authentication.
5
For the Default Database, select MessageStats from the drop-down list.
6
In the left column, click User Mapping.
7
For the Users Mapped to this Login section, check the box beside the MessageStats database.
8
Under the Database Role Memberships for section, select the following:
•
Public
•
MessageStats_web.
9
Click OK.

 

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级