GFI Product Guide. Administrator Guide

Transcription

1 GFI Product Guide Administrator Guide

2 The information and content in this document is provided for informational purposes only and is provided "as is" with no warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, and non-infringement. GFI Software is not liable for any damages, including any consequential damages, of any kind that may result from the use of this document. The information is obtained from publicly available sources. Though reasonable effort has been made to ensure the accuracy of the data provided, GFI makes no claim, promise or guarantee about the completeness, accuracy, recency or adequacy of information and is not responsible for misprints, out-of-date information, or errors. GFI makes no warranty, express or implied, and assumes no legal liability or responsibility for the accuracy or completeness of any information contained in this document. If you believe there are any factual errors in this document, please contact us and we will review your concerns as soon as practical. All product and company names herein may be trademarks of their respective owners. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and other countries. GFI Archiver is copyright of GFI SOFTWARE Ltd GFI Software Ltd. All rights reserved. Document Version: V Last updated (month/day/year): 04/12/2014

3 1 About GFI Archiver Introduction to GFI Archiver How does GFI Archiver work? GFI Archiver licensing Legal compliance Terms and conventions used in this guide 11 2 Installing GFI Archiver Before you install System requirements Software requirements Hardware requirements Connections established from the GFI Archiver Server Excluding folders from antivirus scanning Database settings ASP.NET settings How to install/enable.net 3.5 SP1 on Windows Server 2008 R Where should I install GFI Archiver? Setting up a journaling mailbox Creating a Journal Mailbox in Microsoft Exchange Server Preparing the Journal Mailbox in Microsoft Exchange Server 2007/2010/ Creating a Journal Mailbox in Microsoft Exchange Server Creating a Journal Mailbox in Microsoft Exchange Server Set up standard journaling Set up premium journaling Creating a Journal Mailbox in Microsoft Exchange Choosing and preparing a database Choosing your database type Using GFI Archiver Database Using SQL Server Express Using Microsoft SQL Server Installing GFI Archiver Removing from Microsoft Exchange Remove s from Exchange Server using Archive Assistant Removing from Microsoft Exchange Server Removing Microsoft Exchange Server Removing from Microsoft Exchange Server Removing from Microsoft Exchange Server Uninstall information 55 3 GFI Archiver Post-install Wizard License configuration Configuring New Archive Store Settings via Post Install Wizard Configuring Archive Store - GFI Archiver Database Configuring Archive Store - SQL Server Configuring Archiving Method via Post Install Wizard Setting up a journaling mailbox 65

4 3.3.2 Creating a journal mailbox via the Post Install Wizard Finalizing the Post Install setup Test your setup Using the Port Change Tool 71 4 Upgrading from previous versions Why upgrade to GFI Archiver 2015? Upgrading to GFI Archiver from versions earlier than GFI MailArchiver What benefits do the new Archive Stores offer? Before you upgrade Upgrading GFI Archiver Upgrading Client Tools Post upgrade actions Check licensing 78 5 Using GFI Archiver Logging in to GFI Archiver Using the Home tab Status overview Servers Archive Stores Flow Event Viewer Browsing Archived items Working with archived items Searching archived items Using Simple Search Using Advanced Search search using smart phones Accessing multiple mailboxes GFI MailInsights GFI MailInsights Requirements Generating MailInsights reports Scheduling MailInsights reports Communication Flow WebMail Usage Responsiveness Storage Use Inactive Accounts Inappropriate Words Internal Spammers Outside Office Hours Data Leakage Detection Job Search Phrase Search User Traffic Report Topics report 113

5 Performance Indicators report Large s report Changing user preferences Achieving results Achieving results with GFI Archiver - How to archive your company's Achieving results with GFI Archiver - Importing and exporting s Achieving results with GFI Archiver - Analyze your archived s Configuring GFI Archiver Settings overview Configuring Archiving Method Managing the Mail Servers to Archive Viewing configured mail servers Adding a new journaling mailbox Editing an existing journaling mailbox Deactivating and activating an existing journaling mailbox Removing an existing journaling mailbox Configuring Archiving Rules Adding Archiving Rules Editing Archiving Rules Removing Archiving Rules Configuring Archive Restrictions Enabling Mailbox Archive Restrictions Disabling Mailbox Archive Restrictions Managing the Archiving Scope Configuring Mailbox Folder Structure Retrieval Enabling Mailbox Folder Structure Retrieval Disabling Mailbox Folder Structure Retrieval Excluding folders from Folder Structure Retrieval Removing Excluded Folders Policies Importing s and Calendar Items via the GFI Archiver Archive Assistant Configuring Default Import Settings Configuring import settings for detected users Configuring default File Archive Assistant settings Enabling File Collaboration using the File Archive Assistant Create a public user in Active Directory Resolving a file conflict Managing Archive Stores Viewing Configured Archive Stores Configuring New Archive Store Settings Choosing and Preparing a Database for Use With GFI Archiver Attaching an Archive Store Editing Existing Archive Store Details Detaching an Existing Archive Store Indexing Configuring Index File Location Credentials 167

6 Scheduling Archive Stores Backup Archive Stores Online Backup Offline Backup Moving s from one database to another Configure the GFI Archiver Import Service Remove source Archive Stores from GFI Archiver Move binary files to the GFI Archiver Import Service Moving s to the GFI Archiver archive stores Restoring the mailbox folder structure of moved s Upgrading the Database Schema Attaching a GFI MailArchiver 3 Database Configuring Roles and Permissions Viewing configured roles and permissions Adding a new role Assigning Roles Configuring a Full Access role Deleting Roles Default Role Access Control Adding users to the Group Manager archive access Define user Access Control Configuring Shared Mailboxes Configuring IMAP Server Working With Certificates Retention Policies How Are Retention Policies Applied? Viewing Retention Policies Adding a new Retention Policy Changing the order of Retention Policies Adding a SPAM Retention Policy Configuring Legal Hold Using Retroactive Retention Configuring File History Retention Policies Add a new File History Retention Policy Edit File History Retention Policies Viewing File History Retention Policies Changing the order of File History Retention Policies Removing File History Retention Policies Classification Rules Adding a New Classification Rule Editing a Classification Rule Removing a Classification Rule Configuring Auditing Configuring Database Activity Auditing Editing Database Activity Auditing Audit Reports 207

7 7.19 Configuring Deletion Viewing and editing license keys Configuring General Settings Changing General Settings Changing version check settings Configure the Fax Archiving search tab Configuring Archiving status notification Configuring GFI Directory Service Configuring Client Access Installing GFI Archiver Outlook Connector How GFI Archiver Outlook Connector works Downloading GFI Archiver Outlook Connector Changing the Outlook Connector tab availability Outlook Connector system requirements Software Hardware Installing Outlook Connector - Manual install Installing Outlook Connector via GPO Installing Outlook Connector via GPO in Windows Server Installing Outlook Connector via GPO in Windows Server Configuring the Archive Assistant How does Archive Assistant work? System requirements - Outlook Connector Archive Assistant File Archive Assistant Enabling and disabling Manual Archiving Changing the Archive Assistant tab availability Installing Archive Assistant manually Installing the Archive Assistant via GPO in Windows Server Configuring Archive Assistant Deploying the File Archive Assistant System requirements - Outlook Connector Archive Assistant File Archive Assistant Changing the File Archive Assistant tab availability Configuring default File Archive Assistant settings Configuring Roles and Permissions for file archiving Downloading the File Archive Assistant Downloading the File Archive Assistant MSI package Installing the File Archive Assistant via GPO - Windows Server Configuring the File Archive Assistant Deploying the GFI Archiver App for Windows 8/RT System requirements Configuring the GFI Archiver Touch App Configuring GFI Archiver IMAP Client Access Configuring IMAP in Apple Mail Configuring IMAP in ios Configuring IMAP in Microsoft Outlook Configuring IMAP in Microsoft Outlook Configuring IMAP in Microsoft Outlook

8 8.6.6 Configuring IMAP in Microsoft Outlook Configuring IMAP in Outlook 2011 for Mac Configuring IMAP in Windows Live Mail Configuring IMAP on Android Configuring IMAP in Mozilla Thunderbird Using the Import Export Tool Import s From Microsoft Exchange Mailboxes Step 1: Importing s from a remote computer Microsoft Exchange mailbox access permissions Grant Permissions Step 2: Run the GFI Archiver Import Export Tool Microsoft Exchange mailbox access permissions Revoke Permissions Import s from PST files locally Step 1: Importing items from a remote computer Step 2: Run the GFI Archiver Import Export Tool to Import from PST Files Export s from GFI Archiver Archive Stores Exporting s Restoring Mailboxes Using the GFI Archiver DB Split Tool Using the Export SQL Raw Data tool Export raw data from GFI Archiver Import back exported data into GFI Archiver Troubleshooting and support Introduction GFI SkyNet Web Forum Request technical support Documentation Installation problems General Issues Import Export Problems Outlook Connector Issues Glossary Index 299

9 1 About GFI Archiver 1.1 Introduction to GFI Archiver GFI Archiver is an archiving solution that can archive all internal and external into a central Archive Store. You can then easily manage the Archive Stores from the web-based configuration of GFI Archiver. You can also allow users to browse and search old s via the webbased interface. GFI Archiver also provides Microsoft Outlook integration. 1.2 How does GFI Archiver work? GFI Archiver operations can be classified in three stages as described below: Figure 1: Typical GFI Archiver installation diagram. Stage 1: Retrieve items to archive GFI Archiver retrieves s, calendar items or files depending on the configured Archiving Method as described in the table below: GFI Archiver 1 About GFI Archiver 9

10 OPTION Manual Archiving Auto-Archiving (Journaling) This method enables users to manually archive messages, calendar items or files from their Microsoft Outlook client into GFI Archiver. Users need to deploy Archive Assistant to archive items manually. For more information refer to Configuring the Archive Assistant (page 225). GFI Archiver uses Microsoft Exchange Server journaling to retrieve items to archive in a single mailbox. A Journaling mailbox (configured in Microsoft Exchange) is required for the Auto-Archiving (Journaling) method and is configured through the post-install wizard. This enables you to start archiving items from a Microsoft Exchange Server. For more information refer to Setting up a journaling mailbox (page 65). If Auto-Archiving (Journaling) method is enabled, select one of the following options: All s - select to archive all s that pass through your configured mail servers. For more information refer to Managing the Mail Servers to Archive (page 128). Rule-Based Archiving - archive s based on criteria specified in the configured Archiving Rules. For more information refer to Configuring Archiving Rules (page 132). In addition to these methods of archiving, GFI Archiver provides also the following options: OPTION File Archive Assistant Import Export Tool The File Archive Assistant enables users to archive files such as documents or images. This can be done manually from any location on their machine, or automatically, by placing the files they need to archive in a folder synchronized with GFI Archiver. For more information refer to Deploying the File Archive Assistant (page 233). s and calendar items can also be imported into GFI Archiver through the Import Export Tool. For more information refer to Using the Import Export Tool (page 252). Stage 2: Archive retrieved items GFI Archiver stores collect items in Archive Stores created automatically based on the configured New Archive Store Settings. Items are archived according to their received date. If an Archive Store does not exist for the period that matches the date of the item, a new Archive Store is automatically created. For more information refer to Configuring New Archive Store Settings (page 160). When Rule-based method of archiving is selected, GFI Archiver only archives items that match criteria specified in the configured Archiving Rules. For more information refer to Configuring Archiving Rules (page 132). Stage 3: Browse and analyze archived items Users can browse, search and analyze archived items using the GFI Archiver web interface or from within Microsoft Outlook using the Outlook Connector. For more information refer to Browsing Archived items (page 83). GFI Archiver 1 About GFI Archiver 10

11 Additionally, use GFI MailInsights to analyze information related to usage and trends. Use this feature to generate management and HR reports that provide insight on and resource use or misuse. For more information refer to GFI MailInsights (page 94). 1.3 GFI Archiver licensing GFI Archiver requires a license for every mailbox. Each GFI Archiver license is made up of the following: An Archiving license A File Archive Assistant (FAA) license Each license can be used by the same user to archive items from the mail server and/or to archive files from a client machine using the File Archive Assistant. For example, when purchasing a license for 75 users, you can enable archiving for 75 different mailboxes and for each of these users you can also install the File Archive Assistant on their machines. A user with multiple computers, all of which have File Archive Assistant installed, is still counted as 1 File Archive Assistant license. To free up File Archive Assistant licenses simply uninstall File Archive Assistant from client machines on your network. You may need to exclude certain mailboxes from archiving while including specific ones. This can be achieved by configuring Mailbox Archive Restrictions and determines the number of licensed mailboxes counted by the product. For more information refer to Configuring Archive Restrictions (page 136). For general information on GFI Archiver licensing, refer to: Legal compliance Ensure that by enabling the Rule-based method of archiving or the deletion feature you are not breaching your company policy or any laws and regulations related to storage in your jurisdiction. For more information refer to Configuring Archiving Rules and Deletion chapters Terms and conventions used in this guide Term Note Important Description Additional information and references essential for the operation of GFI Archiver. Important notifications and cautions regarding potential issues that are commonly encountered. > Step by step navigational instructions to access a specific function. Bold text Italics text Code Items to select such as nodes, menu options or command buttons. Parameters and values that you must replace with the applicable value, such as custom paths and file names. Indicates text values to key in, such as commands and addresses. GFI Archiver 1 About GFI Archiver 11

12 2 Installing GFI Archiver The following sections provide you with information about how to successfully deploy a fully functional instance of GFI Archiver: SECTION Installation notes System requirements Environment considerations Preparing a journaling mailbox Choosing and preparing a database Installation procedure Removing s from Microsoft Exchange Server Post-installation tasks Follow a detailed checklist to ensure that your environment meets the necessary requirements. Browse information related to software and hardware requirements and other important settings such as Port Settings, ASP.NET Settings and Database Settings. Find information related to the environment where you are going to install GFI Archiver. Create a journaling mailbox on Microsoft Exchange from where GFI Archiver retrieves items to archive. Configure the database infrastructure to ensure the best performance for data archival and retrieval processes. Follow the steps to install GFI Archiver. Once GFI Archiver is configured and items are being archived correctly, create a mailbox management policy to free up space on the Microsoft Exchange server by deleting that has been archived. After GFI Archiver is successfully installed, follow the post install wizard that assists in setting up GFI Archiver. 2.1 Before you install The following checklist ensures that you have all the necessary requirements in place before going through the installation process: 1. Ensure that you are logged on as Administrator or using an account with administrative privileges. 2. Install.NET Framework 4.0 or Set up IIS (SMTP/World Wide Web Services). For more information refer to ASP.NET settings (page 17). 4. Enable.NET Framework 3.5. For more information refer to How to install/enable.net 3.5 SP1 on Windows Server 2008 R2 (page 19). 5. Install Microsoft Exchange Server MAPI Client and Collaboration Data Objects. 6. Ensure screen resolution is 1024 x 768 or higher. 7. Ensure ports used by GFI Archiver are free. For more information refer to Connections established from the GFI Archiver Server (page 16). 8. Check that the machine on which you are installing GFI Archiver meets the system and hardware requirements specified in System Requirements. 9. Check the Microsoft Exchange Server role. GFI Archiver cannot be installed on the Microsoft Exchange Server 2007/2010 Edge Role, since such a server is typically deployed on a DMZ using GFI Archiver 2 Installing GFI Archiver 12

13 ADAM (Active Directory Application Mode)/AD LDS (Lightweight Directory Services) instead of Active Directory. 10. Ensure to enable IMAP if installing on the Microsoft Exchange Server 2007/2010 Client Access Role. 11. (Optional) Install Microsoft SQL Server or Microsoft SQL Server Express. For more information refer to Choosing your database type (page 40). 12. Save any pending work and close all open applications on the machine. 13. Run the GFI Archiver installer to install GFI Archiver and missing pre-requisites. For more information refer to Installing GFI Archiver (page 45). 14. Follow the post-install wizard to configure GFI Archiver and its operating environment. For more information refer to GFI Archiver Post-install Wizard (page 56). Ensure that the Display name and fields in Active Directory are filled with valid data. 2.2 System requirements Use the following links to find information related to software and hardware requirements and other important settings to ensure a successful deployment of GFI Archiver. Software requirements Supported operating systems Supported mail servers Supported databases Hardware requirements Other required components Processor Memory Important Settings Physical storage Antivirus software Firewall Port settings Database settings ASP.NET settings Enabling.Net 3.5 on Windows Server 2008 R2 The recommended software and hardware specifications depend on the number of users, settings enabled, flow and message sizes. GFI Archiver 2 Installing GFI Archiver 13

14 2.2.1 Software requirements Supported operating systems GFI Archiver can be installed on all the operating systems listed below: OS VERSION SUPPORTED OPERATING SYSTEM 32 BIT Windows SBS 2003 Windows 2003 Standard & Enterprise with SP2 Windows 2008 Standard & Enterprise 64 BIT Windows SBS 2008 Standard & SBS 2011 Windows 2003 Standard & Enterprise with SP2 Windows 2008 Standard, Enterprise, Datacentre & Hyper-V Environments Windows Server 2008 R2 Enterprise & Hyper-V Environments Windows Server 2012 Standard, Enterprise & Hyper-V environments Windows Server 2012 R2 Standard, Enterprise & Hyper-V environments Supported Mail Servers Supported Mail Servers Microsoft Exchange Server 2003 or later IMAP compatible mail servers (with journaling-like feature) Microsoft Office 365. For more information refer to Kerio Connect Google Apps for Business Supported Databases GFI Archiver supports the database back-ends listed below: SUPPORTED DATABASE SQL Server 2005 or later (including SQL Server Express editions) Firebird - for evaluation purposes only Microsoft SQL Server or Microsoft SQL Server Express are recommended for all organizations. Microsoft SQL Server (or Microsoft SQL Server Express) is not included with the GFI Archiver installation and needs to be installed as a separate process. For more information refer to: Using Microsoft SQL Server and Using Microsoft SQL Express. An open source database used for evaluation purposes bundled with GFI Archiver. Recommended for evaluation purposes only for organizations with less than 50 users and with an average mail flow of up to 2500 per day. GFI Archiver 2 Installing GFI Archiver 14

15 Other required components OTHER COMPONENTS Microsoft.NET Framework 4.0 or 4.5. Download.NET Framework 4.5 from: Microsoft.NET Framework 4.5 is not supported on Microsoft Server Access to Microsoft Active Directory ASP.NET 4.0 or 4.5 Internet Information Services (IIS ) 6.0 or later - SMTP & World Wide Web services Internet Explorer 8 or later, Mozilla Firefox, Google Chrome, Safari Microsoft Data Access Components (MDAC) 2.6 or higher Microsoft Exchange Server MAPI Client and Collaboration Data Objects Required (unless Outlook bit or later is installed or unless GFI Archiver is installed with Microsoft Exchange Server 2003). Click here to download. Domain functional level: 2003 onwards Minimum supported screen resolution is 1024 x 768. IMPORTANT After installing Microsoft.NET Framework 4.0 or 4.5 restart the machine Hardware requirements Processor REQUIREMENT Minimum Recommended Intel Pentium or compatible - 2GHz 32 bit processor. x64 architecture-based server with Intel 64 architecture or AMD64 platform. Memory REQUIREMENT Minimum Recommended 1GB RAM (dedicated to GFI Archiver) 3GB RAM (dedicated to GFI Archiver) GFI Archiver 2 Installing GFI Archiver 15

16 Physical storage REQUIREMENT Minimum Recommended 400MB physical disk space (NTFS) for GFI Archiver installation. More space is required for the database (Firebird or Microsoft SQL server). Storage space depends on mail volume to archive. Server with 4 physical drives, with the ability to increase storage space on demand when required. Refer to Database Settings section for more information on how to configure your database. It is highly recommended that you store databases and Index files on separate, appropriately sized hard disks. SAS hard disks are highly recommended Connections established from the GFI Archiver Server PORT PROTOCOL 25 Used by GFI Archiver when an needs to be restored to a user s mailbox or a notification is sent to the GFI Archiver administrator. 80 Used by the GFI Archiver user interface and web services. Required for clients to access the GFI Archiver server. 80 Enable this port when GFI Archiver is not installed with Microsoft Exchange Server. This port is required by GFI Archiver to access Microsoft Exchange and retrieve s from the journal mailbox using EWS. 135 Enable this port when GFI Archiver is installed on the same machine as Microsoft Exchange Server and configured to use ExOLEDB to retrieve s. 143 Enable this port to retrieve s when GFI Archiver is not installed on the same server as Microsoft Exchange Server when using IMAP Enable this port when GFI Archiver is configured to archive s to a SQL Server Database Used for connections done from the GFI Archiver Server to the Domain Controller which stores the Microsoft Global Catalog. 8017, 8018, 8019, 8020, 8022 Used for communication between GFI Archiver components and services. Ensure these ports are available and free Default port assigned to GFI Archiver IMAP Service. IMAP Service enables users to access archived via IMAP from 3rd party clients such as Thunderbird, Microsoft Outlook, Apple Mail, Android, ios and others. SMTP HTTP HTTP MAPI/RPC IMAP Microsoft SQL Server Microsoft Global Catalog IMAP Use the Port Changing Tool to easily change port numbers. For more information refer to Using the Port Change Tool (page 71). GFI Archiver 2 Installing GFI Archiver 16

17 2.2.4 Excluding folders from antivirus scanning Antivirus software may cause GFI Archiver to malfunction. This occurs when such software denies access to certain files required by GFI Archiver. It is recommended to exclude the following folders and subfolders from antivirus software (on-access and on demand) running on the GFI Archiver server: GFI Archiver FOLDERS <GFI Archiver Installation folder> and subfolders. <..\Program Files\Common Files\GFI> Also, exclude the index and the Archive Store locations from antivirus scans. The default Index and Archive Store locations are: GFI Archiver DEFAULT INDEX AND ARCHIVE STORE LOCATIONS <GFI Archiver Installation folder>\indexes\default <GFI Archiver Installation folder>\databases\default\> You can change the Index and Archive Store locations after installing GFI Archiver. For information, refer to the Configure New Archive Store Settings and Configure search indexes sections in this manual Database settings GFI Archiver requires SQL Server (if used as the archival database) to be installed in case insensitive mode. This is the default installation setting of SQL Server. The SQL Server collation modes apply to all SQL Server objects including login names. In such cases if a user changes a property in the name and does not make EXACT character case matches, GFI Archiver will fail since it would not find the resources required. Once installed, it is not possible to change the SQL Server collation mode easily. It requires a rebuild of the master database using advanced Microsoft SQL tools or methods. The best solution is to install another instance of SQL Server (set to operate in insensitive collation mode). IMPORTANT Ensure SQL Server is installed in case insensitive mode if SQL Server is used as the archival database ASP.NET settings Register and enable ASP.NET with IIS for GFI Archiver to work. Register ASP.NET With IIS If the Microsoft.NET framework is installed after IIS is installed this is automatically registered. Else, register ASP.NET with IIS by following these steps: 1. From command prompt, navigate to: <WindowsDirectory>\Microsoft.NET\Framework\<v4.0.xxxxx>\ GFI Archiver 2 Installing GFI Archiver 17

18 Replace <v4.0.xxxxx> with the folder name of Microsoft.NET Framework version number. For example: C:\Windows\Microsoft.NET\Framework\v \ Screenshot 1: Registering ASP.NET with IIS 2. Key in aspnet_regiis.exe -i and press Enter. Enable ASP.NET From IIS Ensure that ASP.NET is allowed by Internet Information Services (IIS ) Manager. IIS 6 1. Navigate to Control Panel > Administrative Tools > Internet Information Services (IIS) Manager. 2. Expand the local computer node and select Web Service Extensions. 3. In the right pane, right click ASP.NET v4.0.xxxxx and select Allow. IIS 7 1. Navigate to Control Panel > Administrative Tools > Internet Information Services (IIS) Manager. 2. Select the local computer node and from the Features View pane launch ISAPI and CGI Restrictions. 3. In the Features View pane, right click ASP.NET v4.0.xxxxx and select Allow. GFI Archiver 2 Installing GFI Archiver 18

19 2.2.7 How to install/enable.net 3.5 SP1 on Windows Server 2008 R2 The.NET Framework 3.5 SP1 is a prerequisite for SQL Server In Windows Server 2008 R2, the.net Framework is a feature that can be enabled as follows: 1. Click Start > Administrative Tools and select Server Manager. 2. In the Server Manager interface, click Features to display all the installed Features in the right hand pane. 3. If.NET Framework feature is not listed, click Add Features. 4. Locate.NET Framework Features and select checkbox. 5. Click Next. 6. Confirm installation selections, then click Install. SQL Server 2008 Setup for standalone instance will install the.net Framework 3.5 SP1 if it is not already installed. 2.3 Where should I install GFI Archiver? Install GFI Archiver on any machine that meets the system requirements and is part of an Active Directory domain. Before proceeding with the installation, first consider the details listed below: CONSIDERATION volume on your servers Hardware and software specifications of your servers Need to archive from multiple sources concurrently Installing GFI Archiver on a mail server where a high volume of s is received and processed will invariably put more load on server resources. This can cause these servers to become unresponsive and not process mail in a timely fashion. The hardware and software specifications listed in the System requirements section above should be considered to be over and above the requirements of other software installed on the same server. Servers which are nearing their capacity in terms of resources should not be used to install GFI Archiver. Installing GFI Archiver on a server which is not granted access to multiple sources creates a problem in the centralization efforts of data archival. If all of the above details are considered not to be of significant issues then you can consider installing GFI Archiver on the mail server. For example: If you need to archive items from one Microsoft Exchange Server, and the server is handling the flow on your network and still has spare processing capacity, then you can consider installing GFI Archiver directly on the Microsoft Exchange Server machine. If you want to archive items from multiple Microsoft Exchange Servers using IMAP, it is recommended that you install GFI Archiver on a separate server. GFI Archiver does not require a dedicated machine when it is not installed on the mail server. GFI Archiver 2 Installing GFI Archiver 19

20 GFI Archiver can be installed in the following virtual environments: VMware Microsoft Hyper-V Server Microsoft Virtual Server (installed on a 32 bit guest operating system) IMPORTANT Ensure that access to the server where GFI Archiver data is stored is restricted to authorized persons only. 2.4 Setting up a journaling mailbox If you have selected the Auto-Archiving (Journaling) method of archiving, you need to create a journaling mailbox. Journaling is a feature that enables the recording of in an organization. Through Microsoft Exchange Server journaling, you can channel the items to archive into a single mailbox. s and calendar items are then retrieved by GFI Archiver for archiving. To create the journaling mailbox on Microsoft Exchange Server, perform one of the following actions: Automatically create a journaling mailbox via the post install wizard Manually set up a journal mailbox for Microsoft Exchange Server 2003 Manually set up a journal mailbox for Microsoft Exchange Server 2007 Manually set up a journal mailbox for Microsoft Exchange Server 2010 Manually set up a journal mailbox for Microsoft Exchange Server 2013 IMPORTANT If journaling is not set up correctly, Auto-archiving (journaling) method of archiving will NOT work. Archiving mail-enabled public folders Public folders are not journaled and archived out-of-the-box since Microsoft Exchange server does not journal s which are addressed to public folders by default. For instructions on how to archive s addressed to mail-enabled public folders refer to the following article: Creating a Journal Mailbox in Microsoft Exchange Server 2003 Configuring a Microsoft Exchange Server journaling mailbox for use within GFI Archiver requires you to create a new journal mailbox and to configure Microsoft Exchange to archive items to the journal mailbox. Then you are also to configure whether to journal just the BCC information or all the header information. Step 1: Create a New Journaling Mailbox. 1. Select Start > Programs > Microsoft Exchange > Active Directory Users and Computers. GFI Archiver 2 Installing GFI Archiver 20

21 Screenshot 2: Add new user in Microsoft Exchange Server Expand the domain to archive s from, right-click Users node and select New > User. GFI Archiver 2 Installing GFI Archiver 21

22 Screenshot 3: New Object - User dialog 3. Key in a relevant User logon name (For example journal), fill in other new user details, and click Next. 4. Key in a password, unselect User must change password at next logon option and enable User cannot change password and Password never expires options. Click Next to continue setup. Ensure that the password keyed in meets the password complexity requirements setup for your Active Directory users. 5. Click Next and review the new user details. Click Finish to create new user. Step 2: Configure Archival to Journaling Mailbox 1. Select Start > Programs > Microsoft Exchange > System Manager. GFI Archiver 2 Installing GFI Archiver 22

23 Screenshot 4: Mailbox store node properties 2. Expand Servers > <Your Server name> > Storage group, right click Mailbox Store node and select Properties. GFI Archiver 2 Installing GFI Archiver 23

24 Screenshot 5: Enabling journaling on a Microsoft Exchange Server mailbox store 3. From the General tab, select Archive all messages sent or received by mailboxes on this store check box and click Browse button. 4. Select the journaling mailbox name you created in step one, for example journal, and click OK. 5. Close the Mailbox Store Properties dialog and the Exchange System Manager Management console. Step 3: Enable BCC Information Journaling IMPORTANT It is highly recommended that you DO NOT enable this option but enable envelope journaling instead. Envelope journaling journals all the header information, not just the BCC data. For more information on envelope journaling refer to Step 4: Enable Envelope Journaling On Microsoft Exchange Server 2003 systems, BCC information is not by default included in the journaled message. To enable BCC information journaling: 1. From command prompt, type regedit.exe 2. Add the following registry key: HKEY_LOCAL_ MACHINE\System\CurrentControlSet\Services\MSExchangeTransport\Parameters 3. Add the following registry key and values: GFI Archiver 2 Installing GFI Archiver 24

25 HKEY_LOCAL_ MACHINE\System\CurrentControlSet\Services\MSExchangeTransport\Parameters\ Key name: JournalBCC Data type: Dword Data value: 1 4. Close Registry editor and from command prompt type services.msc. Restart Simple Mail Transport Protocol and the Information Store services. Step 4: Enable Envelope Journaling Envelope Journaling enables the archival of header information and can be switched on using: Microsoft Exchange Server Journaling Advanced Configuration (exejcfg.exe), or ADSI Editor Management console. Using the exejcfg.exe tool 1. Download the exejcfg.exe tool from: EBF38DF3400D&displaylang=en 2. From the command prompt, navigate to the folder in which you copied the exejcfg.exe tool. 3. Type exejcfg -e and press Enter. exejcfg -d disables Envelope Journaling for that organization. Step 5: Using the ADSI Editor 1. Locate the adsiedit.msc tool from the Windows 2000 Server resource kit or the Windows 2003 Server support tools. 2. From command prompt, navigate to the folder where adsiedit.msc is stored, type adsiedit.msc and then press Enter. GFI Archiver 2 Installing GFI Archiver 25

26 Screenshot 6: ADSI Edit 3. Expand ADSI Edit > Configuration > <CN=Configuration> > <CN=Services> > <CN=Microsoft Exchange> node. 4. Right-click CN<your organization name> node and click Properties. GFI Archiver 2 Installing GFI Archiver 26

27 Screenshot 7: Heuristics attribute 5. Select heuristics attribute from the Attributes list and click Edit. Screenshot 8: Editing the heuristics attribute value 6. Key in 512 and click OK. 7. Click OK to save and close the ADSIEdit console. A value of 512 enables Envelope Journaling, and a value of 0 disables Envelope Journaling Preparing the Journal Mailbox in Microsoft Exchange Server 2007/2010/2013 Microsoft Exchange Server 2007, 2010 and 2013 support two types of journaling: GFI Archiver 2 Installing GFI Archiver 27

28 OPTION Standard journaling: Premium journaling: This feature enables the configuration of a Mailbox store that enables the recording of in an organization. GFI Archiver can use Microsoft Exchange Server journaling to centralize all the s to archive in a single mailbox for archival. This type of journaling is also called permailbox database journaling. Only available with the Microsoft Exchange Server Enterprise client access license. It enables an administrator to setup custom journaling rules such as Archive only incoming s, Archive only outgoing s or Archive s for a particular group. This journaling is also called perrecipient journaling. GFI Archiver utilizes this type of journaling by detecting and displaying these rules in the Data Sources Configuration Wizard. Choosing a Journaling Method Choose standard journaling to archive all s (inbound and outbound) for all users in your organization. Choose premium journaling of you want more control over the s to archive (e.g. only for specific users or for inbound or outbound only). Premium journaling requires a Microsoft Exchange Enterprise client access license. Enabling Journaling for Microsoft Exchange Server 2007, 2010 or 2013 For Microsoft Exchange Server 2007 pre-service pack 2 installations, journal mailbox creation should be created using the instructions listed in: Creating a Journaling Mailbox in Microsoft Exchange Server 2007 Installations running Microsoft Exchange Server 2007 SP2 or Microsoft Exchange Server 2010 can: Use the GFI Archiver Post-Installation wizard to automatically create the required journal mailbox, or Manually create a Journaling Mailbox in Microsoft Exchange Server 2007 Manually create a Journal Mailbox in Microsoft Exchange Server 2010 Manually create a Journaling Mailbox in Microsoft Exchange Creating a Journal Mailbox in Microsoft Exchange Server 2007 Setting up standard journaling Step 1: Create a new journaling mailbox 1. Select Start > All Programs > Microsoft Exchange Server 2007 > Microsoft Exchange Management Console. 2. Expand Recipient Configuration node and click on Mailbox node. 3. Select New Mailbox from the Actions pane. GFI Archiver 2 Installing GFI Archiver 28

29 4. Select User Mailbox option and click Next. 5. Select New user option and click Next. Screenshot 9: New user mailbox details 6. Key in the User information details and click Next. 7. In the Mailbox Settings window, select a Mailbox database and click Next. 8. Review the New Mailbox summary for the new journaling mailbox and click New. Step 2: Configure standard journaling 1. Select Start > All Programs > Microsoft Exchange Server 2007 > Microsoft Exchange Management Console. GFI Archiver 2 Installing GFI Archiver 29

30 Screenshot 10: Configuring a Mailbox Database 2. Expand Microsoft Exchange > Server Configuration > Mailbox node and click Properties from the Actions pane. GFI Archiver 2 Installing GFI Archiver 30

31 Screenshot 11: Mailbox Database properties 3. Select Journal Recipient option, click Browse, and select mailbox previously configured from the Active Directory. 4. Click OK to finalize setup. Setting up premium journaling Step 1: Create a new journaling mailbox 1. Select Start > All Programs > Microsoft Exchange Server 2007 > Microsoft Exchange Management Console. 2. Expand Recipient Configuration node and click on Mailbox node. 3. Select New Mailbox from the Actions pane. 4. Select User Mailbox option and click Next. 5. Select New user option and click Next. GFI Archiver 2 Installing GFI Archiver 31

32 Screenshot 12: New user mailbox details 6. Key in the User information details for the new user to which the new journaling mailbox will be assigned and click Next. 7. Ensure that the mailbox settings are correct and click Next. 8. Review the new mailbox summary for the new mailbox to create and click New. Step 2: Configure Premium journaling 1. Select Start > All Programs > Microsoft Exchange Server 2007 > Microsoft Exchange Management Console. GFI Archiver 2 Installing GFI Archiver 32

33 Screenshot 13: Configuring Journaling rules 2. Expand Organization Configuration > Hub Transport node and select Journaling tab. 3. From the Actions tab and click on New Journaling Rule. GFI Archiver 2 Installing GFI Archiver 33

34 Screenshot 14: Creating a new Journaling rule 4. Key in a name for the new rule and click Browse. Select the Journal address, preferably a mailbox within the existing Microsoft Exchange organization, from Active Directory. 5. <Optional> Configure: Scope - Select whether to journal all (Global), internal or external . Journal for recipient - Select specific recipient(s) for which this journaling rule applies. 6. Ensure that the Enable Rule option is enabled and click New. In Microsoft Exchange Server 2007, envelope journaling is automatically enabled by default Creating a Journal Mailbox in Microsoft Exchange Server 2010 Microsoft Exchange Server 2010 supports two types of journaling: Standard journaling: Configure a Mailbox store that enables the recording of in an organization. GFI Archiver can use Microsoft Exchange Server journaling to centralize all the s in a single mailbox for archival. This type of journaling is also called per-mailbox database journaling. GFI Archiver 2 Installing GFI Archiver 34

35 Premium journaling: Only available with Microsoft Exchange Enterprise client access license. It enables an administrator to setup custom journaling rules such as: Archive only incoming s Archive only outgoing s Archive s for a particular group. GFI Archiver utilizes this type of journaling by detecting and displaying these rules in the Data Sources Configuration Wizard. Which journaling method shall I use? Choose standard journaling to archive all s (inbound and outbound) for all users in your organization. Choose premium journaling if you want more control over the s to archive (For example, only for specific users or for inbound or outbound only). Premium journaling requires a Microsoft Exchange Enterprise client access license Set up standard journaling Step 1: Create a new journaling mailbox 1. Launch Microsoft Exchange Management Console. 2. Expand Recipient Configuration node and click on Mailbox node. 3. Select New Mailbox from the Actions pane. 4. Select User Mailbox option and click Next. 5. Select New user option and click Next. GFI Archiver 2 Installing GFI Archiver 35

36 Screenshot 15: New user mailbox details 6. Key in the User information details for the new user to which the new journaling mailbox will be assigned and click Next. 7. Enter an Alias for the journaling mailbox and click Next. 8. Click Next and review the new mailbox summary for the new mailbox to create and click New. Step 2: Configure standard journaling 1. Launch Microsoft Exchange Management Console. GFI Archiver 2 Installing GFI Archiver 36

37 Screenshot 16: Configuring a Mailbox Database 2. Expand Microsoft Exchange > Organization Configuration > Mailbox node. Right-click the Mailbox database and select Properties. GFI Archiver 2 Installing GFI Archiver 37

38 Screenshot 17: Mailbox Database properties 3. From the mailbox database properties dialog, select the Maintenance tab and select the Journal Recipient checkbox. Click Browse, and select the journaling mailbox previously configured. 4. Click OK to finalize setup Set up premium journaling Set up premium journaling 1. Launch Microsoft Exchange Management Console. 2. Expand Organization Configuration > Hub Transport node and select Journaling tab. 3. From the Actions tab, click New Journal Rule. GFI Archiver 2 Installing GFI Archiver 38

39 Screenshot 18: Creating a new Journaling rule 4. Key in a name for the new rule 5. Click Browse to select the journaling mailbox where to send journal reports. 6. <Optional> Configure: Scope - Select whether to journal all (Global), internal or external . Journal messages for recipient - Select specific recipient(s) for this journaling rule. 7. Ensure that the Enable Rule option is enabled and click New. In Microsoft Exchange Server 2010, envelope journaling is automatically enabled by default Creating a Journal Mailbox in Microsoft Exchange 2013 Step 1: Create a new Journal recipient 1. Launch Microsoft Exchange admin center. GFI Archiver 2 Installing GFI Archiver 39

40 2. Click recipients node. 3. Under mailboxes, select New from the toolbar. 4. Select New user and enter the required mailbox details. 5. Click save. Step 2: Create a new Journaling mailbox 1. Launch Microsoft Exchange admin center. 2. Click servers node, then click on databases node. 3. Select an existing Mailbox Database and click Edit from the toolbar. 4. Click maintenance node. 5. In the Journal recipient field, click browse and select the Journal recipient created in Step 1 above. 6. Click save. 2.5 Choosing and preparing a database As an archiving solution, GFI Archiver is highly dependent on your database infrastructure setup for high performance of data archival and retrieval processes. The following sections help you to understand the following options: Choosing your database type GFI Archiver Database (For evaluation purposes) Microsoft SQL Server Express (Recommended) Microsoft SQL Server It is highly recommended to use Microsoft SQL Server Express or Microsoft SQL Server as your database. The Firebird database included in the GFI Archiver installation is intended for evaluation purposes only Choosing your database type GFI Archiver can be configured to run in various hardware setups and combinations. The table below shows the typical recommended configurations. These guidelines and configurations may vary according to user activity and daily flow. GFI Archiver 2 Installing GFI Archiver 40

41 SUITABLE FOR NUMBER OF MAILBOXES TO ARCHIVE RECOMMENDED DATABASE TYPE WHERE EACH COMPONENT IS STORED Organizations that require a highly scalable solution 500 mailboxes or more Average archiving of more than 8000 items per day SQL Server with File Storage headers SQL Server Metadata SQL Server data On disk Organizations that require full auditing of user and database activity 50 mailboxes or more Average archiving of more than 8000 items per day SQL Server headers SQL Server Metadata SQL Server data SQL Server Small to medium organizations 150 mailboxes or less Average archiving of up to 6000 items per day SQL Server Express with File Storage headers SQL Server Express Metadata SQL Server Express data On disk Demo and Evaluation purposes ONLY 50 mailboxes or less Average archiving of up to 2500 items per day. GFI Archiver database headers Firebird database Metadata Firebird database data On disk GFI Archiver 2 Installing GFI Archiver 41

42 metadata is the information about s archived within GFI Archiver. It is highly recommended to use Microsoft SQL Server Express or Microsoft SQL Server as your database. The Firebird database included in the GFI Archiver installation is intended for evaluation purposes only Using GFI Archiver Database GFI Archiver ships with a Firebird database that is recommended for evaluation purposes. Ensure that the size of each Firebird database never exceeds 2GB. To minimize any potential performance issues, the following setup is strongly recommended when using the Firebird database: Physical HDD 1: Operating system and GFI Archiver installation. Physical HDD 2: Firebird database data store. Physical HDD 3: Mail database indexes. The above setup reduces data read/write operations on the same physical hard disk drive to improve performance. IMPORTANT Failing to follow the above recommendations may result in substantial performance degradation. Archive auditing feature is only available when s are archived in SQL Server. Microsoft SQL Server with File Storage option is not supported Using SQL Server Express SQL Server Express is recommended for medium sized organizations (approximately users) with an average mail flow of up to s/day. The recommended setup for GFI Archiver using a SQL Server Express 2005/2008/2012/2014 database is as follows: Physical HDD 1: Operating system and GFI Archiver installation. Physical HDD 2: Microsoft SQL Server data file (.mdf). GFI Archiver 2 Installing GFI Archiver 42

43 Physical HDD 3: Microsoft SQL Server log file (.ldf) Physical HDD 4: Mail database indexes. IMPORTANT Ensure that the.mdf and.ldf files are stored in a folder on the destination drive and not in the root directory. This configuration ensures that different processes are distributed to distinct physical hard disk drives, where metadata (information about the ) is stored in the database while the actual content resides as files on separate disk. This eliminates performance loss due to excessive data read/write operations on the same physical hard disk drive. For more information on how to install different versions of Microsoft SQL Server Express visit the Microsoft SQL Server website. Archive auditing feature is only available when s are archived in SQL Server. Microsoft SQL Server with File Storage option is not supported. There are however a number of SQL Server Express limitations to consider: Database size has a limit of 10GB (for SQL Server Express 2008 R2 and later only). This does not affect the amount of data that can be stored in a database. It uses 1 CPU only It uses a maximum of 1GB RAM. It is therefore highly recommended that: OPTION SQL Server Express and file system are used as the back-end database. Use only Monthly or BiMontly schedules based on your volumes This method uses SQL Server Express as the backend database and a separate location (not a database) for the binary sources files. This saves up on the SQL Server Express space required for archiving. For example, an of 5MB is stored by saving the header (60kb in size) in the database and the actual content (5MB) in the separate location. GFI Archiver automatically creates archive stores based on the predefined schedule. For SQL Express each database should approximately have less than 0.5 million s. For more information refer to Scheduling Archive Stores (page 169). If an Archive Store exceeds the maximum database size, GFI Archiver automatically creates a new Archive Store based on the configured New Archive Store Settings. This feature is only available for Archive Stores based on SQL Server Express databases. GFI Archiver 2 Installing GFI Archiver 43

44 IMPORTANT Configure Microsoft SQL Server Express to use Mixed Authentication mode for use with GFI Archiver Using Microsoft SQL Server Microsoft SQL Server is recommended for larger organizations (100+ users) with a substantial volume of s to archive (more than per day). For organizations with more than 500 users (or more than s per day) to archive s for, it is highly recommended to use Microsoft SQL Server with File Storage option. This substantially increases the archival capacity of GFI Archiver. For more information on how to install different versions of Microsoft SQL Server visit the Microsoft Developer Network website. Archive auditing feature is only available when s are archived in Microsoft SQL Server. For Microsoft SQL Server with File Storage option you can use the GFI Archiver Auditing features instead. For more information refer to Configuring Auditing (page 205). The recommended setup for GFI Archiver using a Microsoft SQL Server 2000/2005/2008 database is as follows: Physical HDD 1: Operating system and GFI Archiver installation. Physical HDD 2: Microsoft SQL Server data file (.mdf). Physical HDD 3: Microsoft SQL Server log file (.ldf) Physical HDD 4: Mail database indexes. IMPORTANT Ensure that the.mdf and.ldf files are stored in a folder on the destination drive and not in the root directory. This configuration ensures that different processes are distributed to distinct physical hard disk drives. This eliminates performance loss due to excessive data read/write operations on the same physical hard disk drive. After the first month of archiving, note the database data file size. With this value, estimate the archive database size after six months, for example. If you estimate that your archive database will be larger than 20 GB, you should consider configuring the Archive Stores management feature of GFI Archiver. IMPORTANT Configure Microsoft SQL Server to use Mixed Authentication mode for use with GFI Archiver. GFI Archiver 2 Installing GFI Archiver 44

45 To change to Mixed Authentication mode: 1. Right-click on the SQL Server node > Properties from the Enterprise Manager 2. Access Security tab and select SQL Server and Windows under Authentication. 3. Save settings. 2.6 Installing GFI Archiver To install GFI Archiver: 1. Double-click on: Archiver.exe to install GFI Archiver on 32-bit systems Archiver_x64.exe to install GFI Archiver on 64-bit systems 2. In the Choose Setup Language dialog, select the language you want to use during installation and click OK. 3. On the Welcome page, click Next. 4. (Optional) If the Installation Wizard detects any required missing components, the prerequisites are listed in the Installation Requirements window. Click Install Components to let the Wizard install the components for you or click cancel to install them manually. Click Next. If all installation requirements are met this step is skipped. For more information refer to System requirements (page 13). 5. If you want GFI Archiver to check for a newer build other than the one being installed, select Check for a newer build of GFI Archiver on the GFI web site and click Next. Otherwise, select Do not check for a new build and click Next. Checking for a newer build requires an active Internet connection. 6. Read the license agreement and select I accept the terms in the license agreement option. Click Next to continue. 7. Choose which directory service to use with GFI Archiver. GFI Archiver supports Microsoft Active Directory and GFI Directory services. It is recommended to use Microsoft Active Directory when available. Select from the following options depending on the type of installation: GFI Archiver 2 Installing GFI Archiver 45

46 ENVIRONMENT New installations on a machine where Microsoft Active Directory Service is installed. New installations on a machine where there is no Directory Service is installed. New installations or upgrades on a machine where an older version of GFI Directory is installed. OPTION Select one of the following options: Use the detected Microsoft Active Directory Service in your network Install and use GFI Directory Service on this machine Click Install to enable the Installation Wizard to install GFI Directory Service. When installation is complete, the GFI Archiver installation resumes automatically. Select one of the following options: Upgrade the local GFI Directory Service (Recommended) - upgrades the installed GFI Directory to the latest version, then resumes installing GFI Archiver Skip upgrade process - retains the installed version of GFI Directory and continues the GFI Archiver installation. 8. Click Next to continue by installing GFI Archiver to the default folder. For an alternative location, click Change and select a new installation path. 9. If you want to change the default values for the Website and Virtual Directory Alias, modify the values in the Website and Virtual Directory Alias fields. These values define which URL you use to access GFI Archiver. Click Next. 10. (Optional) If User Account Control (UAC) is enabled on the server where you are installing GFI Archiver, the installation Wizard warns you to disable UAC or launch Internet Explorer with 'Run as Administrator'. For more information refer to the following SkyNet article: Click Install. 12. On completion, click Finish to close the installation wizard. 2.7 Removing from Microsoft Exchange Once GFI Archiver is configured and your organization's is being archived correctly, you may want to create a mailbox management policy to free up space on the Microsoft Exchange server by deleting that has been archived. This can be accomplished by using the Archive Assistant or using the Microsoft Exchange retention policy Remove s from Exchange Server using Archive Assistant Configure GFI Archiver to archive s from user mailboxes and remove s from Microsoft Exchange as soon as they are archived. This process helps free up space and increase performance of your Microsoft Exchange server. To configure Archive Assistant: 1. Enable Auto-Archiving (Journaling) All s. For more information refer to Configuring Archiving Method (page 126). GFI Archiver 2 Installing GFI Archiver 46

47 2. Configure the Archive Assistant to Check for new s every X hours. This ensures that s are archived continuously. In the Delete Policy window, select the Permanently delete archived s immediately option to free up space on the Microsoft Exchange server. For more information refer to Configuring Default Import Settings (page 149). 3. s are archived only once with aid of the Single Instance Storage. The Archive Assistant then checks that the is archived and removes it from the mailbox Removing from Microsoft Exchange Server 2003 Once GFI Archiver is configured and your organization's is being archived correctly, you may want to create a Mailbox Management Recipient Policy in Microsoft Exchange to free up space on the Exchange server by deleting . Before you create a new recipient mailbox management policy, you must determine the following: What limits you want the policy to enforce The group you want the policy to control How you want the policy to handle messages that go past policy limits. Create a mailbox management recipient policy 1. Go to Start > Programs > Microsoft Exchange, and then click System Manager. 2. In the left pane of Exchange System Manager, expand Recipients, right-click Recipient Policies, point to New, and then click Recipient Policy. The New Policy dialog box appears. 3. Click to select the Mailbox Manager Settings check box, and then click OK. If you do not see the option for Mailbox Manager Settings, reapply the Exchange service pack. It may not have been correctly applied. 4. The Properties dialog box appears. Type a name for the recipient policy in the Name box. We recommend that you use a descriptive name, such as "Accounts Department Mailbox Settings." 5. Click Modify. The Find Exchange Recipients dialog box appears. 6. Click the General tab. In this example, mailbox management settings apply only to accounts that have an Exchange mailbox. Select only the Users with Exchange mailbox. 7. Click Storage to configure mailbox management recipient policies that are specific to a particular Exchange 2003 computer. Then, do one of the following: Click Mailboxes on this server, and then click Browse. The Select Exchange Server list box appears. Select the server that you want to use, and then click OK. GFI Archiver 2 Installing GFI Archiver 47

48 Click Mailboxes in this mailbox store, click Browse to search for a store, and then click OK. 8. Click the Advanced tab, and then click Field. You can now select any of the following options: User Contact Group Public Folder Points 8-11 are optional if you want to be specific for a particular mailbox/user/group/folder 9. For this example, click User, and then click Department to select Department in the field Value. 10. Under Condition, click any of the following: Starts with Ends with Is (exactly) Is not Present Not present 11. If you click Starts with, Ends with, Is (exactly), or Is not as your condition, type a value in the Value field. For example, click Is (exactly), and then type Accounts to find all employees who work for the accounts department. 12. Click Add to add the condition to the list. You can add additional conditions, but all conditions must be true for a match to be displayed. 13. After you have finished adding conditions, click Find Now. Any matches to the conditions are displayed in the new list that appears in the Find Exchange Recipients dialog box. 14. If the list displays the correct users for this recipient policy, click OK. If not, revise the search conditions until your search displays the correct users for this recipient policy. 15. Click OK. You receive the following message: When a recipient policy filter changes it does not mean that proxy addresses for recipients who may no longer be under the control of the policy will be automatically re-evaluated. For these recipients to receive proxies from the new policies that they belong to, use 'Apply this policy now' on the policies that now affect these recipients. GFI Archiver 2 Installing GFI Archiver 48

49 This message does not affect mailbox management recipient policies. Click OK. 16. Under Filter rules, the LDAP filter statement shows the current filter rule. Click the Mailbox Manager Settings (Policy) tab. 17. Under When processing a mailbox, click one of the following options for handling messages that go past the policy limits: Generate report only Move items to Deleted Items folder Move to System Cleanup folder Delete immediately Use caution when you use the Delete the message immediately option on folders, because users may have to recover their messages. 18. In the list of folders, select the folder that you want to configure, and then click Edit. 19. In the Folder Retention Settings dialog box, type an age limit when you want the selected processing action to occur, specify a size limit for the messages that you want the action to apply to, and then click OK. For example, if you type 90 and 2048, all messages that are older than 90 days and over 2 megabytes (MB) are processed. It is suggested to use a size of 1 KB if you want to remove even smaller messages. 20. Repeat steps 18 and 19 for each folder in the list that you want to configure. 21. Click Send notification mail to users after processing if you want to send users an message notifying them when their mailboxes have been processed. 22. Click Message to edit the notification message. Click the Insert the number of messages processed check box if you want a summary of the number of oversize messages processed. Click OK to return to the Properties dialog box. 23. (Optional) If you want to exclude certain message classes (for example, to prevent the processing task reports), click the Exclude specific message classes box, and then click Customize. The Message Classes dialog box appears. Type a message class in the Exclude Message Classes field. For example, type IPM. Task, and then click Add. Add all the classes you want to exclude. Message class types include: Calendar IPM.Appointment Contacts IPM.Contact Inbox IPM.Note Journal IPM.Activity Notes IPM.StickyNote Tasks IPM.Task Meeting Requests IPM.Schedule.Meeting.Request For a full list of message classes, visit the following Microsoft Web site: GFI Archiver 2 Installing GFI Archiver 49

50 24. After you have finished adding message classes, click OK to return to the Properties dialog box. 25. Click OK to close the Properties dialog box. The new mailbox management recipient policy is displayed in the right pane in Exchange System Manager. Configure mailbox management at the server level To schedule the day and time when a policy will run, change the settings at a server level. To do this, follow these steps: 1. Click Start > Programs > Microsoft Exchange, and then click System Manager. 2. In the left pane of Exchange System Manager, expand the Servers object. 3. Right-click the computer that you want to configure, and then click Properties. The <Servername> Properties dialog box appears. 4. Click the Mailbox Management tab to display the current settings. 5. Under Start mailbox management process, do one of the following: Click the drop-down list to select a time for the mailbox management to run. Click Customize, click a day in the left column, and then click a time on the top row. After you select the times that you want, click OK. 6. Click Reporting to select the type of report (either a detailed report or a summary) to create when mailboxes are processed. You must also select a recipient to receive the reports. Click Browse, select a recipient, and then click OK. You cannot send reports to distribution lists. 7. Click OK to accept the mailbox management settings Further information on how to use System Policies to configure mailbox storage limits in Exchange Server 2003 is available here: Removing Microsoft Exchange Server 2007 Once GFI Archiver is configured and your organization's is being archived correctly, you may want to create a Mailbox Management Recipient Policy in Microsoft Exchange to free up space on the Exchange server by deleting . GFI Archiver 2 Installing GFI Archiver 50

51 Before you create a new recipient mailbox management policy, you must determine the following: What limits you want the policy to enforce The group you want the policy to control How you want the policy to handle messages that go past policy limits. To use the Microsoft Exchange Management Console to create new managed content settings: 1. Open the Exchange Management Console. 2. In the console tree, expand Organization Configuration, and then click Mailbox. 3. In the result pane, click the Managed Default Folders tab (or the Managed Custom Folders tab), then select the managed folder for which you want to create managed content settings. 4. In the action pane, click New Managed Content settings. The New Managed Content Settings wizard appears. 5. On the Introduction page, in the Name of the managed content settings to be displayed in the Exchange Management Console box, enter the name for the new settings (for example, Accounts Department Retention Policy). 6. In the Message type box, you can select the type of message for which you want to create managed content settings. If you select All Items, the managed content settings that you create will apply to all the items in the managed folder (except for message types for which you have created separate content settings). You can use the New Managed Content Settings wizard repeatedly to create additional, separate content settings for different message types. When there are multiple content settings, specific settings always supersede general settings. For example, if there is a setting for All Mailbox Content and one for Voic , the Voic policy is applied to voice mail, but the All Mailbox Content policy applies to all other items. 7. To set message retention, select the Length of retention period (days) check box. The following options become active: a) In the box to the right of the Length of retention period (days) check box, type the number of days after which the message is to expire. b) In the Retention period starts list, select from the following options: When delivered, end date for calendar and recurring tasks The retention period for mail starts when it is delivered. The retention period for calendar items and recurring tasks starts at their end date. c) In the Action to take at end of retention period list, select from the following options: GFI Archiver 2 Installing GFI Archiver 51

52 Permanently delete Messages are permanently deleted and not recoverable by the user. Mark as past retention date Messages are displayed in a shaded, strikethrough font in Outlook, but no other action is taken. This expiration action is used to prompt the user to take some kind of action. 8. Click Next. 9. The New Managed Content Settings page provides a summary of the settings that you have applied. 10. To complete the New Managed Content Settings wizard, click New. 11. On the Completion page, click Finish to exit the New Managed Content Settings wizard. 12. To view the new managed content settings, in the result pane of the Exchange Management Console, expand the managed folder to which you applied the settings. 13. To edit a managed content setting that you have created, right-click it, and then click Properties. Further information on how to create an retention policy in Exchange Server 2007 is available here: Removing from Microsoft Exchange Server 2010 Once GFI Archiver is configured and your organization's is being archived correctly, you may want to create a Mailbox Management Recipient Policy in Microsoft Exchange to free up space on the Exchange server by deleting . Before you create a new recipient mailbox management policy, you must determine the following: What limits you want the policy to enforce The group you want the policy to control How you want the policy to handle messages that go past policy limits. Use the Exchange Management Console to create a retention policy 1. Open the Exchange Management Console. 2. In the console tree, expand the forest you want, and then navigate to Organization Configuration > Mailbox. 3. In the action pane, click New Retention Policy. 4. On the Introduction page, complete the following fields: OPTION Name Add Use this box to type a name for the retention policy. Click this button to add retention tags to the policy. To remove a tag from the policy, click the tag name, and then click Remove. GFI Archiver 2 Installing GFI Archiver 52

53 5. On the Select Mailboxes page, click Add to select the mailboxes to which you want to apply the retention policy. You can create a retention policy without applying it to any mailboxes. You can also apply the policy to mailboxes at a later time. 6. On the New Retention Policy page, review your configuration settings. To make any configuration changes, click Back. 7. To create the retention policy, click New. 8. On the Completion page, review the following, and then click Finish to close the wizard: A status of Completed indicates that the wizard completed the task successfully. A status of Failed indicates that the task wasn't completed. If the task fails, review the summary for an explanation, and then click Back to make any configuration changes. Use the EMC to apply a retention policy to a mailbox 1. In the console tree, expand the forest you want, and then navigate to Recipient Configuration > Mailbox. 2. In the result pane, select the mailbox to which you want to apply the retention policy. You can select multiple mailboxes by using the Shift or Ctrl keys. 3. In the action pane, click Properties. 4. In Mailbox User> Properties, on the Mailbox Settings tab, select Messaging Records Management, and then click Properties. 5. In Messaging Records Management, select the Apply Retention Policy check box, and then click Browse to select the retention policy you want to apply to the mailbox. 6. Click OK, and then in <Mailbox User> Properties, click Apply. Further information on how to create a new retention policy in Exchange Server 2010 is available here: Removing from Microsoft Exchange Server 2013 Once GFI Archiver is configured and your organization's is being archived correctly, you may want to create a Mailbox Management Recipient Policy in Microsoft Exchange to free up space on the Exchange server by deleting . GFI Archiver 2 Installing GFI Archiver 53

54 Before you create a new recipient mailbox management policy, you must determine the following: What limits you want the policy to enforce The group you want the policy to control How you want the policy to handle messages that go past policy limits. Step 1: Create a retention tag Use the Microsoft Exchange admin center to create a retention tag 1. Select compliance management > retention tags and click New. 2. Select one of the following options: OPTION Applied automatically to entire mailbox (All) Applied automatically to a specific folder Applied by users to items and folders (Personal) Select to create a default policy tag (DPT). You can use DPTs to create a default deletion policy and a default archive policy that applies to all items in the mailbox. Select to create a retention policy tag (RPT) for a default folder such as Inbox and Deleted Items. Use this option to create Personal Tags which Outlook and Outlook Web App users can use to apply a different archive or deletion setting than the folder or any archive or deletion policy applied to the entire mailbox. 3. Fill in the required information and click save. Step 2: Create a retention policy Use the Microsoft Exchange admin center to create a retention policy. 1. Select Compliance Management > Retention Policies and then click New. 2. On the new retention policy page, enter the following fields: OPTION Name Retention Tags Use this box to type a name for the retention policy. Click the Add button to select the Retention Tags you want to add to this retention policy. To remove a tag from the policy, click the tag name, and then click Remove. 3. Click save. GFI Archiver 2 Installing GFI Archiver 54

55 You can create a retention policy without applying it to any mailboxes. You can also apply the policy to mailboxes at a later time. Step 3: Apply a retention policy to mailbox users After you create a retention policy, you must apply it to mailbox users. You can apply different retention policies to different set of users. To assign the retention policy to a mailbox: 1. Launch Microsoft Exchange admin center. 2. Click recipients node. 3. Under mailboxes, select Edit from the toolbar. 4. Click mailbox features. 5. Go to the Retention policy field and from the drop down list select the retention policy created in the previous step. 6. Click save. Further information on how to create a new retention policy in Exchange Server 2013 is available here: Uninstall information To uninstall GFI Archiver: 1. Click Start > Control Panel > Programs > Uninstall a Program. 2. Select GFI Archiver from the list, and click Uninstall. 3. When Are you sure you want to uninstall GFI Archiver? appears, click Yes. 4. On completion, click Finish. GFI Archiver 2 Installing GFI Archiver 55

56 3 GFI Archiver Post-install Wizard After GFI Archiver is successfully installed, the Congratulations screen is displayed. Click Configure to start the post install wizard that assists in setting up GFI Archiver. The Post Install wizard will help you: TASK Enter a valid license key Setup Archive Store settings Select an Archiving Method A valid license key is required to use GFI Archiver after the product is installed. Use your purchased license key or enter a User Evaluation Key if you are in the process of evaluating GFI Archiver. A User Evaluation Key can be requested from Configure Archive Store settings that define properties such as name, database type and index locations. These settings are used as a template by GFI Archiver to automatically create new Archive Stores. The archiving method defines how Microsoft Exchange Server archives s within GFI Archiver Archive Stores. Choose your preferred archiving method from available options. Click Next to set up GFI Archiver for first use. 3.1 License configuration In the License Configuration screen, enter the license key obtained when purchasing your GFI Archiver product. Click Verify License Key, then click Next to continue. To evaluate GFI Archiver, request a free evaluation key from GFI Software Ltd Configuring New Archive Store Settings via Post Install Wizard Within GFI Archiver, Archive Stores can be described as the containers that contain the archived s. Archive Stores consist of several components, such as: A database where metadata is stored A database where both metadata and data is stored A disk location used as an index A disk location used as storage for data. Archive Stores are created based on an Archive Store profile that defines details such as Archive Store naming convention, database type, database file location, file location and index locations. Use the Archive Store Wizard to create your New Archive Store settings that will be used as a template to automatically create future Archive Stores. To configure New Archive Store Settings: 1. In the Post Install Wizard, click Next after entering a valid License Key. 2. Select where to store your archived s. Available options are: GFI Archiver 3 GFI Archiver Post-install Wizard 56

57 DATABASE TYPE Microsoft SQL Server with File Storage Recommended if you have more than 500 mailboxes to archive or an average mail flow of more than 8000/day. Select this option to prompt GFI Archiver to use a SQL Server to store the headers and metadata, and a disk location you specify to store the data. For more information refer to Configuring Archive Store - SQL Server (page 59). Choosing this option requires a SQL Server installation. Microsoft SQL Server Recommended if you have less than 500 mailboxes to archive, an average mail flow of more than 8000/day or if you need full auditing of both user and database activity. Select this option to prompt GFI Archiver to use a SQL Server to store both headers/metadata as well as data. For more information refer to Configuring Archive Store - SQL Server (page 59). Choosing this option requires a SQL Server installation. SQL Server Express with File Storage Recommended if you have less than 100 mailboxes to archive or an average mail flow up to s/day. Select this option to prompt GFI Archiver to use a SQL Server Express database to store headers and metadata and a disk location you specify to store the data. For more information refer to Configuring Archive Store - SQL Server (page 59). Choosing this option requires a SQL Server Express installation. This is freely downloadable from the Microsoft website. GFI Archiver Database Recommended for evaluation purposes only. Select this option to store all header/metadata in a Firebird database and the data in a disk location you specify. For more information refer to Configuring Archive Store - GFI Archiver Database (page 57). 3. Click Next and follow the Post Install Wizard to continue setup. Choosing this option does NOT require you to install the Firebird database. GFI Archiver will automatically create a database for you. 4. (Optional) Check Create a new Archive Store now to let GFI Archiver create the first archive store and click Next. A welcome is sent by GFI Archiver to confirm that the new archive store has been created Configuring Archive Store - GFI Archiver Database If you opted to use a GFI Archiver database, you will now be guided to create New Archive Store Settings that are used as a template by GFI Archiver to create new Archive Stores. GFI Archiver 3 GFI Archiver Post-install Wizard 57

58 Screenshot 19: Archive Store creation: Select locations 1. Browse and select the Database File, File and Search Index locations to use for the GFI Archiver database. Also, provide any required credentials to access the provided locations. OPTION Database file location Defines the location where the Firebird database file will be located. Key in or click Browse to select a location where to store this file. UNC paths are not allowed. file location Defines the location where the data files will be located. Key in or click Browse to select a location where to store this file. UNC paths are allowed. GFI Archiver 3 GFI Archiver Post-install Wizard 58

59 OPTION Search Index location Defines the location where the search index will be located. Key in or click Browse to select a location where to store this file. UNC paths are allowedfor more information refer to Configuring Index File Location Credentials (page 167). Use the following login and password to access the above UNC path Enable this option to allow input in the Login: and Password: fields. The credentials keyed in are used to access the UNC paths selected. 2. Click Next to continue setup. 3. (Optional) Check Create a new Archive Store now to let GFI Archiver create the first archive store. A welcome is sent by GFI Archiver to confirm that the new archive store has been created. 4. Click Finish Configuring Archive Store - SQL Server If you have opted to use a Microsoft SQL Server, Microsoft SQL Server with File Storage or SQL Server Express with File Storage, you will now be guided to set up a new Archive Store settings. Ensure SQL Server is installed in Mixed Mode authentication and TCP IP is enabled. GFI Archiver 3 GFI Archiver Post-install Wizard 59

60 Screenshot 20: Archive Store creation: Select database 1. In the Database Server Details screen, choose an SQL Server from the list of automatically discovered servers or manually provide the details. OPTION Select the database server to use to store the archived s. Manually specify the database server to use to archive your s. Enables you to select a SQL Server from the list of discovered Microsoft SQL Servers. Click Recheck to recheck for any servers that might have come online since the page loaded. Choose this option to disregard the list of discovered Microsoft SQL Servers and to specify the details of the server used for your Archive Store. 2. Click Next to continue. 3. If, in the previous screen, you chose to manually specify the details used to store your archived s, provide the Microsoft SQL Server database name in the Database Server field. If a database server was selected, continue with the next step. 4. Select the authentication method used to connect to the selected SQL Server. GFI Archiver 3 GFI Archiver Post-install Wizard 60

61 OPTION Integrated Windows Authentication Microsoft SQL Server Authentication Uses the login credentials of the currently logged on user to access the SQL Server. Keying in a username and a password is not required. Uses the username and password provided in the Username and Password fields to access the SQL Server. 5. Click Next to continue. 6. Provide the paths for the SQL Server data (.mdf) and log (.ldf) files. If an existing database was selected, skip to the next step. OPTION Use the default path as defined in the Microsoft SQL Server Data file location Use the same path for both data file and log file. Log File Location Instructs GFI Archiver to use the default paths configured within SQL Server. Uncheck this option to configure alternate paths. Defines the location used by GFI Archiver to store data files. Key in or click Browse to select the path. Instructs GFI Archiver to use the path in the Data & Log File Location text box as the location for the Log file. Uncheck this option to key in a custom log file location. Defines the location used by GFI Archiver to store the log files. Key in or click Browse to select the path. 7. Click Next to continue. GFI Archiver 3 GFI Archiver Post-install Wizard 61

62 Screenshot 21: Archive Store creation: Select locations 8. Provide the file locations required for the type of selected SQL Server type. Some options are not selectable depending on the chosen SQL Server type. For example, selecting Microsoft SQL Server with File Storage disables Database File Location and File Location options. OPTION file location Defines the location where the data will be located. Key in or click Browse to select a location where to store this file. UNC paths are allowed. GFI Archiver 3 GFI Archiver Post-install Wizard 62

63 OPTION Use the following login and password to access the above UNC path Search Index location Enable this option to allow input in the Login: and Password: fields. The credentials keyed in will be used to access the UNC paths selected. Defines the location where the search index will be located. Key in or click Browse to select a location where to store this file. UNC paths are allowed provided that the Search service has read/write access to the location. For more information refer to Configuring Index File Location Credentials (page 167). 9. Click Next to continue. IMPORTANT For more information refer to Choosing your database type (page 40). 10. (Optional) Check Create a new Archive Store now to let GFI Archiver create the first archive store. A welcome is sent by GFI Archiver to confirm that the new archive store has been created. 11. Click Finish. 3.3 Configuring Archiving Method via Post Install Wizard GFI Archiver offers several methods for archiving, based on your organization's requirements. Select from the following: ARCHIVING METHOD Manual archiving Archiving of all s Rule-based archiving Let users decide which s to archive. Users can manually archive a single , a whole folder of s or other files using the Archive Assistant. This archiving method does not require Microsoft Exchange. Any business using Microsoft Outlook can manually archive s irrespective of where their is hosted. Using the journaling feature of Microsoft Exchange, journaled s are copied by GFI Archiver and archived in a separate server. This takes out archiving activities from the Microsoft Exchange server activity of delivering , enabling you to free up space and increase performance, while providing excellent scalability and reliability for your archive store. GFI Archiver can be also be used with other servers and can poll from any mail server that supports IMAP and Active Directory. A solution for those businesses that do not wish to archive everything; rule-based archiving enables the administrator to selectively archive based on specific criteria. To include or exclude specific mailboxes from archiving, use the Mailbox Archive Restrictions feature. For more information refer to Configuring Archive Restrictions (page 136). GFI Archiver 3 GFI Archiver Post-install Wizard 63

64 Screenshot 22: Post install wizard - choose archiving method To configure the Archiving Method: 1. In the Post Install Wizard, click Next after configuring the new Archive Store Settings. 2. Select one or a combination of the following options: OPTION Manual Archiving This method enables users to manually archive messages, calendar items or files from their Microsoft Outlook client into GFI Archiver. Users need to deploy Archive Assistant to archive items manually. For more information refer to Configuring the Archive Assistant (page 225). GFI Archiver 3 GFI Archiver Post-install Wizard 64

65 OPTION Auto-Archiving (Journaling) GFI Archiver uses Microsoft Exchange Server journaling to retrieve items to archive in a single mailbox. A Journaling mailbox (configured in Microsoft Exchange) is required for the Auto-Archiving (Journaling) method and is configured through the post-install wizard. This enables you to start archiving items from a Microsoft Exchange Server. For more information refer to Setting up a journaling mailbox (page 65). If Auto-Archiving (Journaling) method is enabled, select one of the following options: All s - select to archive all s that pass through your configured mail servers. For more information refer to Managing the Mail Servers to Archive (page 128). 3. Click Next and follow the Post Install Wizard to continue setup. 4. Click Finish Setting up a journaling mailbox Rule-Based Archiving - archive s based on criteria specified in the configured Archiving Rules. For more information refer to Configuring Archiving Rules (page 132). If you have selected the Auto-Archiving (Journaling) method of archiving, you need to create a journaling mailbox. Journaling is a feature that enables the recording of in an organization. Through Microsoft Exchange Server journaling, you can channel the items to archive into a single mailbox. s and calendar items are then retrieved by GFI Archiver for archiving. To create the journaling mailbox on Microsoft Exchange Server, perform one of the following actions: Automatically create a journaling mailbox via the post install wizard Manually set up a journal mailbox for Microsoft Exchange Server 2003 Manually set up a journal mailbox for Microsoft Exchange Server 2007 Manually set up a journal mailbox for Microsoft Exchange Server 2010 Manually set up a journal mailbox for Microsoft Exchange Server 2013 IMPORTANT If journaling is not set up correctly, Auto-archiving (journaling) method of archiving will NOT work Creating a journal mailbox via the Post Install Wizard To set up journaling for Microsoft Exchange Server 2007 or later installations using the post install wizard: 1. In the Configuration Wizard that opens after creating the Archive Store Profile, click Next. GFI Archiver 3 GFI Archiver Post-install Wizard 65

66 Screenshot 23: Journal Mailbox wizard 2. From the Mail Server to Archive Wizard page, select from the following options: a. Select a journal mailbox from the detected journal mailbox list below. Select this option if you have already created and configured a journaling mailbox. Select a mailbox from the list of detected mailboxes. For more information refer to Setting up a journaling mailbox (page 65). i. Select one of the detected mailboxes and click Next. ii. In the Journal Mailbox Credentials window click Next again to complete setup. iii. When you receive the message Mail Server to Archive configured successfully!, click Finish. b. Let the wizard create a new journal mailbox to use to start archiving your s Select this option to automatically create a new Journal Mailbox using the wizard. The new journal mailbox will be created on the selected Microsoft Exchange Server from the list of detected servers. This feature works only with Microsoft Exchange Server 2007 Service Pack 2 onwards. GFI Archiver 3 GFI Archiver Post-install Wizard 66

67 i. Select Let the wizard create a new journal mailbox to use to start archiving your s and click Next. ii. When prompted, key in the required details for the Journal Mailbox. Available options are: OPTION Let GFI Archiver create a new journaling user for you to associate the mailbox/es to. Use existing journaling user to associate the mailbox/es to. Select this option if you have already configured a journaling mailbox on a mail server. In the Detected mailboxes field, select the mailbox database you want to connect to from the list of detected mailboxes. This option is enabled if a journaling user is discovered. If this option is enabled, the discovered journaling user will be associated with the 'Detected mailboxes'. iii. Click Next. iv. Provide the required Administrative credentials to complete the setup. c. Manually enter journal mailbox details Provides the facility to create a new Journal Mailbox while providing all the details required to create such mailbox. These may include specifying a Mailbox Store, the connection method, ports used and credentials. Choose this option to configure a Journal Mailbox in Microsoft Exchange Server i. When connecting via IMAP, key in the following required details for the Journal Mailbox: OPTION Connect using IMAP Mail Server IMAP Port Defines the connection method used to connect to the Mail Server where the new Journal Mailbox will be created. IMAP - Available only if GFI Archiver is not installed on the same machine as Microsoft Exchange Server 2003 or Shows the detected name of the mail server of where the Journal Mailbox resides. Default is set to 143. If SSL is not enabled, the connection will be unencrypted. Use SSL Click to use SSL and enforce encryption. IMAP Port number changes to 993 automatically. Login/Password Enables you to key in a login name and a password used to connect to the selected mail server. Login names containing spaces are not permitted. Folder Defines the default folder that is used to journal s. Default value: Inbox. ii. When connecting via EWS, key in the following required details for the Journal Mailbox: OPTION Connect using EWS Defines the connection method used to connect to the Mail Server where the new Journal Mailbox will be created. Exchange Web Services (EWS) is available only for Microsoft Exchange Server 2007 SP1 or GFI Archiver 3 GFI Archiver Post-install Wizard 67

68 OPTION Login:/Password: Enables you to key in a login name and a password used to connect to the selected mail server. Login names containing spaces are not permitted. Folder Public Folder Exchange Server Host Defines the default folder that is used to journal s. Default value: Inbox. Check to mark the folder as a public folder so that GFI Archiver can connect to it as such. GFI Archiver will assume that the folder path entered is that of a public folder located within the public folder database. Select from the following options: Auto Discovery (Recommended) Manual Host to Exchange/Office 365 CAS - enter the Exchange Server IP address or client access server (CAS) host name. The CAS is a server role that handles all client connections to an Exchange Server. When connecting using EWS for Office 365, enter the Office 365 host name. iii. Click Next to continue setup. 3. Click Finish to finalize Journal Mailbox setup. 3.4 Finalizing the Post Install setup On completing the requirements of the Post Install wizard, you can now start using GFI Archiver to archive s on your Microsoft Exchange Server. GFI Archiver 3 GFI Archiver Post-install Wizard 68

69 Screenshot 24: Post Install Wizard completed successfully Confirm that the setup for Licensing, the Archive Store Settings and Archiving Method are marked as completed and click Finish. 3.5 Test your setup Depending on the Archiving Method chosen during the post installation tasks, test your setup to ensure that s are archived successfully. Testing Manual Archiving 1. Open a Microsoft Outlook installation where Archive Assistant has been deployed. For more information refer to Configuring the Archive Assistant (page 225). 2. Select an and click the Archive button. 3. In GFI Archiver, go to Archive tab. GFI Archiver 3 GFI Archiver Post-install Wizard 69

70 4. Ensure the correct Archive Store is selected and verify that the archived using the Archive Assistant is displayed in the Conversation pane. Testing Archiving of Auto-Archiving (Journaling) All s 1. Create a new and send it to an address that belongs to a mailbox that is being archived. 2. In GFI Archiver, go to Archive tab. Screenshot 25: Search for 3. Ensure the correct Archive Store is selected and verify that the archived is displayed in the Conversation pane. Testing Rule-based Archiving 1. Ensure that Archiving rules have been configured. For more information refer to Configuring Archiving Rules (page 132). 2. Create a new based on the criteria configured in the Archiving Rules and send it to a valid address. 3. In GFI Archiver, go to Archive tab. 4. Ensure the correct Archive Store is selected and verify that the archived is displayed in the Conversation pane. GFI Archiver 3 GFI Archiver Post-install Wizard 70

71 When satisfied that GFI Archiver is archiving s correctly, you may want to set up mailbox management policies that remove from your Microsoft Exchange server. Refer to the following sections in this guide for more information: Removing s from Microsoft Exchange Server 2003 Removing s from Microsoft Exchange Server 2007 Removing s from Microsoft Exchange Server 2010 Removing s from Microsoft Exchange Server Using the Port Change Tool The Port Changing Tool enables you to check for port conflicts on the server where GFI Archiver is installed and change remoting ports quickly and easily. IMPORTANT After upgrading GFI Archiver from a previous version, port numbers are reverted back to their original default setting, so you will need to run the Port Changing Tool again. Screenshot 26: Port Change Tool user interface To use the Port Change Tool: 1. Launch the tool from Program Files > GFI\Archiver > Tools > PortChange and click PortChange.exe GFI Archiver 3 GFI Archiver Post-install Wizard 71

72 Fields with a yellow background denote contents are read-only and cannot be changed. 2. Click Check Port Conflict to identify any ports on your machine that are being used by another application. The tool stops and restarts GFI Archiver services during this process. If a conflict is identified, the conflicting port number is marked in red. Ports without conflict are marked in green. 3. Type a new value in the Change To field of the port you want to update, then click Apply Port Change(s). The tool checks again for any port conflicts with the newly entered value and applies the change. 4. (Optional) If you need to restore default port numbers on the GFI Archiver machine, click Reset, then click Apply Port Change(s). GFI Archiver 3 GFI Archiver Post-install Wizard 72

73 4 Upgrading from previous versions 4.1 Why upgrade to GFI Archiver 2015? GFI Archiver 2015 includes a number of new features aimed at making data archiving an easier job for you, with improved user experience and performance. Most importantly, this edition includes: File History Retention policies - File History Retention Policies define the length of time that an archived version of a file is retained in the Archive Store before it is deleted. Integration with GFI Directory service - GFI Directory is a directory of users and groups that integrates with GFI Archiver in environments where there is no Microsoft Active Directory available. For GFI MailArchiver 6 and later, you can upgrade directly to the version of your choice. For example, if you want to upgrade from GFI MailArchiver 7 to GFI Archiver 2014, there is no need to install the versions in between. 4.2 Upgrading to GFI Archiver from versions earlier than GFI MailArchiver 2012 In GFI MailArchiver 2012, Archive Store Management was redesigned to automate the Archive Store creation process. This has an effect on how several features within the product work. There are also new requirements that must be met for new Archive Store automation to work. Archive Stores from an older version of GFI Archiver can be upgraded and used under the new architecture. When the upgrade procedure is carried out, GFI Archiver prompts you to upgrade all existing Archive Stores. This is mandatory in order for GFI Archiver to automatically detect a date range for each archive store. Once this is done then all Archive Stores will have their respective date ranges assigned and new items can be archived to them. Empty Archive Stores will be marked as invalid and can be safely deleted. Other important features in GFI MailArchiver 2012 and later: File Archive Assistant - The File Archive Assistant enables file archiving directly from your desktop to GFI Archiver. Install the simple application on client computers and let users archive files by drag and drop, increasing productivity and providing file backup features. For more information refer to Deploying the File Archive Assistant (page 233). Delete in Outlook Connector / IMAP - Enable deletion in GFI Archiver and upgrade the Outlook Connector to use the new functionality to delete s. Please check your compliance regulations before enabling deletion. Folder Delete and Rename - folders can now be renamed and deleted directly from the GFI Archiver Web Interface. A new permission has been added to grant users access to folder rename. Roles and Permissions where you can configure the type of permissions assigned to users, for example, by granting specific users deletion rights on archived items or permission to generate MailInsights reports on behalf of other users. For more information refer to Configuring Roles and Permissions (page 181). The introduction of the Archive Assistant that helps you set up a schedule to automatically archive items s directly from outlook. GFI Archiver also provides different options to GFI Archiver 4 Upgrading from previous versions 73

74 automatically delete s from the mailbox after the import process is complete. For more information refer to Importing s and Calendar Items via the GFI Archiver Archive Assistant (page 148). The Full Access Group, which in previous versions enabled members of Active Directory groups to browse and search all items stored in archive stores has been replaced by the Full Access Role. This is configurable from Roles and Permissions. Anywhere, anytime access via IMAP to the archive from any device - iphone, ipad, Android and more. Choose how to archive using rule-based archiving which allows for selective archiving and the deletion of archived items. Extract business intelligence from your archive - MailInsights reports can help you identify potential security breaches, legal risks and productivity issues by extracting key data from your archive. Reports can be issued on demand or scheduled and sent to your inbox on a regular basis What benefits do the new Archive Stores offer? New functionality within GFI Archiver automatically creates new Archive Stores ensuring all archived items are correctly categorized into their respective Archive Stores, enabling users to manage and browse the archive better and in a more organized fashion. As soon as a new item is waiting to be archived, GFI Archiver categorizes the item based on the received date and assigns the item to the respective Archive Store. If no valid Archive Store is found, a new one is created automatically based on the New Archive Store Settings configured using the Post Install Wizard. A valid Archive Store is one that is not marked as Full or Read-only. You can prevent archiving in a particular archive store. This will mark the archive store as full and a new archive store will be created when new items need to be archived to that particular date range. For more information refer to Editing Existing Archive Store Details (page 164). Another new feature related to Archive Stores is the ability to define a naming pattern for new Archive Stores. This pattern ensures consistency, creates uniformity and makes it more understandable to the users when they are browsing their Archive Stores. The table below lists the new feature requirements and changes: FEATURE / REQUIREMENT Database Schema Upgrade Databases cannot be created manually Ensure that the Database Schema is upgraded during the installation / upgrade process, otherwise Archive Store automation is not implemented and GFI Archiver 2012 does not work. The Database Schema can also be upgraded manually using the Database Schema Upgrader tool. For more information refer to Upgrading the Database Schema (page 179). Archive Stores can no longer be created manually. Archive Store management is an automated process handled by GFI Archiver. GFI Archiver 4 Upgrading from previous versions 74

75 FEATURE / REQUIREMENT Automatic Archive Store Creation New Archive Store Settings Scheduling Archive Stores No active / inactive Archive Store A read-only Archive Store A full Archive Store Single instance storage Importing items into GFI Archiver To facilitate Archive Store management, GFI Archiver creates new Archive Stores as required. The new Archive Stores are created when s are received into GFI Archiver from Journaling or from Manual Archiving, based on the template settings specified in the New Archive Store Settings. A template for automatically creating new Archive Stores is created based on New Archive Store Settings specified during post installation tasks. This template can be modified later from the GFI Archiver UI. For more information refer to Configuring New Archive Store Settings (page 160). Archive Stores are automatically created periodically on a predefined schedule. The default and recommended rollover period is Bi-Monthly. For more information refer to Scheduling Archive Stores (page 169). Created Archive Stores remain active until the Archive Store is full, or set as read-only, so archived items with dates that span the Archive Store period are archived within the respective container. An Archive Store can be set as Read-only. When this happens, a new Archive Store for the same period is created when an item that falls within that time bracket needs to be archived. For more information refer to Editing Existing Archive Store Details (page 164). A new Archive Store for the same period is created if the recommended size limit for that Archive Store is reached. This feature is only available for Archive Stores based on SQL Server Express and Firebird databases. Using a single-instance storage system, GFI Archiver ensures that no duplicate items are kept within the same Archive Store. When using the Import Export Tool to import items for archiving in GFI Archiver, the items are sorted and archived according to their date without the need of creating a plan. New Archive Stores are created as required if none exist for a particular period. If an is imported for 1 user, then all recipients / senders in the have ownership of that , and they can access it. Archive Stores created during import process can be used for normal GFI Archiver operations when s are archived from journaling or manual archiving. For more information refer to Using the Import Export Tool (page 252). 4.3 Before you upgrade For all versions: 1. Ensure that you are logged on as Administrator or using an account with administrative privileges. 2. Before starting installation, save and close all open applications on the machine. 3. Check all the System requirements before proceeding with upgrade. For more information refer to System requirements (page 13). GFI Archiver 4 Upgrading from previous versions 75

76 IMPORTANT Microsoft SQL Server 2000 is no longer supported by GFI Archiver. Upgrade to a newer SQL version before upgrading GFI Archiver. 4. When you upgrade to a new version, you will need to upgrade your license key through the GFI Customer Area. Further information is available in this article: UpgradeInformation When upgrading from GFI MailArchiver 2011 or older To ensure that archive store date range is set as desired, perform the following tasks before upgrading: 1. Launch the GFI Archiver web interface as an administrator 2. Go through the following sections and ensure that settings are up to date and valid: Configuration > Archive Stores > Schedule Archive Store (ensure that a Periodic Schedule is configured) When upgrading from GFI MailArchiver 5 or older GFI MailArchiver 5 or 4 should not be upgraded to the latest version directly. Use the following upgrade path: 1. Upgrade to GFI MailArchiver 6 build first (please contact GFI technical support in order to obtain the installer). 2. Upgrade to the latest version. When upgrading from GFI MailArchiver 3 or older Refer to the following article: Upgrading GFI Archiver Before upgrading GFI Archiver, ensure that you are logged on as Administrator or using an account with administrative privileges and disable any anti-virus software running on the server where GFI Archiver is installed. To upgrade GFI Archiver: 1. Double-click: Archiver.exe to upgrade GFI Archiver on x86 systems Archiver_x64.exe to upgrade GFI Archiver on x64 systems 2. In the Welcome page, click Next. 3. Select whether to check for a newer build of GFI Archiver on the GFI Website. Click Next to continue. GFI Archiver 4 Upgrading from previous versions 76

77 4. Read the license agreement and select I accept the terms in the license agreement option. Click Next to continue. 5. If upgrading from a previous version of GFI Archiver, key in the administrator address and license key. Click Next to continue. Otherwise skip to the next step. To upgrade the license from a previous version or to evaluate GFI Archiver, click Tell me more and apply for a key. For further information refer to: 6. If you need to change the default values for the Website and Virtual Directory Alias, modify the values in the Website: and Virtual Directory Alias: fields. These values define which URL you use to access GFI Archiver. Click Next. 7. Click Install to install GFI Archiver. 8. Click Upgrade to upgrade your existing database schemas to the new GFI Archiver schema and click Next to continue setup. IMPORTANT It is highly recommended to upgrade all Database Schemas to ensure GFI Archiver works correctly. For more information refer to Upgrading the Database Schema (page 179). To continue setup without updating your database schemas, select Skip Database schema upgrade. I will upgrade this later. and click Next. 9. If the logged on user does not have sufficient privileges on the Microsoft SQL server, a username / password dialog is shown. Enter the 'sa' account and password of the Microsoft SQL server. 10. Click Finish to close the installation wizard. 4.5 Upgrading Client Tools When GFI Archiver is upgraded to a more recent version, any client tool in use with GFI Archiver must also be upgraded to ensure seamless integration. The following is a list of GFI Archiver client tools: Archive Assistant File Archive Assistant Outlook Connector To upgrade, use the installation files from the GFI Archiver installation folder: \GFI\Archiver\Client Tools GFI Archiver 4 Upgrading from previous versions 77

78 4.6 Post upgrade actions Check licensing A valid license key enables you to use GFI Archiver without any restrictions. To review the currently installed license key, select Configuration and click Change license key. For more information refer to Viewing and editing license keys (page 211). UPGRADE TYPE From the same version but an older build If previous license key was full you will not be asked for a license key during installation. Once the UI is loaded, you will not be asked to enter the key. If previous license key is expired you will not be asked for a license key during installation. You will be asked to enter the key in post installation. If previous license key was an evaluation key you will not be asked for a License key during installation. If evaluation license key is expired, you will be asked to purchase a key in post installation. If evaluation license key is not expired, you will not be asked for a key. 'Older build' refers to compiled GFI Archiver software for the same version. From a previous version of GFI Archiver The previous license key is not valid. Enter the new license key during installation when prompted. Refer to: GFI Archiver 4 Upgrading from previous versions 78

79 5 Using GFI Archiver GFI Archiver helps you maintain an easily accessible archive of correspondence, calendar items and documents, eliminating the need for PST files and meet a growing number of compliance and ediscovery regulations. With the reporting capabilities of MailInsights business intelligence tools, you are able to get the most from your archived items. Identify legal risks and manage productivity with reports based on the business-critical information in your archive. Read the following sections for information related to: Logging in GFI Archiver Monitoring operations using the dashboard Browsing archived s Working with s Searching for archived s Accessing multiple mailboxes Generating MailInsights reports Changing the display language and other options 5.1 Logging in to GFI Archiver Select one of the following options to log in GFI Archiver: Go to Start > GFI Archiver > GFI Archiver. The application loads in your default Internet browser. Key in your domain credentials (username and password used to login to Windows ) when prompted. Alternatively, from your Internet browser, key in the following URL: Archiver host name>/<gfi Archiver virtual folder name> For example: By default, GFI Archiver does not require any login credentials while logging in. It will instead use the credentials of the currently logged in user. Closing your browser session logs off the currently logged on user from GFI Archiver. To login as a different user, log off your profile and log in using a different Windows user. If you are logging in from a computer that is not joined to the domain where GFI Archiver is installed, you will be prompted to key in the credentials used to log in the domain where GFI Archiver is installed. GFI Archiver 5 Using GFI Archiver 79

80 5.2 Using the Home tab Use the GFI ArchiverHome tab, to easily monitor your installation. The graphical and statistical information provides a real-time overview of the general operational parameters of GFI Archiver. It also helps to identify any issues before these have serious repercussions on your system. Screenshot 27: The GFI Archiver dashboard From the GFI Archiver interface, select Home tab. The information is displayed in various screen elements grouped by type. The sections below describe each section and how to interpret the data presented: Status overview Servers Archive Stores flow Event viewer GFI Archiver 5 Using GFI Archiver 80

81 5.2.1 Status overview Screenshot 28: GFI Archiver Heartbeat The Status Overview area shows information that enables you to quickly identify issues related to various components of GFI Archiver, such as any unresponsive servers. View the following tabs to investigate any interruptions in service: OPTION Services Journaling Mailboxes SQL Servers Licensing Shows current status of background services used by GFI Archiver. Displays a list of configured journaling mailboxes. For more information refer to Adding a new journaling mailbox (page 129). Shows the SQL Servers configured to archive . For more information refer to Choosing and preparing a database (page 40). The Licensing tab shows if the current license is valid and whether the installation is in evaluation or fully licensed mode. It also indicates the number of licensed users, the number of enabled users and information related to how long the product has been in operation Servers Screenshot 29: Servers area GFI Archiver 5 Using GFI Archiver 81

82 The Servers area provides you with information on how much disk space you have free on the Server where GFI Archiver is installed. This enables you to easily keep track of any servers that are running out of disk space and to take remedial action before you run out of disk space Archive Stores Screenshot 30: Archive Stores area The Archive Stores area provides information about the total number of s stored in GFI Archiver and the number of Archive Stores used. This information enables you to identify whether s are being archived correctly. When Legal Hold is enabled, a message is displayed in this window. For more information refer to Configuring Legal Hold (page 199) Flow Screenshot 31: GFI Archiver flow area GFI Archiver 5 Using GFI Archiver 82

83 The Flow graph provides a graphical overview of the quantity of s that GFI Archiver is archiving. Spikes or dips that fall outside of the normal flow should be investigated since this can indicate that journaling is not functioning correctly. Customize the Flow graph to view the flow for all journal mailboxes, a single mailbox or a specific period. To customize the view use the provided controls and click Refresh Event Viewer Screenshot 32: Event Viewer tab The Events Viewer window provides information about GFI Archiver events. The messages provided here enable you to gain information about system processes that are typically hidden from the system administrator s view, but which can lead you to discover that some system functions require your attention. 5.3 Browsing Archived items 1. From GFI Archiver, select Archive tab. Screenshot 33: Browsing Archived s GFI Archiver 5 Using GFI Archiver 83

84 2. In the Archive tab, you can view archived items for all the mailboxes that you have been granted access to. You can also perform several actions as described in the table below. OPTION Enables you to search for s. Key in the words or phrases to search for and click. Results are displayed in the s pane. Hides the preview pane. Shows the preview pane. Toggles the preview pane from displaying s at the bottom to displaying s at the side of the list page. Displays s in message view. Displays s in mailbox view. Switch to calendar view and display archived calendar items. Switch to file history view and display a list of files archived by the File Archive Assistant. Displays the list of mailboxes the currently logged in user has access to. From the accounts list, select the Archive Store to view mailboxes for form the List accounts in archive option. Click Close to exit Account list. Deletes the selected s if Deletion has been enabled by your System Administrator. If Deletion is not enabled, this icon will not be displayed. s cannot be deleted from Read-only Archive Stores or when Legal-hold is enabled. By default, GFI Archiver displays 25 items per page. To change this value, click the user name displayed on the top right hand corner of your screen and change the value of the Number of s to display per page option. Click Save. 5.4 Working with archived items Within the GFI Archiver Archive tab, you can view and take action on different types of archived items. Switch between conversations and calendar items using the provided controls in the task bar. For more information refer to Browsing Archived items (page 83). To view an or an archived file, select the from the mailbox or message view. This will display the selected item in the preview pane. Double click an or archived file to view it in the view window. GFI Archiver 5 Using GFI Archiver 84

85 Screenshot 34: Working with archived items within GFI MailArchiver To open an archived calendar item, switch to calendar view. Select the item to view. Click once on the item to view details in the calendar window. Depending on the type of archived item selected, the following actions can be performed when viewing the contents of archived items: OPTION View /calendar item header. Click to view or calendar item headers. These are displayed in a panel. Click this button again or select close to close panel. View conversation thread Click button to view the whole conversation in the mail view window. All s forming part of the conversation are listed. Click this button again or select close to close the panel. GFI Archiver 5 Using GFI Archiver 85

86 OPTION Edit or calendar item labels (Personal and Global) Enables you to categorize s and calendar items through labeling. This feature is useful during searches for specific types of archived items. For example search all items labeled as Important. To add a label: 1. From Available Labels, key in a new label or select an existing one. 2. Click Label to label with the keyed in or selected label. To remove a previously assigned label: 1. Select a previously assigned label. 2. Click Remove label. Click this button again or select close to close panel. Labels are displayed in the Labels field in black. Labels assigned at an organization level through categorization policies are in red. You cannot remove categorization policies labels from an . Restore /calendar item Restores s or calendar items using the OneClick Restore feature that restores an archived item to a specific mailbox or forwards a copy to an address. In the restore panel, key in the address where to send a copy of the current item and click Restore /calendar item. Save to disk (EML format) Downloads the whole to disk including any attachments, in.eml format. This format is compatible with a number of clients such as Microsoft Outlook Express, Windows Mail, and Mozilla Thunderbird. In the File download dialog box, select Save, and select the location where to save the file. Save to disk (MSG format) Downloads the whole to disk including any attachments, in.msg format, which is compatible with Microsoft Outlook. In the File download dialog box, select Save, and select the location where to save the file. Download Calendar Item Downloads the whole to disk including any attachments, in.msg format, which is compatible with Microsoft Outlook. In the File download dialog box, select Save, and select the location where to save the file. Print /calendar item Displays archived item in a printer friendly format in a new browser window. Use the print function of your browser to print the item. Show images in Use this button to display embedded images within the . Mark as not SPAM Use this button to mark as not SPAM an that was previously identified as SPAM by an anti-spam solution. Requires a SPAM retention policy to be set up GFI Archiver 5 Using GFI Archiver 86

87 OPTION Delete /calendar item Deletes the current item if Deletion has been enabled by your System Administrator. If Deletion is not enabled, this icon will not be displayed. Archived items cannot be deleted from Read-only Archive Stores or when Legal-hold is enabled. Show Calendar Item Events Click button to view the Calendar Item Events in the mail view window. Download When viewing archived files, an additional Download link is provided in the body. Click this link to download the file and save it to disk. 5.5 Searching archived items When searching for archived items, such as s, files, calendar items or faxes, GFI Archiver queries the index and retrieves any matching item with its respective attachment. Within GFI Archiver, you can search using: OPTION Quick Search Use the text box in the toolbar to search all archived s for the selected user across all Archive Stores. In the Quick Search text box, you can also use the following wildcards:? - Matches any single character * - Matches any string of characters Simple Search Advanced Search For example: To search for s containing the word Swiss, key in sw??s or sw*s. Expand the Quick Search to filter the search by simple criteria such as Sender, Receiver, Subject, Date and other information. For more information refer to Using Simple Search (page 87). Use advanced options for an extensive range of search options. For more information refer to Using Advanced Search (page 90). s matching the search query are displayed in the s pane. GFI Archiver displays up to 25 s per page. If more than 25 s are matched for each search query, GFI Archiver spreads the s out on separate pages. Use the slider at the bottom of the pane to change from one page to the next Using Simple Search The Simple Search is an extension of the Quick Search feature that enables you to use additional search criteria when searching for s, files, calendar items or Fax/SMS messages in all Archive Stores. To use Simple Search: 1. From the Archive tab, click the drop down icon next to the Search text box. GFI Archiver 5 Using GFI Archiver 87

88 Screenshot 35: Simple Search options 2. In the Search for area, select to search for s in all Archive Stores. Use the following search features: OPTION Contains Subject Sent date From To Attachment Advanced options Reset Save Search Enter a keyword to search for. You can also use the following wildcards:? - Matches any single character * - Matches any string of characters Search for s having a specific subject. Defines the date when the to search for was sent. Specify the address or Active Directory display name of the sender for which to search s. Specify the address or Active Directory display name of the recipient for which to search s. Search for s that have some specific content anywhere in the attachment. Click link to advanced options for an extensive range of search options. For more information refer to Using Advanced Search (page 90). Resets the search conditions and enables you to start all over again. Saves the search conditions as a saved search query that can be triggered at any time. Saved searches are displayed in the Classifications window under Archive tab. Starts the search for the archived s. Results are returned as per the conditions selected. 3. In the Search for area, select File to search for archived Files in all Archive Stores. Use the following search features: OPTION File Name File Type Last Modified Date Advanced options Enter the full file name or part of the file name to search for. You can also use the following wildcards:? - Matches any single character * - Matches any string of characters Specify a File Type from the available list or select Any (Default). Select an option from the available list or select Custom and specify a date range using the calendar controls. Click link to advanced options for an extensive range of search options. For more information refer to Using Advanced Search (page 90). GFI Archiver 5 Using GFI Archiver 88

89 OPTION Search Reset Save Starts the search for the archived s. Results are returned as per the conditions selected. Resets the search conditions and enables you to start all over again. Saves the search conditions as a saved search query that can be triggered at any time. Saved searches are displayed in the Classifications window under Archive tab. 4. In the Search for area, select Calendar to search for archived calendar items in all Archive Stores. Use the following search features: OPTION Contains Organizer Subject Invited Attendees Start of Event Location Advanced options Search Reset Save Enter the full file name or part of the file name to search for. You can also use the following wildcards:? - Matches any single character * - Matches any string of characters Specify the name of the event organizer. Search for calendar items having a specific subject. Specify the name of persons invited to an event. Select an option from the available list or select Custom and specify a date range using the calendar controls. Specify the name of the location where an event is taking place. Click link to advanced options for an extensive range of search options. For more information refer to Using Advanced Search (page 90). Starts the search for the archived s. Results are returned as per the conditions selected. Resets the search conditions and enables you to start all over again. Saves the search conditions as a saved search query that can be triggered at any time. Saved searches are displayed in the Classifications window under Archive tab. 5. In the Search for area, select Fax to search for archived Fax and SMS messages in all Archive Stores. Use the following search features: OPTION Contains Type Sent date From To Advanced options Search Reset Save Enter the full file name or part of the file name to search for. You can also use the following wildcards:? - Matches any single character * - Matches any string of characters Switch between Fax and SMS using the drop down list. Select from available list to define the date when the Fax or SMS to search for was sent. Specify the address of the sender for which to search. Specify the address of the recipient for which to search. Click link to advanced options for an extensive range of search options. For more information refer to Using Advanced Search (page 90). Starts the search for the archived s. Results are returned as per the conditions selected. Resets the search conditions and enables you to start all over again. Saves the search conditions as a saved search query that can be triggered at any time. Saved searches are displayed in the Classifications window under Archive tab. GFI Archiver 5 Using GFI Archiver 89

90 The Fax Search option is displayed only when the Fax Archiving Search Tab is enabled by the GFI Archiver Administrator Using Advanced Search The Advanced Search is an extension of the Simple Search feature that enables you to use a wide range of search criteria when searching for archived items. To use Advanced Search: 1. From the Archive tab, click the drop down icon next to the Quick Search text box and select Advanced options. Screenshot 36: Advanced Search Options 2. In the Advanced Search Options area, use the following advanced search features: OPTION Search s for Archive Store Sent date Includes all/any Select the Active Directory user from the available list. Defines the Archive Store where the search will be performed. Select one or more Archive Stores from the available list of Archive Stores. Defines the date when the to search for was sent. Defines whether to display items that match all conditions or items that match any of the conditions. From the drop-down list select: All Displays archived items that match at least one of the conditions specified. Any Displays archived items that meet all the conditions specified. GFI Archiver 5 Using GFI Archiver 90

91 OPTION Click this button to add conditions. Available conditions are: Subject Search for s having a specific subject. Sender - Specify the address or Active Directory display name of the sender for which to search s. Recipient - Specify the address or Active Directory display name of the recipient for which to search s. BCC - Specify the address or Active Directory display name of the recipient whose address was keyed in the BCC field. Sent Date - Search for s sent before, after or exactly on a specific date. Key in or select a date, and select Is before, Is after or Is exactly. Received Date - Search for s received before, after or exactly on a specific date. Key in or select a date, and select Is before, Is after or Is exactly. Start Date - Search for calendar items that start before a specified date. Size (KB) - Search for items that are bigger, smaller or equal to a particular size. Key in a size and select Is greater than, Is smaller than and Is exactly. Message ID - Search using the Message ID field contained in the header. Key in or paste the message ID of the to find. Whole - Search for s that have some specific content in the body and attachments. Body - Search for s that have some specific content in the body. Attachment - Search for s that have some specific content anywhere in the attachment. Contains document - Search only for s that have an attached document. Folder - Search for items contained in a specific mailbox folder. Folder/Subfolders - Search for items contained in a specific subfolder within a mailbox folder. Label - Search for s labeled with a specific label. Click displayed next to a search condition to remove it. Excludes all of these conditions Defines a list of conditions that the archived items will NOT have to meet to be returned as a search result. Click and select the conditions to apply. The conditions that can be selected are similar to the ones described above. Click displayed next to a search criteria to remove it from search. Back to basic options Reset Save Click to return to the Simple Search feature. For more information refer to Using Simple Search (page 87). Resets the search conditions and enables you to start all over again. Saves the search conditions as a saved search query that can be triggered at any time. Saved searches are displayed in the Classifications window under Archive tab. GFI Archiver 5 Using GFI Archiver 91

92 OPTION Search Starts the search for the archived items. Results are returned as per the conditions selected search using smart phones Within GFI Archiver, you can search for s using a smart phone. This feature is supported by the following mobile Operating Systems: Android 2.1+ Apple iphone ios 4 Blackberry OS5+ To perform a simple search: 1. Launch the Internet browser on your smart phone and key in the URL where GFI Archiver is located, using the following format: Archiver host name>/<gfi Archiver virtual folder name> For example: 2. Sign in using your credentials. The Mobile User Interface uses the same language settings as those configured by the user in GFI Archiver. For more information refer to Changing user preferences (page 118). 3. Key in the text to search for and click Search. 4. Browse through the displayed results using the controls provided. Results are sorted by date in descending order. The mobile search feature returns 10 s per page. You can browse additional pages using the controls provided. The maximum number of results is GFI Archiver 5 Using GFI Archiver 92

93 Screenshot 37: Conversation View Smart Phone 5. Click the subject to display the or click View Conversation to display related s. The mobile user interface is focused on searching archives. For advanced search and browsing features, access GFI Archiver from your computer. The mobile user interface enables users to access ONLY their mailbox. 5.6 Accessing multiple mailboxes From within the Archive tab, you can also browse archived items in other users mailboxes - provided that you have been granted access to their archive. A user with Administrative rights can grant or revoke access to other users mailboxes from the GFI Archiver Access Control feature. Search user to add feature is disabled if the currently logged on user does not have access to other users mailboxes, or if there are no s to view. GFI Archiver 5 Using GFI Archiver 93

94 Screenshot 38: Accessing multiple mailboxes To view archived items for a different mailbox: 1. Key in the name of the mailbox for which to view archived items in the Search users to add search box. A list of names matching the one keyed (for which you have access to) will be displayed. 2. Select the user and click next to the search field. 3. Select the newly added user from the Browse conversations for: field. 4. Browse or search the displayed archived items using the controls provided. 5.7 GFI MailInsights GFI MailInsights is a reporting facility within GFI Archiver that uses archived items to deliver information related to usage and trends. Use this feature to generate management and HR reports that provide insight on and resource use or misuse. GFI MailInsights is only enabled for users who have been granted the required access rights. For more information, contact your Systems Administrator. The available reports are: GFI Archiver 5 Using GFI Archiver 94

95 REPORT NAME Communication Flow WebMail Use Responsiveness Storage Use Inactive Accounts Inappropriate Words Internal Spammers Outside Office Hours Data Leakage Detection Job Search Phrase Search User Traffic Topics Performance Indicators Large s report Monitor user/group communication patterns inside and outside the organization. Identify top users exchanging with WebMail services. Identifies potential data leakages and inappropriate use. Gain insight into the average time it takes users to reply to internal and external . Understand the impact of attachments on storage costs. Create appropriate retention policies to control related storage space. Returns a list of user accounts that received but have not replied within the specified time. Track inappropriate language in that violates company policy. Find out which internal users tend to include too many recipients in the To/CC/BCC fields. Returns a list of internal mail accounts with sending activity outside office hours. Spot behavior which may need more investigation. Identify s with major credit card numbers and US Social Security numbers, or other confidential documents and information. Identify sent or received s that contain resumes, or are addressed to job search sites. Search for specific terms or phrases within archived s. View the number of s exchanged between selected users or groups and their contacts. Lists topics and common words found within s exchanged between selected users or groups and their contacts. Analyze sent and received s to classify users' productivity according to a set of predefined performance indicators. Identify large s that can be taking up unwanted space in your archive. attachments are classified according to specific categories GFI MailInsights Requirements GFI MailInsights requires the following configurations: A preconfigured SMTP server. For more information refer to Configuring General Settings (page 211). indexing. For more information refer to Indexing (page 165). Data within Archive Stores for reports to generate successfully Generating MailInsights reports Generated reports are sent by either to the logged in user or to a user specified in the Forward To field. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. GFI Archiver 5 Using GFI Archiver 95

96 To generate a report: 1. Select MailInsights tab and choose desired report. 2. Use available filters by selecting a value to filter by. 3. (Optional) In the Forward to field, enter the recipient address. When using the forwarding option, the report is received by the user generating the report and by any users specified in the Forward to field. You can insert multiple addresses separated by ';' 4. Click Send Report, located at the bottom of each report page Scheduling MailInsights reports Every MailInsights report can be scheduled to run automatically. To schedule a report: 1. Select MailInsights tab and choose desired report. 2. Use available filters by selecting a value to filter by. 3. Click Schedule. Screenshot 39: MailInsights report scheduling 4. In the Report Name field, enter a meaningful name for your report. 5. (Optional) In the Forward to field, enter the recipient (or recipients) address. 6. From the Schedule Report drop down list, select the report run frequency. Available options are: Daily, Weekly or Monthly. 7. In the At field, specify the time. 8. Click Save & Schedule Report. GFI Archiver 5 Using GFI Archiver 96

97 5.7.4 Communication Flow The Communication Flow graph provides an overview of s exchanged between selected users/groups and their contacts. Screenshot 40: MailInsights Communication Flow Filter the report using the following criteria: OPTION Scope Report for Recipients Specify date range or use default setting. You can only select dates in the last 6 months. Select Active Directory user or group. Select Internal, External or All. Include Specify number of results up to a maximum of 1000 recipients. Default value is Top 20. Report format Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. The generated report displays the selected user or group as a single entity in the middle of a graph. Contacts are segregated by domains. Each domain cluster is shown in different color. Edge width between the nodes shows the strength of the relation between different entities. The table below the graph shows the following information: OPTION Contact Sent s Contact address Total number of sent s GFI Archiver 5 Using GFI Archiver 97

98 OPTION Received s Total s Last Communication Total number of received s Total number of sent and received s Date and time of last sent/received WebMail Usage The WebMail Usage area enables you to generate a report that shows interaction of internal users with web accounts. Screenshot 41: MailInsights WebMail Usage The report can be filtered using the following criteria: OPTION Scope Report for Specify date range or use default setting. You can only select dates in the last 6 months. Select Active Directory user or group. Include Specify number of results up to a maximum of 1000 recipients, default value is Top 20. Report format Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. The generated report displays a graph that represents total s sent and received in the specified period. A Summary area at the top of the report shows the top WebMail providers, with a summary of sent and received s per provider. The table below the graph contains the following information: GFI Archiver 5 Using GFI Archiver 98

99 OPTION User Total s Sent s Received s Average/Day Total Percentage User address. Total number of internal contacts. Total number of sent s. Total number of received s. Average s sent and received per day. Percentage of total web s. WebMail Usage report covers the following WebMail providers: Hotmail; Gmail; Yahoo!; Live; AOL; Facebook; Yandex.ru; Seznam.cz; Gawab.com; Gmx.com; Mail.ru; Hushmail.com; Rediff.com Responsiveness The Responsiveness report shows on average how long it takes employees to reply to s. Screenshot 42: MailInsights Responsiveness Filter the report using the following criteria: OPTION Scope Specify date range or use default setting (Last 7 days). You can only select dates in the last 6 months. GFI Archiver 5 Using GFI Archiver 99

100 OPTION Report for Include Sort By Report format Select Active Directory user or group. Specify number of results up to a maximum of 1000 recipients, default value is All. Specify sorting method. Options are: By name (default) By responsiveness Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. The generated report displays a bar chart representing users on the y-axis and responsiveness in hours on the x-axis. Data is sorted according to defined criteria. Additional data is displayed in a table below the chart with the following information: OPTION User Average responsiveness Average Internal responsiveness Average external responsiveness Name or address of user. Average responsiveness for all s (Hours). Average time to reply to internal users (Hours). Average time to reply to external s (Hours) Storage Use The Storage Use report shows how much space is used by different attachment categories. Screenshot 43: MailInsights Storage Use Filter report using the following criteria: GFI Archiver 5 Using GFI Archiver 100

101 OPTION Scope Specify date range or use default setting (This Month). You can only select dates in the last 6 months. Report for Item type Report format Select Everyone (default), Active Directory user or group Select from the following available options: s, Files or s and Files. Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. The generated report consists of a graph with stacks representing different attachment categories. The graph s x-axis shows the different size brackets and the y-axis shows the attachment size. Attachment categories for Storage Use report are: Images, Documents, Music, Videos and Others The table below the graph contains the following additional information: OPTION Date Total Size Images Documents Music Videos Other Date was received. Total size of attachment. Total size of attachment for category Images. Total size of attachment for category Documents. Total size of attachment for category Music. Total size of attachment for category Videos. Total size of attachment for category Other Inactive Accounts The Inactive Accounts area enables you to generate a report that shows internal accounts that are no longer active. GFI Archiver 5 Using GFI Archiver 101

102 Screenshot 44: MailInsights Inactive Accounts Filter report using the following criteria: OPTION Scope Specify date range or use default setting (Last 30 days). You can only select dates in the last 6 months. Report format Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. An inactive account is an account that has received s but has not sent any s in the date range covered. The report returns a list of inactive accounts Inappropriate Words The Inappropriate Words area enables you to generate a report that identifies any inappropriate language used in s. Inappropriate words can include words considered sexist, racist or swear words. GFI Archiver 5 Using GFI Archiver 102

103 Screenshot 45: MailInsights Inappropriate Words Filter the report using the following criteria: OPTION Scope Specify date range or use default setting (Today). You can only select dates in the last 6 months. Recipients Report format Select All, Internal Only, External Only Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. To add more words to the Inappropriate Words list, launch the InappropriateWordsEditor.exe from C:\Program Files\GFI\Archiver\Core2\bin. Please note that this file contains rude words which can be offensive. The generated report displays data in a table listing the following: OPTION Date/Time Sender Subject date and time Sender address subject GFI Archiver 5 Using GFI Archiver 103

104 Internal Spammers The Internal Spammers report enables you to generate a list that identifies internal accounts of users who include a large number of recipients in their s. This reports takes into consideration recipients in the To, CC or BCC fields. Screenshot 46: MailInsights Internal Spammers Filter the report using the following criteria: OPTION Scope Specify date range or use default setting (Last 30 days). You can only select dates in the last 6 months. Include Report format Specify the amount of accounts to include up to a maximum of 1000 users. Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. Report data is displayed in a table listing the following: OPTION Username Average Number of Recipients Sender username or address. Average number of recipients who received from the sender during the specified time period. GFI Archiver 5 Using GFI Archiver 104

105 Outside Office Hours Use this report to identify internal users who send s outside of office hours. Screenshot 47: MailInsights Outside Office Hours Filter the report using the following criteria: OPTION Report for Enables you to choose for whom this report applies. Run report on all employees (default) or on an Active Directory group. Include Specify number of results to display, up to a maximum of Default = 50. Scope Specify date range or use default setting (This Month). You can only select dates in the last 6 months. Report format Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. GFI Archiver 5 Using GFI Archiver 105

106 OPTION Office Hours Working Week Non- Working Days Enter a time range according to your organization's normal working hours. Select the days of work of your organization. Checked days are considered as part of normal office hours. Use the calendar to define non-working days for past and future dates. Selected dates are listed in the provided window. Non-working days can include public holidays and company shutdown. IMPORTANT The settings will only be saved upon successful generation of the report. If you navigate away from the page before generating the report, all settings will be lost. When using the Clear All button, configured dates will be cleared for all years. The following examples describe how the report will work when configured in typical scenarios: Scenario 1: An organization working from Monday to Friday, with start time and end time within the same day, example from 9.00 am to 6.00 pm. The report will cover s sent between 6.00 pm and 9.00 am from Monday to Friday, and all day during Saturday and Sunday. Scenario 2: An organization working from Monday to Friday. Start time and end time span across midnight, example from 8.00 pm to 5.00 am. In this case the report will cover s sent between 5.00 am and 8.00 pm from Monday to Friday and those sent on Saturday and Sunday. s sent on Saturdays between midnight and 5.00 am will not be taken into account, since they are considered within normal working hours. Scenario 3: An organization working from Monday to Friday. Start time and end time span across midnight, Wednesday is a public holiday. The report will cover s sent between 5.00 am and 8.00 pm from Monday to Friday, s sent on Saturday and Sunday, and all s sent on Wednesday from midnight to midnight. GFI Archiver 5 Using GFI Archiver 106

107 The results of the generated report are displayed in a horizontal bar chart. A report summary above the chart displays the top 3 users who sent s outside office hours. Additional data is displayed in a table below the chart with the following information: OPTION Number of s Sent address of user Number of s sent outside office hours Data Leakage Detection Use this report to detect s that potentially contain sensitive data. The report will detect sent or received s containing: Major credit card numbers (VISA, Mastercard, American Express, Diner s Club, Discover) USA Social Security numbers Confidential documents and information The report analyzes both sent and received for a selected user. Screenshot 48: MailInsights Data Leakage Detection report Filter the report using the following criteria: GFI Archiver 5 Using GFI Archiver 107

108 OPTION Scope Specify date range or use default setting (Last 3 Months). You can only select dates in the last 6 months. Report for Recipients Report format Enables you to choose for whom this report applies. Run report on all employees (default) or on an Active Directory user or group. Internal recipients, external recipients or both. Default is both. Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. The results of the generated report are listed in a table sorted by date in ascending order. A report summary above the table displays the top 3 senders. The table contains the following information: OPTION Date Sender Subject Displays the date and time of the . Sender address. subject. Entries in the subject column contain a link to display the detected . Leakage Type Leakage type can be: Credit card, Social Security Number, confidential data, medical, If more than one type of leak is detected, only the first one is displayed Job Search Use this report to identify internal users who exchange s with job search sites. The report detects sent or received s containing resumes. The report is able to identify both sent and received for a selected user. GFI Archiver 5 Using GFI Archiver 108

109 Screenshot 49: MailInsights Job Search report Filter the report using the following criteria: OPTION Scope Report for Domains Specify date range or use default setting (This Month). You can only select dates in the last 6 months. Enables you to choose for whom this report applies. Run report on all employees (default) or on an Active Directory user or group. The list of domains listed in this area will be added to the search criteria of the report. Add domains by typing the URL in the available field and clicking. To remove a Report format domain, click. Clear all removes all the listed URLs. The default list of job search sites includes: Monster.com; Jobster.com; jobcentral.com; hotjobs.yahoo.com; careerbuilder.com; indeed.com; simplyhired.com; jobing.com; reed.co.uk; jobsearch.co.uk; monster.co.uk; totaljobs.com; fish4.co.uk; cityjobs.com. Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. The results of the generated report are listed in a table sorted by date in ascending order. A report summary above the table displays the top 3 users who exchanged s with job search domains. The table contains the following information: GFI Archiver 5 Using GFI Archiver 109

110 OPTION Date Sender Subject Displays the date and time of the . Sender address. subject. Entries in the subject column contain a link to display the detected Phrase Search Search for specific terms or phrases within archived s using the Phrase Search report. The report runs search queries on whole bodies and attachments to detect s containing the specified terms and displays results as a pie chart or stacked line graph. The report detects phrases in both sent and received for a selected user or group. Screenshot 50: MailInsights Phrase Search report GFI Archiver 5 Using GFI Archiver 110

111 Filter the report using the following criteria: OPTION Scope Report for Chart Type Phrases Report format Specify date range or use default setting (This Month). You can only select dates in the last 6 months. Enables you to choose for whom this report applies. Run report on all employees (default) or on an Active Directory user or group. Choose between a Pie chart and Stacked Bar graph. The pie chart displays the total percentage of s for the results found while the stacked line graph displays the count of s sent on a day-by-day basis. Phrases can be composed of 1 or more words. Use quotes (") to search for exact phrases or enter words without quotes to search for any of the words entered. A limit of 10 phrases ensures the report does not consume too many resources or take too long to run. Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. The results of the generated report are listed in a table sorted by date in ascending order. A report summary above the table displays the total number of s, and the total s that matched a phrase. The table contains the following information: OPTION Date Sender Subject Phrase Displays the sent date and time of the . Sender address. Displays the subject of the . If you have permission to view the , you can click the entries in the subject column to display the detected . The phrase that was found within the User Traffic Report The User Traffic graph provides an overview of the number of s exchanged between selected users or groups and their contacts. It also lists unique addresses of sent or received . GFI Archiver 5 Using GFI Archiver 111

112 Screenshot 51: MailInsights User Traffic Filter the report using the following criteria: OPTION Scope Report for Report format Specify date range or use default setting. You can only select dates in the last 6 months. Select Active Directory user or group. Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. The generated report lists communication with respect to the selected user or group. addresses listed in the table show the various communications exchanged between that particular address and the selected user or group. The table below the graph shows the following information: OPTION Address Sent Received Internal Inbound Outbound Contact address. Total number of sent s. Total number of received s. Total number of internal s sent and received. Total number of inbound from outside the organization. Total number of outbound sent to addresses outside the organization. GFI Archiver 5 Using GFI Archiver 112

113 Topics report The Topics report lists topics found within s exchanged between selected users or groups and their contacts. It also lists the most common words found within the s. This report uses the search indexes to identify the most popular used terms. Screenshot 52: MailInsights Topics Filter the report using the following criteria: OPTION Scope Report for Report format Specify date range or use default setting. You can only select dates in the last 6 months. Select Active Directory user or group. Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. The generated report displays the selected mailbox (belonging to a user or group) at the top of the report. A report summary displays the top 5 keywords for the selected user and the total number of s for every keyword. A stacked column chart displays the top 10 keywords on the x-axis and the number of times these words were found on the y-axis. Data is broken down in two tables underneath the chart as follows: TABLE Top Keywords for Organization A table listing Keywords and Total Occurrences of each keyword. GFI Archiver 5 Using GFI Archiver 113

114 TABLE Topics A table containing the Date, Sender and Subject of every found and the Phrase searched for. The Top Keywords for Organization table displays information from archive stores that span the requested time period partly or in full. The Topics table displays information from s received during the selected time period only Performance Indicators report The Performance Indicators report classifies users' productivity according to a set of predefined performance indicators, comparing user's usage trends across a period of time. Results are relevant when the report is run on a group of people with the same job description since such people should have similar usage trends. Performance calculations are based on s sent and received. Results are displayed according to the following indicators: OPTION Sociable Takes Initiative Expressive Organized Responsible A friendly person, willing to talk and engage in activities with other people. Has the ability to assess and initiate things independently. A person able to effectively convey thoughts or feelings. Systematic approach, likes order and can deal with assigned tasks efficiently. Carries out obligation to do something as part of a job or role. Specific s can be excluded from the report, to eliminate irrelevant s such as newsletters or automatic notifications. GFI Archiver 5 Using GFI Archiver 114

115 Screenshot 53: MailInsights Performance Indicators report Filter the report using the following criteria: OPTION Scope Report for Excluded s Weight Specify date range or use default setting. Select from Last 6 Months or Last 12 Months. Select Active Directory user or group. Enter addresses you want to exclude from the report. For example, you can exclude newsletters and automatic system notifications. For example *@newsletters.com. Weights represent user categories that typically define users within a specific role. For example, a salesperson is expected to send more s than he receives, while an account manager receives more s than he sends. Select from the following options: Normal - a Normal user sends and receives an equal amount of s. Heavy Sender - a user who in his role is expected to send more s than he receives. Report format Receiver - a user who typically receives more s than he sends. Select the type of output. Reports can be exported as an attachment in PDF or Excel (.xlsx) format. GFI Archiver 5 Using GFI Archiver 115

116 The generated report displays a bar chart with color coded data. Information for the selected mailbox (belonging to a user or group) is interpreted in two tables below the chart. The tables consist of the following information: TABLE Factors Statistics Collected Lists a score for each performance indicator per month (or per user if the report is generated for a group). totals are listed either per user (if the report is generated for a group) or per month. Address (User) / Month Total Sent Total Received Total Replies Sent Total s to Multiple Recipients Received Total s to Multiple Recipients Sent Attachments Sent Attachments Received Large s report The Large report identifies s greater than a specified size exchanged between selected users or groups and their contacts. It also lists the attachment categories (for example video, images, music, documents and others). GFI Archiver 5 Using GFI Archiver 116

117 Screenshot 54: MailInsights Large s Filter the report using the following criteria: OPTION Scope Report for Size Specify date range or use default setting. You can only select dates in the last 6 months. Select Active Directory user or group. Define the total size in MB (message and attachments). s greater than the specified size are displayed in the report. The minimum size is 5 MB and is set by default. The generated report displays the mailbox for the selected user or group at the top of the report. A report summary displays the top 5 users and the total size of s sent for the specified period. Two charts display a graphical representation of the size of the s being sent in percentages, one for the top users and the other for attachment categories. For example, if user A sends 5 s of 5 MB each (total 25 MB) and user B sends 4 s of 10 MB each (total 40 MB), user B will have more %age in the chart. Data is broken down in a table underneath the chart as follows: TABLE Date Sender Subject Displays the sent date and time of the . Sender address. Displays the subject of the . If you have permission to view the , you can click the entries in the subject column to display the detected . GFI Archiver 5 Using GFI Archiver 117

118 TABLE Number of Recipients Attachment Category Size Total number of recipients who received from the sender during the specified time period. The file categories of attachments (for example video, images, music, documents and others). Total size of including attachments. 5.8 Changing user preferences 1. Click the user name displayed on the upper right hand corner of the screen. 2. From the Language options drop down box, select the language to display. 3. From the Maximum page size area, configure the number of s to display per page. 4. From the Audit Reports Date/Time Format area (available only if logged in as an administrator), change the date/time format to display on audit reports. 5. In the Set your time zone area use the drop down list to set the correct time zone. The date and time of s within GFI Archiver will be displayed according to this setting. 6. Click Save. GFI Archiver 5 Using GFI Archiver 118

119 6 Achieving results Refer to the following sections to configure GFI Archiver and start achieving results: How to archive your Importing and exporting s Analyze your archived s 6.1 Achieving results with GFI Archiver - How to archive your company's Explore different methods of archiving your company from the list below and discover the method that best suits your organization. Archive All s 1. Archive all incoming s from journaling to take the load off your mail server. Configure Auto-Archiving (All s) method of archiving Exclude specific mailboxes from archiving 2. Manage your archive stores automatically. Configure New Archive Store settings Configure a Journaling Mailbox 3. Define the length of time an archived is kept in the Archive Store before it is deleted. Temporarily suspend (hold) retention policies so that no is deleted. Set Retention Policies Configure Legal Hold feature Use Archiving Rules to archive only specific s 1. Selectively archive based on specific criteria. Control which s get archived. Configure Rule-Based Archiving Define Archiving Rules Exclude specific mailboxes from archiving 2. Manage your archive stores automatically. Configure New Archive Store settings Configure a Journaling Mailbox GFI Archiver 6 Achieving results 119

120 3. Define the length of time an archived is kept in the Archive Store before it is deleted. Temporarily suspend (hold) retention policies so that no is deleted. Set Retention Policies Configure Legal Hold feature Archive s Using Archive Assistant 1. Empower users to decide which s they want to archive. Configure Manual method of Archiving Schedule automatic import of s from user mailboxes Download and install Archive Assistant on client machines 2. Define the length of time an archived is kept in the Archive Store before it is deleted. Temporarily suspend (hold) retention policies so that no is deleted. Set Retention Policies Configure Legal Hold feature GFI also recommends to create an awareness policy with safe use guidelines for your employees. For more information refer to: Achieving results with GFI Archiver - Importing and exporting s With GFI Archiver you can move old s into a separate database, which will keep your mail server performance high and stores compact. Extract s from Microsoft Exchange mailboxes and import them into GFI Archiver Archive Stores. Use the Archive Assistant to import s from users' mailboxes automatically Use the Import Export Tool to import s from Microsoft Exchange Extract s from PST files and import them into the GFI Archiver archive stores. Transfer s to an archive store without any end-user intervention using the one-time import feature Use Import Export Tool to import s from specific PST files GFI Archiver 6 Achieving results 120

121 Export s from the Archive Stores to a PST file, a folder on disk or a specific address. Use the Import Export Tool to export s from GFI Archiver GFI also recommends to create an awareness policy with safe use guidelines for your employees. 6.3 Achieving results with GFI Archiver - Analyze your archived s Filter archived s using MailInsights reports and obtain valuable information about the use of your company . Take action based on the results and increase your workforce productivity. GFI Archiver 6 Achieving results 121

122 Use MailInsights reports to identify business issues that impact your organization's productivity. Create adequate usage policies based on the results obtained from these reports. GFI Archiver enables you to analyze data stored in archives to deliver business intelligence reports that are highly relevant to management, IT administrators and other stakeholders. Identify risk and manage productivity through actionable information found in history. Reports can be scheduled and delivered by , or issued on demand. The available reports are: REPORT NAME Communication Flow WebMail Use Responsiveness Storage Use Inactive Accounts Inappropriate Words Internal Spammers Outside Office Hours Data Leakage Detection Job Search Phrase Search User Traffic Topics Performance Indicators Large s report Monitor user/group communication patterns inside and outside the organization. Identify top users exchanging with WebMail services. Identifies potential data leakages and inappropriate use. Gain insight into the average time it takes users to reply to internal and external . Understand the impact of attachments on storage costs. Create appropriate retention policies to control -related storage space. Returns a list of user accounts that received but have not replied within the specified time. Track inappropriate language in that violates company policy. Find out which internal users tend to include too many recipients in the To/CC/BCC fields. Returns a list of internal mail accounts with sending activity outside office hours. Spot behavior which may need more investigation. Identify s with major credit card numbers and US Social Security numbers, or other confidential documents and information. Identify sent or received s that contain resumes, or are addressed to job search sites. Search for specific terms or phrases within archived s. View the number of s exchanged between selected users or groups and their contacts. Lists topics and common words found within s exchanged between selected users or groups and their contacts. Analyze sent and received s to classify users' productivity according to a set of predefined performance indicators. Identify large s that can be taking up unwanted space in your archive. attachments are classified according to specific categories. GFI Archiver 6 Achieving results 122

123 Search the Archive Stores using the Advanced Search feature. Search through past and attachments of various formats. Once a search has been defined, save the search criteria for easy reference at a later date. Use Advanced Search GFI also recommends creating awareness about the importance of in your organization. For more information refer to: GFI Archiver 6 Achieving results 123

124 7 Configuring GFI Archiver 7.1 Settings overview The Configuration page enables you to gain a comprehensive overview of the settings currently in force within GFI Archiver. Click Configuration tab to load the Overview of current settings page. Use the buttons located in the top right hand corner of the Configuration page to switch between Tile and List View. GFI Archiver 7 Configuring GFI Archiver 124

125 Screenshot 55: GFI Archiver Settings Page The table below describes the information available. OPTION Archiving Method Mail Servers to Archive Archiving Rules Shows the Archiving Method currently enabled. An Archiving Method needs to be specified for GFI Archiver to start archiving s. Shows the number of Journal mailboxes configured for use with this installation of GFI Archiver. If Rule-based Archiving is enabled, the number of configured rules is displayed. GFI Archiver 7 Configuring GFI Archiver 125

126 OPTION Mailboxes to Archive Archiving Scope Mailbox Folder Structure Retrieval Import old s Archive Stores Roles and Permissions Access Control IMAP Server Retention and Spam policies Classification Rules Auditing Deletion Change license key General Settings Shows whether User Mailbox Archive Restrictions are in force or not. User Mailbox Archive Restrictions define which mailboxes to archive. Shows whether Archive Restrictions are in force or not. These define whether incoming, outgoing, or internal s (or a combination) are archived. Shows whether Folder Structure Retrieval is enabled or not. Folder Structure Retrieval enables the replication of the folder structure of the mailboxes within Microsoft Exchange Server with GFI Archiver. Provides information on how to import s to this installation of GFI Archiver. Shows the number of Archive Stores configured with this installation of GFI Archiver. Assign roles to selected users to grant them the required permissions to access specific functions within GFI Archiver. Archive Mailbox Access defines who has access to which mailboxes. Shows whether IMAP Server is enabled or not. When enabled, users can retrieve archived s using supported IMAP clients. Retention and Spam policies define the lifetime of an archive within GFI Archiver. s matching specific criteria can be deleted immediately or after a specific period of time. Classifications automate the labeling of s through policies. s matching specific criteria can be automatically classified. Shows and defines whether GFI Archiver Auditing is switched on or not. Shows whether Deletion is enabled or not. When enabled, users can permanently delete archived s from mailboxes they have access to. Displays license key information associated with your GFI Archiver installation Displays the version and build number of the current GFI Archiver installation 7.2 Configuring Archiving Method The Archiving Method enables you to define how GFI Archiver stores s in the archive stores. IMPORTANT Without a configured Archiving Method GFI Archiver will not archive any s. To configure Archiving Method: 1. Select Configuration tab and from Mail Servers to Archive, click Archiving Method. GFI Archiver 7 Configuring GFI Archiver 126

127 Screenshot 56: Configuring Archiving Method 2. Click Configure Archiving Method. 3. From the Archiving Method Wizard page, select from the following options: OPTION Manual Archiving Auto-Archiving (Journaling) All s Rule-Based Archiving Enables users to manually select which s to archive from their Microsoft Outlook applications using Archive Assistant. Users are also able to define a folder structure when manually archiving their s to facilitate searches. When selected, GFI Archiver automatically moves s and meeting requests from a Journaling Mailbox on Microsoft Exchange Server to an Archive Store. Select this option to archive all incoming s. Archive specific items from journaling that match configured rules and specify how these items are archived in particular folders. For more information refer to Configuring Archiving Rules (page 132). IMPORTANT When this option is selected you need to configure Archiving Rules for GFI Archiver to start archiving. GFI Archiver 7 Configuring GFI Archiver 127

128 More than one method of archiving can be selected. For example, you can enable Manual Archiving and Auto-Archiving (Journaling) of All s at the same time. 4. Click Save. 7.3 Managing the Mail Servers to Archive Within GFI Archiver, the mail servers to archive are defined by the configured journaling mailboxes. A journaling mailbox is a type of mailbox within Microsoft Exchange Server that enables the recording of s in an organization. The difference between journaling and archiving is that, by definition, journaling is the ability to record s while archiving reduces the strain of storing data through backups, removal, and storage. GFI Archiver uses Microsoft Exchange journaling to centralize all the s to archive in a single mailbox. An initial journaling mailbox is configured using the GFI Archiver post-install wizard. This enables you to start archiving s from a Microsoft Exchange Server. This section provides information on how to: View configured mail servers Create journaling mailboxes in Microsoft Exchange Server (or other mail servers) Edit existing journaling mailbox details Deactivating and activating an existing journaling mailbox Remove existing journaling mailbox details IMPORTANT For journaled s to be archived within GFI Archiver, the archiving method Auto-Archiving (Journaling) must be enabled. For more information refer to Configuring Archiving Method (page 126) Viewing configured mail servers To view configured mail servers from where GFI Archiver archives s, select the Configuration tab and click Mail Servers to Archive. Screenshot 57: Manage Journaling Mailboxes screen The table below provides a list of available information and options: GFI Archiver 7 Configuring GFI Archiver 128

129 OPTION Journaling Mailbox Active Mailbox Server Mailbox Store Connection Type Defines the name of the Journal mailbox set up within Microsoft Exchange Server and configured for use within GFI Archiver. Denotes whether the Journal Mailbox is active or not. The machine name of the server on which the Journal Mailbox is configured. Defines the name of the Mailbox Store to which the configured Journal Mailbox belongs. Defines the type of connection that GFI Archiver will use to retrieve s from the mail servers to archive s from Adding a new journaling mailbox Add a journaling mailbox from where GFI Archiver will retrieve the s. 1. Select Configuration tab and click Mail Servers to Archive. 2. Click Add. Screenshot 58: Choose how you want the wizard to setup GFI Archiver to use a journal mailbox. 3. From the Mail Server to Archive Wizard page, select from the following options: GFI Archiver 7 Configuring GFI Archiver 129

130 a. Select a journal mailbox from the detected journal mailbox list below. Select this option if you have already created and configured a journaling mailbox. Select a mailbox from the list of detected mailboxes. For more information refer to Setting up a journaling mailbox (page 65). i. Select one of the detected mailboxes and click Next. ii. In the Journal Mailbox Credentials window click Next again to complete setup. iii. When you receive the message Mail Server to Archive configured successfully!, click Finish. b. Let the wizard create a new journal mailbox to use to start archiving your s Select this option to automatically create a new Journal Mailbox using the wizard. The new journal mailbox will be created on the selected Microsoft Exchange Server from the list of detected servers. This feature works only with Microsoft Exchange Server 2007 Service Pack 2 onwards. i. Select Let the wizard create a new journal mailbox to use to start archiving your s and click Next. ii. When prompted, key in the required details for the Journal Mailbox. Available options are: OPTION Let GFI Archiver create a new journaling user for you to associate the mailbox/es to. Use existing journaling user to associate the mailbox/es to. Select this option if you have already configured a journaling mailbox on a mail server. In the Detected mailboxes field, select the mailbox database you want to connect to from the list of detected mailboxes. This option is enabled if a journaling user is discovered. If this option is enabled, the discovered journaling user will be associated with the 'Detected mailboxes'. iii. Click Next. iv. Provide the required Administrative credentials to complete the setup. c. Manually enter journal mailbox details Provides the facility to create a new Journal Mailbox while providing all the details required to create such mailbox. These may include specifying a Mailbox Store, the connection method, ports used and credentials. i. When connecting via IMAP, key in the following required details for the Journal Mailbox: OPTION Connect using IMAP Mail Server IMAP Port Defines the connection method used to connect to the Mail Server where the new Journal Mailbox will be created. IMAP - Available only if GFI Archiver is not installed on the same machine as Microsoft Exchange Server 2003 or Shows the detected name of the mail server of where the Journal Mailbox resides. Default is set to 143. If SSL is not enabled, the connection will be unencrypted. Use SSL Click to use SSL and enforce encryption. IMAP Port number changes to 993 automatically. GFI Archiver 7 Configuring GFI Archiver 130

131 OPTION Login/Password Enables you to key in a login name and a password used to connect to the selected mail server. Login names containing spaces are not permitted. Folder Defines the default folder that is used to journal s. Default value: Inbox. ii. When connecting via EWS, key in the following required details for the Journal Mailbox: OPTION Connect using EWS Login:/Password: Defines the connection method used to connect to the Mail Server where the new Journal Mailbox will be created. Exchange Web Services (EWS) is available only for Microsoft Exchange Server 2007 SP1 or Enables you to key in a login name and a password used to connect to the selected mail server. Login names containing spaces are not permitted. Folder Public Folder Exchange Server Host Defines the default folder that is used to journal s. Default value: Inbox. Check to mark the folder as public. Select from the following options: Auto Discovery (Recommended) Manual Host to Exchange/Office 365 CAS - enter the Exchange Server IP address or client access server (CAS) host name. The CAS is a server role that handles all client connections to an Exchange Server. When connecting using EWS for Office 365, enter the Office 365 host name. iii. Click Next to continue setup. 4. Click Finish to finalize Journal Mailbox setup Editing an existing journaling mailbox 1. Select Configuration tab and click Mail Servers to Archive. 2. Select a journaling mailbox to edit and click. 3. From the Mail Server to Archive Wizard page, adjust the settings as per instructions in the Adding a New Journal Mailbox section Deactivating and activating an existing journaling mailbox 1. Select Configuration tab and click Mail Servers to Archive. GFI Archiver 7 Configuring GFI Archiver 131

132 2. Select a journaling mailbox to edit and click to deactivate an existing journaling mailbox or to activate a previously deactivated journaling mailbox Removing an existing journaling mailbox 1. Select Configuration tab and click Mail Servers to Archive. 2. Select the journaling mailboxes to delete and click. IMPORTANT Deleting a journaling mailbox in GFI Archiver is an irreversible procedure. Journaling mailbox s cannot be retrieved if deleted. IMPORTANT Removing a Journal Mailbox from GFI Archiver does not delete or make inoperative any existing Journal Mailboxes in Microsoft Exchange Server. 7.4 Configuring Archiving Rules IMPORTANT This feature is disabled if Rule-based Archiving is not enabled in the Archiving Method wizard. For more information refer to Configuring Archiving Method (page 126). A number of Archiving Rules can be set up to determine what s are archived. Rules are created based on different criteria, and GFI Archiver applies each rule against incoming and outgoing s that match configured rules. If a rule is matched, the is archived and moved to the configured folder. IMPORTANT Enabling this feature may breach company policy or legal compliance related to retention. GFI Archiver 7 Configuring GFI Archiver 132

133 Screenshot 59: Configuring Archiving Rules GFI Archiver applies rules from top to bottom of the list. Rules can be moved up or down the list using the provided arrows. IMPORTANT s or calendar items archived through the Archive Assistant get archived irrespective of any rules set in Rules-based Archiving Adding Archiving Rules To add an Archiving Rule: 1. From Configuration tab, click Archiving Rules. 2. Click Add. GFI Archiver 7 Configuring GFI Archiver 133

134 3. In the Rule Name field, specify a meaningful name for the archiving rule. 4. In the Criteria section, specify rule conditions from the available options described in the table below. Click to add more conditions. CONDITION Subject Body Sender s that match the specified subject are archived. s that are an exact match to the a word or a sentence specified in this criteria are archived. Select and type the address or select User and type the name of the user. A list of AD users will be displayed when you start typing the first letters of an address or a user name. Recipient Select and type the address or select User and type the name of the user. A list of AD users will be displayed when you start typing the first letters of an address or a user name. GFI Archiver 7 Configuring GFI Archiver 134

135 CONDITION Full size Attachment Size Attachment Type Select a filter from the available options (Equals, Greater Than, Greater or Equal Than, Smaller Than, Smaller or Equal Than) and specify an size in MB. Select a filter from the available options (Equals, Greater Than, Greater or Equal Than, Smaller Than, Smaller or Equal Than) and specify an attachment size in MB. Select a filter from the available options: Images, Documents, Music, Videos, Custom. Wildcards are supported for both Sender and Recipient fields. For example, if you enter '*@domain.com', the value will match all users of 'domain.com'. 5. In the Place matching in folder field, specify to which folder the is archived. Using special characters in folder names The folder path can be overwritten with the desired folder path using the following conventions: \ (back slash) is represented by /\ / (forward slash) is represented by // For example: To input a folder path for the following folder structure: Input the following path: Inbox\Managerial//CEO\Requests/\Queries If the folder specified by the user does not exist, it is created automatically. 6. Click Next. 7. Click Finish Editing Archiving Rules To edit an Archiving Rule: 1. From Configuration tab, click Archiving Rules. 2. Click Edit. 3. Use the Archiving Rule Wizard to modify the required fields. 4. Click Finish. GFI Archiver 7 Configuring GFI Archiver 135

136 7.4.3 Removing Archiving Rules 1. Select Configuration tab and click Archiving Rules. 2. Select the rule or rules to delete and click. 7.5 Configuring Archive Restrictions GFI Archiver requires a license for every mailbox. You may need to exclude certain mailboxes from archiving while including only specific ones. This can be achieved by configuring Mailbox Archive Restrictions. Using an Archive Restriction List composed of Active Directory user names and/or addresses (called Inclusion List or Exclusion List depending on the selected restriction method), you can determine the number of licensed mailboxes counted by the product using one of the following methods: RESTRICTION METHOD Restricting by Exclusion Enable Archiving Restrictions by selecting one of the following options under Using an Exclusion list: DO NOT archive at all if ANY of the recipients or senders are in the restriction list - GFI Archiver does not archive if any of the addresses in the is listed in the Archive Restriction List or Always archive but users in the restriction list will not be able to view it - is always archived, but users in the Archive Restriction List will not be able to view the archived . IMPORTANT If you select 'Always archive but users in the restriction list will not be able to view it' but the recipients or senders are not in Active Directory, s are not archived. When GFI Archiver is configured to use an exclusion list, the licensing module deducts the number of Active Directory users in the configured Archive Restriction List from the total count of users in the organization. addresses in the Archive Restriction List are not deducted. Example 1: Consider an Active Directory with 10 users and an exclusion list of 6 Active Directory users. The license required in this scenario is for 4 users. Example 2: Consider an Active Directory with 10 users and an exclusion list of 6 Active Directory users, but the exclusion list contains also another entry for 1 address (not a user). In this case the license required is still for 4 users since addresses are ignored. GFI Archiver 7 Configuring GFI Archiver 136

137 RESTRICTION METHOD Restricting by Inclusion Enable Archiving Restrictions by selecting an option under Using an Inclusion list. This action enables s to be archived either: Always archive if ANY of the recipients or senders are in the restriction list - If any address is in the configured Archive Restriction List or Only archive if all recipients and senders are in the restriction list - If all addresses (in senders and recipients fields) are listed in the Archive Restriction List. In both cases, the Inclusion List restricts the license to the number of Active Directory users in the list. If one of the entries in the inclusion list is an address, licensing counts the number of all users found in Active Directory. This ensures consistency since a user may have multiple addresses. Example 1: Consider an Active Directory with 10 users and an inclusion list of 6 Active Directory users. The license required in this scenario is for 6 users. Example 2: Consider an Active Directory with 10 users, an inclusion list of 6 Active Directory users and another entry for 1 address. In this case the license required is of 10 users. The entry will cause the license module to count all users in Active Directory Enabling Mailbox Archive Restrictions 1. Select Configuration tab and click Archive Restrictions. 2. Click Change Settings. GFI Archiver 7 Configuring GFI Archiver 137

138 Screenshot 60: Select Enable Archiving Restrictions 3. Select Enable Archiving Restrictions and choose one of the following options: EXCLUSION / INCLUSION Using an exclusion list OPTION DO NOT archive item at all if ANY of the recipients or senders are in the restriction list Archive item for users in your organization. Users in restriction list will not be able to view it When Manual Archiving is configured, users in an exclusion list cannot manually archive s using Archive Assistant if any of these options is enabled. GFI Archiver 7 Configuring GFI Archiver 138

139 EXCLUSION / INCLUSION Using an inclusion list OPTION Always archive item if ANY of the recipients or senders are in the restriction list Only archive item if all recipients and senders are in the restriction list When Manual Archiving is configured, all users in an inclusion list are able to manually archive items using Archive Assistant if any of these options is enabled. IMPORTANT After enabling Archive Restrictions, click Manage Restrictions to create the list of users, groups or mailboxes to be restricted. The configured Restrictions will not come into affect if the list is not created. Items archived manually using the Archive Assistant are always archived, even when an exclusion list is configured. 4. Click Save. GFI Archiver 7 Configuring GFI Archiver 139

140 Screenshot 61: Add s, groups or users 5. Click and select an option between , group or users and key in the , group name or user name of the user to restrict. 6. Click Save Disabling Mailbox Archive Restrictions To disable mailbox archive restrictions: 1. Select Configuration tab. 2. Click Mailboxes to Archive. 3. Click Change Settings. 4. Uncheck Enable Archiving Restrictions. 5. Click Save. GFI Archiver 7 Configuring GFI Archiver 140

141 7.6 Managing the Archiving Scope The Archiving Scope enables you to define which types of s to archive. Using this feature you can, for example, instruct GFI Archiver to exclude internal s from being archived or to include all inbound and internal s while excluding all outbound s. 1. Select Configuration tab and click Archiving Scope. Screenshot 62: Configuring archive restrictions. 2. Select Configure Archiving Scope and from the list displayed unselect the s to exclude from archiving as shown in the table below: OPTION Inbound s Outbound s Internal s Defines whether GFI Archiver will archive s originating from outside the organization s domain. Uncheck this option to not archive this type of s. Defines whether GFI Archiver will archive s destined to recipients not within the organization s domain. Uncheck this option to not archive this type of s. Defines whether GFI Archiver will archive s originating from and destined to the organization s domain. Uncheck this option to not archive this type of s. 3. Click Save to save configuration. 7.7 Configuring Mailbox Folder Structure Retrieval By default, GFI Archiver does not automatically archive s according to the folder structure in which they were originally contained within the source mailbox. To replicate the folder structure of the original mailboxes, enable the GFI Archiver Folder Structure Retrieval feature. IMPORTANT The GFI Archiver Folder Structure Retrieval feature adds a computational and network access overhead to the archival process and may slow down your system. Important notes: In order for the Mailbox Folder Structure Retrieval feature to work, ensure that the configured user meets the following requirements: GFI Archiver 7 Configuring GFI Archiver 141

142 OPTION User Access Logon Rights Assignment No roaming user profile Full Control rights MAPI Client and Collaboration Data Objects [MAPI only] No Read-only Archive Stores Ensure the Folder Structure Retrieval User has access to the users mailboxes in the Microsoft Exchange Store. The access is required to retrieve the folder structure. GFI Archiver can automatically create this account. The folder structure retrieval user needs to have logon rights on the GFI Archiver machine. The user configured in the GFI Archiver Mailbox Synchronization configuration cannot not use a roaming profile. Ensure that the user configured in the GFI Archiver Mailbox Synchronization configuration has Full Control rights for the GFI Archiver Folder. Microsoft Outlook or Microsoft Exchange Server MAPI Client and Collaboration Data Objects (MAPI/CDO) need to be installed if GFI Archiver is not installed on the same machine as Microsoft Exchange Ensure that Archive Stores are not marked as read only. GFI Archiver needs to modify the Archive Store when an is matched and assign it to the correct folder. For more information refer to Editing Existing Archive Store Details (page 164). IMPORTANT For more information, refer to Enabling Mailbox Folder Structure Retrieval 1. Select Configuration tab and click Mailbox Folder Structure Retrieval. 2. Select Change Settings. GFI Archiver 7 Configuring GFI Archiver 142

143 Screenshot 63: Enable folder structure retrieval 3. Select Enable folder structure retrieval. 4. Select whether to automatically create a new user account or whether to use an existing user account. This user account will be used to access the mailboxes for which to replicate the folder structure. The table below shows a list of available options. OPTION Create a new user account Use an existing user account Instructs GFI Archiver to create a new user account using the provided details in the Connect using, Login, and Password fields. Instructs GFI Archiver to use an existing user account that was previously created. GFI Archiver 7 Configuring GFI Archiver 143

144 OPTION Connect using Login Password Defines the connection method used to connect to the Microsoft Exchange Server to access the mailbox structure to retrieve. Available options: Exchange Web Services (EWS) - Recommended for Microsoft Exchange Server 2007 SP1 or 2010 mail servers. Traditional Message Application Programming Interface (MAPI) - Recommended for NON Microsoft Exchange Server 2007 SP1 or 2010 mail servers. Enter the Login name that will be used for the new account to create or for the previously created account. Defines the Password used for the new account or for the previously created account. Click Next to continue setup. If in the previous screen you have selected Create a new user account, you will be asked to provide the user credentials of the domain administrator account with the rights to create the account. 5. Click Finish to finalize setup Disabling Mailbox Folder Structure Retrieval 1. Select Configuration tab and click Mailbox Folder Structure Retrieval. 2. Click Disable Folder Structure Retrieval. IMPORTANT Disabling Folder Structure Retrieval does not delete or disable the user account previously created for this feature Excluding folders from Folder Structure Retrieval If there are any folders that you wish to exclude from being retrieved, configure an Excluded Folders policy. 1. Select Configuration tab and click Mailbox Folder Structure Retrieval. 2. Click Add. GFI Archiver 7 Configuring GFI Archiver 144

145 Screenshot 64: Add exclude policy 3. Key in a policy name for the Exclude Folders Policy and select the Enable excluded folder policy checkbox to apply the policy immediately. Click Next to continue. GFI Archiver 7 Configuring GFI Archiver 145

146 Screenshot 65: Add folders to exclude 4. Key in the name of the root folder or folders to exclude. Only top level folders can be excluded. For example, to exclude the folder 'Sent Items' type the following: Sent Items. Click Add. To exclude users from Folder Structure Retrieval, specify * as the folder name. The * is a special keyword that represents all folders. For more information refer to the following SkyNet article: 5. Click Next to continue. GFI Archiver 7 Configuring GFI Archiver 146

147 Screenshot 66: Select users to exclude 6. To exclude the folders specified in the previous screen for specific users, select Selected users only:. 7. From the drop down list, select User or and key in the relative address or user name. Click Add and repeat to add other users. If Selected users only: is not enabled, the folders specified in the previous screen are excluded for all users. 8. Click Finish to finalize setup Removing Excluded Folders Policies 1. Select Configuration tab and click Mailbox Folder Structure Retrieval. 2. Select the Excluded Folder policy to remove and click Remove. GFI Archiver 7 Configuring GFI Archiver 147

148 7.8 Importing s and Calendar Items via the GFI Archiver Archive Assistant Using functionality offered by the Archive Assistant, you can import s and calendar items automatically from users mailboxes. The process can be scheduled and is transparent to the users. The import process is configured by performing the following steps: Step 1: Deploy the Archive Assistant on your users machines. For more information refer to Installing the Archive Assistant via GPO in Windows Server 2008 (page 229). Step 2: Enable the Manual Archiving method. For more information refer to Configuring Archiving Method (page 126). Step 3: From the Roles and Permissions area, ensure the user has the relevant permissions to archive: Archive Assistant archive s (to own mailbox) Archive Assistant archive s (to mailboxes defined in access control) Archive Assistant archive files Step 4: Configure the settings required to automatically import items from users mailboxes. For more information refer to Configuring Default Import Settings (page 149). GFI Archiver 7 Configuring GFI Archiver 148

149 Step 5: Assign Import settings to the detected users. For more information refer to Configuring import settings for detected users (page 153). 1. You cannot import items if Archive Assistant is not installed on the client machine. 2. Import starts when Microsoft Outlook is running on the client machine. 3. If Microsoft Outlook is closed, the import process is paused, resuming again once Microsoft Outlook is re-opened Configuring Default Import Settings Configure settings for automatic import of s and calendar items from user's mailboxes: 1. Go to Configuration > Archive Assistant. 2. Click New Default Import Settings. Once Default Import Options are set the button name changes to Update Default Import Settings. GFI Archiver 7 Configuring GFI Archiver 149

150 Screenshot 67: Configuring default import settings 3. In the Process s area, select from the following options: OPTION Once Check for new s every Select to run the import process one time only. You can schedule the process in the following screen that appears when this import option is selected. Select to run the import process periodically. Specify the interval in the provided field. The Schedule screen is skipped if this import option is selected. 4. In Date, select one of the following options: GFI Archiver 7 Configuring GFI Archiver 150

151 OPTION All Time Prior to Custom Select to run import process indefinitely. This option enables you to keep recent on your mail server and archive only older s. For example, if you want users to keep only s received in the last 30 days in their mailboxes while freeing the mail server of s older than 30 days, set the Prior to date to 30 days and select Permanently delete archived s immediately. Select to run the import process for a limited period of time. Specify a start and end date using the provided fields. 5. In Archive Types, select one or both of the following: OPTION s Calendar Items Select to import s. Select to import Microsoft Outlook calendar items. 6. (Optional) In Archive s in folder (optional), specify the folder name from where you want to import s, for example, Inbox. Using special characters in folder names The folder path can be overwritten with the desired folder path using the following conventions: \ (back slash) is represented by /\ / (forward slash) is represented by // For example: To input a folder path for the following folder structure: Input the following path: Inbox\Managerial//CEO\Requests/\Queries 7. In Maximum size, set the maximum size of the s to import. Default is set to 2 MB. 8. Click Next. 9. If in step 3 above, you have selected to run the import process Once, the Schedule window is displayed. The Schedule screen is skipped if the Check for new s every import option is selected: GFI Archiver 7 Configuring GFI Archiver 151

152 Screenshot 68: Configure import schedule 10. In the Schedule settings, configure the following: OPTION Schedule Import Start time End time Select the import process frequency by checking the desired days. Define the time of day during which the process will start. Enter the time at which the process will stop. 11. Click Next. 12. In the Deletion Policy area, select one of the following: OPTION Do not delete archived s Permanently delete archived s immediately Permanently delete archived s after n days Select this option to keep all s from being deleted after they are archived. When selected, the s will be deleted as soon as they are archived. Specify the number of days to keep local copies of messages after these have been archived (Default 30 days). 13. In the Calendar Items Deletion Policy area, select one of the following: GFI Archiver 7 Configuring GFI Archiver 152

153 OPTION Do not delete archived calendar items Permanently delete archived calendar items immediately Permanently delete archived calendar items after n days Select this option to keep all calendar items from being deleted after they are archived. When selected, calendar items will be deleted as soon as they are archived. Specify the number of days to keep local copies of calendar items after these have been archived (Default 30 days). 14. Click Finish Configuring import settings for detected users When the Archive Assistant is deployed on a client machine for the first time, the new user is detected by GFI Archiver and added to the detected users list in the Import s page. The Administrator needs to manually assign import settings to every new user for automatic import of s and calendar items from user's mailboxes. To assign Import Settings: 1. Go to Configuration > Archive Assistant. 2. In the detected users list, click to highlight the new user. 3. Select one of the following Import options: OPTION Continue Importing Pause Importing Click to resume a paused import process. Highlight a user from the list of detected users and click Pause Importing to temporarily stop an import process. For example, use this option when performing maintenance on your mail server. GFI Archiver 7 Configuring GFI Archiver 153

154 OPTION Re-Import Delete Use Default Settings Customize Settings This option is used when an import process is not completely successful. GFI Archiver uses Single Instance Storage, a method that ensures no duplicate s are archived within the Archive Stores. Select a user from the detected users list and click to delete. Click to assign the Default Import Settings to the selected user.for more information refer to Configuring Default Import Settings (page 149). If you want to assign a set of different settings to a particular user, select Customize Settings and define the settings as described in For more information refer to Configuring Default Import Settings (page 149). 7.9 Configuring default File Archive Assistant settings The File Archive Assistant is a small client-side agent that enables users to manually archive files from any location on their machine. Users can also setup synchronized folders from which GFI Archiver can automatically archive files. Configure the Default File Archive Assistant Settings to enable File Archive Assistant clients installed on your network to inherit the configuration settings. The Summary of Default File Archive Assistant Settings located in Configuration > File Archive Assistant lists the currently configured settings. To configure or update Default File Archive Assistant Settings: 1. In GFI Archiver, go to Configuration > File Archive Assistant. 2. Click Update Default File Archive Assistant Settings. 3. Configure the following details: OPTION Polling interval Enable default synchronized folder Default Destination mailbox path Maximum file size Include / Exclude extensions Define the interval in minutes at which GFI Archiver polls synchronized folders on client machines to retrieve files for archiving. When enabled, the folder specified in the Default Synchronized Folder field will be pushed to all the client machines on which the File Archive Assistant is installed. If the folder does not exist on the client machine, it is automatically created. Any file placed within this folder will be synchronized with GFI Archiver. This feature is intended to automate the configuration process for File Archive Assistant. The path set in the Default destination mailbox path field determines the structure seen by the user in the Archive tab of the GFI Archiver Web UI. The default folder name is set to Sync Files. Define the maximum size of files to be archived. Files exceeding the maximum size are not archived. Use this field to manage the existing list of file types. GFI Archiver 7 Configuring GFI Archiver 154

155 7.9.1 Enabling File Collaboration using the File Archive Assistant Through the File Archive Assistant (FAA), GFI Archiver can store copies of important files and folders retrieved from client machines. This process can be done automatically without any user input and without interrupting any existing workflows. With File Archive Assistant, users can also share files and folders between their own machines, and also share between different users. This enables collaboration and version control. Teams and global employees can work on shared documents without relying on third-party online file storage. All important company data is stored in one secure, compliant and searchable archive. When file collaboration is set up, File Archive Assistant archives every change saved by users and creates a file history accessible via the GFI Archiver interface. Users can retrieve files in their older state or also resolve conflicts when a file is changed by two or more users simultaneously. Watch the video: GFI Archiver File Archive Assistant walkthrough To enable File collaboration, the following steps are required: Step 1: Create a public user in Active Directory - this new user's mailbox will be used by GFI Archiver as a shared repository Step 2: Use the Access Control feature in GFI Archiver to grant user access to the newly created public user's mailbox. The collaboration files will be archived in this shared mailbox. Step 3: In File Archive Assistant, configure the destination mailbox to point to this shared mailbox. Step 4: In File Archive Assistant, configure a sync folder for each user. See also: How to resolve a conflict Create a public user in Active Directory 1. Go to Start > Administrative Tools > Active Directory Users and Computers. 2. Expand the domain node in the right hand pane and select Users. GFI Archiver 7 Configuring GFI Archiver 155

156 3. Right click in the left pane and select New > User from the context menu. 4. Enter the required details and click Next. GFI Archiver 7 Configuring GFI Archiver 156

157 5. Key in a password in the available field. Key in the password again in the Confirm password field. 6. Select Password never expires. 7. Click Next. 8. Click Finish Resolving a file conflict When two users have access to a folder located in a shared mailbox and are updating the same file simultaneously, File Archive Assistant detects a conflict when trying to synchronize the saved file. Each user is alerted of the conflict in the Summary screen. To resolve a conflict, perform the following action: 1. Double-click the File Archive Assistant icon in the system tray. 2. Click the Summary tab. 3. In the Conflict Status field, click Resolve Conflict. 4. In the Resolve Conflicts window, perform any of the following options: OPTION Filename Server Copy Click the file name to open the file that is stored locally on your machine. Click Open theirs to open the file on the GFI Archiver server. This file has _theirs after the file name. GFI Archiver 7 Configuring GFI Archiver 157

158 OPTION Action Keep Mine - Click this option to keep your local file and delete the file with the extension _theirs. A message box is shown to confirm your action. On next synchronization the file is deleted from the server Managing Archive Stores Keep Theirs - Click to keep the server copy and delete the local copy. A message box is shown to confirm your action. The kept file is renamed to its original name. Within GFI Archiver, Archive Stores are the containers that contain the archived s. Archive Stores include several components, such as: A database where metadata is stored A database where both metadata and data is stored A disk location used as an index A disk location used as storage for data. Archive Stores are created automatically by GFI Archiver, based on an Archive Store Profile that defines their name, database type and file locations. IMPORTANT If New Archive Store Settings are not configured, s are not archived. For more information refer to Configuring New Archive Store Settings (page 160) Viewing Configured Archive Stores To view configured Archive Stores, select Configuration tab and from Archive area, click Archive Stores. The Summary of new Archive Store can be expanded to show how New Archive Store Settings are configured. Every newly created Archive Store will inherit these settings. GFI Archiver 7 Configuring GFI Archiver 158

159 Screenshot 69: Viewing Archive Stores By default, configured Archive Stores are shown grouped by year and listed in tables with the most recent on top. This view can be changed using the Group by and Order sorting options. The table below shows the available Archive Store fields: OPTION Archive Store Start Date End Date Defines the name given to the Archive Store previously configured. The start date indicates the first day of the period for s contained within the archive store. s that fall outside this range are archived in another Archive Store. The end date is the last day of the period for s contained within the archive store. s that fall outside this range are archived in another Archive Store. GFI Archiver 7 Configuring GFI Archiver 159

160 OPTION Status Defines the status of the Archive Store in question. Available statuses include: Archive Store Full: Displayed when the Do not archive more s in this Archive Store is enabled (when Editing existing Archive Store options) or when an Archive Store running on a Microsoft SQL Express database has reached the 4 GB limit. Denotes no further archiving is possible. Online: Denotes that the Archive Store is currently in use. Indexing Normal: Denotes that the Archive Store was used in the past but is no longer used. Indexing Paused: Displayed when indexing is paused. Indexing Pending: Displayed temporarily while GFI Archiver rebuilds an index. Read-only: A Read-only Archive Store can be accessed and is available for search but new s cannot be archived within it. Select an Archive Store from any Archive Stores list and click about that Archive Store s settings and statistics. to view more information Configuring New Archive Store Settings The New Archive Store Settings enable GFI Archiver to use a set of previously keyed in settings to create new archive stores automatically. To view a summary of the current New Archive Store settings: 1. Select Configuration tab. 2. Click Archive Stores. 3. Click next to Summary of Archive Store Settings. After installing GFI Archiver, you will be prompted by the post installation wizard to configure New Archive Store Settings. For more information refer to Configuring New Archive Store Settings via Post Install Wizard (page 56). To edit New Archive Store Settings: 1. Select Configuration tab, then click Archive Stores. 2.In the Archive Stores window, click New Archive Store Settings. 3.(Optional) To disable browse and search functionality within the archive stores, uncheck Allow users to browse and search this archive store (enabled by default). Click Next to continue. 4. (Optional) Click Advanced to edit the naming pattern for new Archive Stores. Select an option from the predefined list or select Custom Pattern to customize the naming convention. Click Next to continue. GFI Archiver 7 Configuring GFI Archiver 160

161 Screenshot 70: Post install wizard - select database type. 5. Select where to store your archived s. Available options are: DATABASE TYPE Microsoft SQL Server with File Storage Recommended if you have more than 500 mailboxes to archive or an average mail flow of more than 8000/day. Select this option to prompt GFI Archiver to use a SQL Server to store the headers and metadata, and a disk location you specify to store the data. Choosing this option requires a SQL Server installation. Microsoft SQL Server Recommended if you have less than 500 mailboxes to archive, an average mail flow of more than 8000/day or if you need full auditing of both user and database activity. Select this option to prompt GFI Archiver to use a SQL Server to store both headers/metadata as well as data. Choosing this option requires a SQL Server installation. GFI Archiver 7 Configuring GFI Archiver 161

162 DATABASE TYPE SQL Server Express with File Storage Recommended if you have less than 100 mailboxes to archive or an average mail flow up to s/day. Select this option to prompt GFI Archiver to use a SQL Server Express database to store headers and metadata and a disk location you specify to store the data. Choosing this option requires a SQL Server Express installation. This is freely downloadable from the Microsoft website. GFI Archiver Database Recommended for evaluation purposes only. Select this option to store all header/metadata in a Firebird database and the data in a disk location you specify. 6. Click Next to continue setup. Choosing this option does NOT require you to install the Firebird database. GFI Archiver will automatically create a database for you. 7. (Optional) Check Create a new Archive Store now to let GFI Archiver create the first archive store. A welcome is sent by GFI Archiver to confirm that the new archive store has been created. 8. Click Finish Choosing and Preparing a Database for Use With GFI Archiver As an archiving solution, GFI Archiver is highly dependent on your database infrastructure setup for high performance in terms of data archival and retrieval. GFI Archiver can be configured to run in various hardware setups and combinations. The table below shows the typical recommended configurations. These guidelines and configurations may vary according to user activity, daily flow and the software configurations (such as Folder Structure Retrieval). MAILBOXES/VOLUME 50 mailboxes or less Evaluation ONLY 100 mailboxes or less Average mail flow of up to s/day 50 mailboxes or more Average mail flow of more than 8000/day More than 500 mailboxes Average mail flow of more than 8000/day RECOMMENDED DATABASE TYPE GFI Archiver database SQL Server Express with File Storage Microsoft SQL Server Microsoft SQL Server with File Storage Uses a Firebird-based database to archive all data. Uses a SQL Server Express database to store headers and metadata and a disk location you specify to store data. Uses a SQL Server database to store both headers/metadata as well as data. Uses a SQL Server database to store headers and metadata and a disk location you specify for the data. GFI Archiver 7 Configuring GFI Archiver 162

163 Attaching an Archive Store GFI Archiver Archive Stores can be detached and attached again, for example when moving GFI Archiver to a new server. For information on how to detach an Archive Store, refer to Detaching an Existing Archive Store. 1. From Configuration tab, click Archive Stores. 2. Click Attach Archive. Screenshot 71: Attaching an Archive Store 3. In the Configuration screen, perform one of the following: OPTION Archive Store Name Allow users to browse and search the archive store Read-only access Move cursor in this field and type to edit the current name. Select to enable users to search within this particular Archive Store. Enable this option to stop s from being deleted from the selected Archive Store (when Deletion is enabled). While s can be viewed, new s are not archived. Additionally, users are also prevented from adding labels to archived s. GFI Archiver 7 Configuring GFI Archiver 163

164 OPTION Do not archive more s in this Archive Store When enabled, no further s are archived in the selected Archive Store and it is marked as 'Full'. If Deletion is enabled, users are able to remove s from this Archive Store. Additionally, users are able to add labels to archived s. A new archive store will be created when new s need to be archived to that particular date range. 4. Click Next. 5. Select the database type where you want to store archived s and click Next. 6. Specify the Database File Location, File Location and Search Index Location and click Next. 7. Review the Archive Store Summary and click Next. 8. Click Finish Editing Existing Archive Store Details 1. Select Configuration tab, and click Archive Stores. 2. Select an existing Archive Store and click. 3. In the Configuration screen, perform one of the following: OPTION Archive Store Name Allow users to browse and search the archive store Read-only access Do not archive more s in this Archive Store Move cursor in this field and type to edit the current name. Select to enable users to search within this particular Archive Store. Enable this option to stop s from being deleted from the selected Archive Store (when Deletion is enabled). While s can be viewed, new s are not archived. Additionally, users are also prevented from adding labels to archived s. When enabled, no further s are archived in the selected Archive Store and it is marked as 'Full'. If Deletion is enabled, users are able to remove s from this Archive Store. Additionally, users are able to add labels to archived s. A new archive store will be created when new s need to be archived to that particular date range. 4. Click Finish to save changes and exit the wizard or Next to edit additional details related to the existing Archive Store Detaching an Existing Archive Store 1. Select Configuration tab and Archive Stores. 2. Select an existing Archive Store and click Detach. IMPORTANT Detaching an Archive Store does not delete any Archived data. 3. When prompted, click OK. GFI Archiver 7 Configuring GFI Archiver 164

165 Indexing The Search Index feature within GFI Archiver automatically indexes new content archived in the corresponding archive store. This constantly updated search enables users to perform precise and fast searches. This section will show you how to configure the frequency with which GFI Archiver shall index new archived s into the search indexes. You will also learn how to force a full search index rebuild, in cases where you might suspect that the search index is no longer valid. Important Notes 1. Search indexes must always reside on a local hard drive. Indexing will not be available if the index path is specified via a UNC path. 2. For best performance, locate the search index on a separate physical drive than where: Microsoft Exchange Server is installed GFI Archiver is installed SQL Server /Firebird database is located. 3. Indexes are used only for searches. Users are always able to view the new archived s through the browse feature notwithstanding the fact whether s are indexed or not. Configuring Indexing frequency 1. Select Configuration tab and click Archive Stores. 2. Select Index Management. GFI Archiver 7 Configuring GFI Archiver 165

166 Screenshot 72: Search Index Management 3. Configure an indexing schedule using the following options: OPTION Index new archived s every Search indexes are updated with the latest archived s at a fixed interval, for example every half an hour, every hour, every two hours. This index schedule is recommended since it strikes the right balance between update frequency and performance hit. Choosing Immediately causes new content to be indexed as soon as it is stored in an archive store. This guarantees the most up-to-date search index; users will be able to search for and find the latest archived s. Choosing this option can degrade performance due to the updating frequency - depending on the amount of s archived. GFI Archiver 7 Configuring GFI Archiver 166

167 OPTION Index new archived s every day at content is updated on a daily basis at a preset time. This option enables you to schedule indexing during off peak hours. Search for s that archived during the last 24 hours will not be possible due to s that are not yet indexed. 4. Configure the Language Analyzer. For more information refer to Configuring the Language Analyzer (page 167). 5. Configure Index File Location credentials. For more information refer to Configuring Index File Location Credentials (page 167). 6. Click Save. Configuring the Language Analyzer Word Breaking is the breaking down of text into individual text tokens or words. Many languages, especially those with Roman alphabets, have an array of word separators (such as white space) and punctuation used to distinguish words, phrases, and sentences. Word breakers must rely on accurate language heuristics to provide reliable and accurate results. Word breaking is more complex for character-based systems of writing or script-based alphabets, where the meaning of individual characters is determined from context. A "Word Breaker" is vital for the proper indexing of most of the Asian languages (for example Japanese, Chinese, and Arabic) and other languages. IMPORTANT The GFI Archiver language analyzer is enabled by default. It is highly recommended that for optimal indexing performance this is not disabled. Setting Up the Language Analyzer 1. Select Configuration tab and click Archive Stores. 2. Select Index Management. 3. Select/Unselect Enable Auto Language Analyzer to enable/disable Language Analyzer. 4. Select a default language from the Default Language drop down list. If the required language is not listed in the Default Language drop down list, add the required language from the Regional settings option within the Windows control panel Configuring Index File Location Credentials When you configure the Index File Location credentials, you will be able to enter UNC paths when specifying the location where GFI Archiver stores index files for all Archive Stores. GFI Archiver 7 Configuring GFI Archiver 167

168 Ensure credentials you are using have read/write access to the local server. 1. Select Configuration tab and click Archive Stores. 2. Select Index Management. 3. Check the Use the following login and password to access the Index File Location checkbox. 4. Enter your Admin credentials. Click Save. Rebuilding a search index Rebuilding a search index enables you to rebuild indexes that you think are no longer returning the correct search results or became somehow corrupted. Important Notes Rebuilding a search index might take several hours, depending on the amount of s stored in the respective archive store. During an index rebuild, users will not be able to find s in that archive store through the search feature. Rebuilding a search index impacts performance on the server, since this is a processor and hard disk intensive operation. It is recommended that this procedure is undertaken during off peak hours, for example after office hours. Always rebuild one index at a time for the reasons listed above. Rebuilding a Search Index 1. Select Configuration tab and click Archive Stores. 2. Select the Archive Store for which to rebuild the index and click Rebuild Index. Pausing and resuming indexing Indexing can be paused and restarted through the and. This enables you to pause lengthy indexing operations during peak hours and continue at a time of low activity, for example, after office hours. Pausing an index during a merge stops users from finding s in that archive store through the search feature. Pausing a rebuild does enable users to use the archive store. Search index states The different states of a GFI Archiver search indexes: GFI Archiver 7 Configuring GFI Archiver 168

169 STATE Initializing - this is the status when the search index is being created. An index is not expected to stay in this state for more than 10 minutes. Invalid - this indicates that the search index is most likely to be corrupt. Merging - GFI Archiver maintains sub-indexes which are smaller versions of the main index. These are used to increase the performance of the search index. Sub-indexes for an archive store are merged to the main search index when a number of sub-indexes are created or automatically at 2:00am. Paused - the process is manually paused from the GFI Archiver Configuration. The index will remain in this state until the Resume Index button is clicked. Online - the search index is online. Pending - this state shows that the search index will start rebuilding shortly. Rebuilding - this indicates that the indexer is indexing a database. The duration of rebuilding an index depends on the size of the database being indexed Scheduling Archive Stores The Archive Store Schedule enables you to set the frequency with which GFI Archiver automatically starts archiving s to a new Archive Store. IMPORTANT Changing these settings can affect performance. We recommend configuring your Archive Stores to roll-over on a Bi-Monthly schedule. This way, databases should stay at a more manageable size, which is beneficial if there is a need to move the database or rebuilding its search index. A Bi-Monthly archive store should also have some performance gains when searching. For example, to search for an dated February 2012, GFI Archiver searches a small Bi-Monthly database instead of a large yearly database, hence providing faster retrieval. GFI Archiver changes the Archive Store based on a specifically configured time schedule. This feature is available for all types of databases used with Archive Stores. The available options are: Monthly Bi-Monthly (default) Quarterly Half yearly Yearly If an Archive Store exceeds the maximum database size, GFI Archiver automatically creates a new Archive Store based on the configured New Archive Store Settings. This feature is only available for Archive Stores based on SQL Server Express databases. To change the Archive Store Schedule: GFI Archiver 7 Configuring GFI Archiver 169

170 1. From Configuration tab, click Archive Stores. 2. Select Schedule Archive. 3. Select one of the available options and click Save Backup Archive Stores It is highly recommended to include the GFI Archiver Archive Stores in routine server backup procedures Online Backup Online backup is done using a backup application which backups Archive Stores without the need to stop the GFI Archiver services. For more information refer to Offline Backup Offline backup can be done in environments where online backup is not possible. The GFI Archiver services must be temporarily stopped while backing up Archive Stores. The following is a list of offline backups: Backup an Archive Store Based on Microsoft SQL Server Backup an Archive Store Based on Microsoft SQL Server and File System Backup an Archive Store Based on GFI Archiver (Firebird) Database and File System Backup an Archive Store based on SQL Server In this type of Archive Store, the following information is stored: Archived metadata - Stored in the SQL Server database. Compressed binary source - Stored in the SQL Server database. Search index entries - Stored on disk. To backup an Archive Store: 1. From GFI Archiver, go to Configuration > Archive Stores and click 2. Take note of the following information for quick reference: Server Database Path to search index 3. Launch the Services management console from Start > Run and type services.msc. 4. Stop all GFI Archiver services. 5. Using the search index path determined in step 2, backup the Archive Stores search indexes, either by manually copying and pasting the search index folder or using a backup utility. GFI Archiver 7 Configuring GFI Archiver 170

171 Screenshot 73: Backup an SQL database 6. From the SQL Server, launch the Microsoft SQL Server Manager and backup the archive database noted in step 7. To backup a database, right-click on the database and select Tasks > Back up. A maintenance plan can be created in SQL Server to schedule periodic backups of the archive database. 7. Return to the GFI Archiver server and from the Services management console, restart all GFI Archiver services. Backup Archive Store based on Microsoft SQL Server and File System In this type of Archive Store, the following information is stored: GFI Archiver 7 Configuring GFI Archiver 171

172 Archived metadata - Stored on the Microsoft SQL Server database. Compressed binary source - Stored on disk. Search index entries - Stored on disk. To backup an Archive Store: 1. From GFI Archiver, go to Configuration > Archive Stores and click 2. Take note of the following information for quick reference: Server Database Path to binary source Path to search index Move pointer over the path to view the full path. 3. Launch the Services management console from Start > Run and type services.msc. 4. Stop all GFI Archiver services. 5. Using the paths determined in step 2, backup the Archive Stores binary source and search index, either by manually copying and pasting the folders or using a backup utility. GFI Archiver 7 Configuring GFI Archiver 172

173 Screenshot 74: Backup an SQL database 6. From the Microsoft SQL Server, launch the Microsoft SQL Server Manager and backup the archive database noted in step 2. To backup a database, right-click on the database and select Tasks > Back up. A maintenance plan can be created in Microsoft SQL Server to schedule periodic backups of the archive database. 7. Return to the GFI Archiver server and from the Services management console, restart all GFI Archiver services. Backup Archive Store based on GFI Archiver (Firebird) Database And File System In this type of Archive Store, the following information is stored: GFI Archiver 7 Configuring GFI Archiver 173

174 Archived metadata - Stored on disk. Compressed binary source - Stored on disk. Search index entries - Stored on disk. To backup an Archive Store: 1. From GFI Archiver, navigate to Configuration > Archive Stores and click. 2. Store the following paths for quick reference: Path to Firebird database Path to binary source Path to search index Move pointer over the path to view the full path. 3. Launch the Services management console from Start > Run and type services.msc. 4. Stop all GFI Archiver services. 5. Using the paths determined in step 2, backup the Archive Stores database file, binary files and search indexes, either by manually copying and pasting the files in a backup location or using a backup utility. 6. From the Services management console, restart all GFI Archiver services. Restoring an Archive Store added in GFI Archiver 1. From GFI Archiver, navigate to Configuration > Archive Stores and click 2. From the Archive Store Statistics dialog, note the following properties for quick reference: TYPE OF ARCHIVE STORE Microsoft SQL Server ARCHIVE STORE PROPERTIES Server Database Microsoft SQL Server and file system Path to search index Server Database Path to binary source Firebird Database Path to search index Path to Firebird database Path to binary source Path to search index 3. Launch the Services management console from Start > Run and type services.msc. GFI Archiver 7 Configuring GFI Archiver 174

175 4. Stop all GFI Archiver services. 5. Refer to the location of files noted in step 2 to override the Archive Store files with the restored backup files as follows: Firebird database - replace the Firebird database on disk with the backed up Firebird database SQL database - from the Microsoft SQL Manager right-click the backed up database and select Tasks > Restore. binary source - replace the binary folder on disk with the backed up binary folder Search index folder - replace the Search index folder on disk with the backed up Search index folder. 6. From the Services management console, restart all GFI Archiver services. Restoring an Archive Store that is not added in GFI Archiver 1. Depending on the type of Archive Store to restore, restore the applicable backed up data as follows: Firebird database - restore the Firebird database on disk SQL database - from the Microsoft SQL Manager right-click the backed up database and select Tasks > Restore. binary source - restore the binary folder on disk Search index folder - restore the search index folder on disk Take note of the paths where all data has been restored. 2. Add the restored Archive Store in GFI Archiver ensuring that all paths configured during the wizard, for example search index path or SQL database, are the paths of the restored data Moving s from one database to another GFI Archiver supports various types of Archive Stores. The software enables you to move s from one database to another or to many other databases. This feature is only applicable when moving the original s source stored on disk of a Firebird database or SQL Server file system. s cannot be moved from a SQL Server database when the source is stored on the SQL Server database. Examples: A Firebird database becomes very large in size and hence slow to load data, so the administrator decides to switch to a SQL Server database. An SQL file system stored on disc, stores s of one whole year. It is recommended to separate the s to multiple databases, for example one database for each month. GFI Archiver 7 Configuring GFI Archiver 175

176 Important notes 1. It is highly recommended to backup the archive stores before moving s. This process is described in the Backup Archive Stores chapter of this manual. 2. Moving s between archive stores requires a high amount of computer processing resources and can reduce the performance of the GFI Archiver server substantially. 3. The folder structure of s is lost when moving s, however the s can be resynchronized to retrieve the folder structure. The folder structure of s deleted from the mailbox is permanently lost. 4. Ensure that the new database where s are going to be moved to, is added in the GFI Archiver Archive Stores. This process is described in the Managing Archive Stores chapter. 5. Multiple databases can be created to cover different s date ranges Configure the GFI Archiver Import Service The GFI Archiver Import Service is used to analyze the source database binary files and move these files in the appropriate archive store. Adding a new store 1. Select Start Program GFI Archiver Import Tools GFI Archiver Import Service Configuration. 2. Click Change Settings to access the archive stores. 3. Click Add Store to launch the Add new store dialog. 4. From the Name drop-down list select the archive store where s are going to be moved to. 5. Specify the date range for this archive store by setting the From and To calendars. Dates specified should not overlap with dates specified in other archive stores. 6. Click OK to add the new archive store. 7. To add other archive stores covering different date ranges, repeat steps 3 to When all the archive stores are configured, click Apply Settings and Close to save settings Remove source Archive Stores from GFI Archiver Remove source Archive Stores from GFI Archiver before migration to avoid corruption of data. To do this: 1. In GFI Archiver, go to Configuration Archive Stores. 2. Click the delete button next to the source database. GFI Archiver 7 Configuring GFI Archiver 176

177 It is recommended to store the binary path of the source database for reference in the next step, prior to the removal of the archive store Move binary files to the GFI Archiver Import Service GFI Archiver includes a command line tool that moves all binary files of a database to the GFI Archiver Import Service Pickup folder. To move the binary files: 1. Launch Microsoft Windows command prompt and change the directory to <GFI Archiver installation path>\mais\bin. 2. Execute movebix.exe as follows: movebix.exe <source binary path> <GFI Archiver pickup folder> Where: Source binary path - the binary folder of the GFI Archiver Firebird database. GFI Archiver pickup folder - the folder from which GFI Archiver Import Service picks up s and stores them in the appropriate archive store. The default pickup folder path is <GFI Archiver installation path>\mais\pickup. Example: movebix.exe c:\program Files\GFI\Archiver\Databases\Default\Binary c:\program Files\GFI\Archiver\MAIS\Pickup Binary files can also be copied instead of moved by using copybix.exe instead of movebix.exe. 3. Repeat this command for every database to be moved. 4. binary files from the source path are now moved to the GFI Archiver Pickup folder and processed by the GFI Archiver Import Service Moving s to the GFI Archiver archive stores After moving the binary files to the GFI Archiver Import Service pickup folder, s are processed as follows: s are placed in the queue folder so that they can be placed in the appropriate archive store. If an in the pickup folder has a date that does not fit the date range of the archive stores configured, or the is corrupted, the import service will move the to the Unclassified folder. The default paths of these folders are: FOLDER Pickup folder DEFAULT PATH <GFI Archiver Installation Path>\MAIS\Pickup GFI Archiver 7 Configuring GFI Archiver 177

178 FOLDER Queue folder Unclassified folder DEFAULT PATH <GFI Archiver Installation Path>\MAIS\Queue <GFI Archiver Installation Path>\MAIS \Unclassified Unclassified s The GFI Archiver Import Service classifies as unclassified when the date is not within a date range of an archive folder. For each unclassified , the GFI Archiver Import Service creates four files in the Unclassified folder, for example: mchnname_ _[ ].body mchnname_ _[ ].emc mchnname_ _[ ].eml mchnname_ _[ ].envelope The first part of the file name in the Unclassified folder begins with the year and month in which the was sent. If there are 500 or more s in the Unclassified folder, the import process is suspended. In this case, delete any unwanted s or import the s to an archive folder as follows: 1. Configure one or more archive folders to cover the dates of the s that are required to be archived. 2. Stop the GFI Archiver Import Service by navigating to Start Control Panel Administrative Tools Services. 3. Right-click GFI Archiver Import Service and click Stop. 4. Go to Unclassified folder. 5. Move all four files of the s to import to the Queue folder. 6. Return to the services management console, right-click GFI Archiver Import Service and select Start Restoring the mailbox folder structure of moved s When s are moved or copied from one database to another, the mailbox folder structure is lost. The mailbox folder synchronization process needs to be restarted to import the folder structure of moved s. Re-synchronizing the mailbox folder structure requires a high amount of computer processing resources and can reduce the performance of the GFI Archiver server substantially. The folder structure of moved s that were deleted from the Microsoft Exchange mailbox is permanently lost. To resynchronize the folder structure: GFI Archiver 7 Configuring GFI Archiver 178

179 1. From the GFI Archiver server, navigate to <GFI Archiver installation folder>\core\umpolling\. 2. Delete all files of type.dat. 3. Navigate to Start Run and type services.msc. 4. Right-click GFI Archiver Core Service and select Restart Upgrading the Database Schema It is important that all Database Schemas are upgraded to the latest schema to ensure GFI Archiver works correctly. This process can be carried out either during the upgrade process (by the Installation Wizard) or at a later stage using the Bulk Schema Upgrader. Use the Bulk Schema Upgrader to: Upgrade the GFI Archiver database schemas or Verify that you are using the latest database schema To launch the Bulk Schema Upgrader: 1. From the GFI Archiver machine, go to the GFI Archiver installation folder, open BulkSchemaUpgrader folder and click BulkSchemaUpgrader.exe. Screenshot 75: The Bulk Schema Upgrader GFI Archiver 7 Configuring GFI Archiver 179

180 2. Select the databases to upgrade and click Upgrade. When upgrading the database schema of an SQL database, enter the credentials of the System Administrator, SA user, or the database owner (dbo role) when prompted Attaching a GFI MailArchiver 3 Database IMPORTANT You can only attach GFI MailArchiver 3 databases based on SQL Server. Microsoft Access Databases are not supported. IMPORTANT Attached GFI MailArchiver 3 databases are read-only and can only be used for browsing and searching. 1. Select Configuration tab and click Archive Stores. Click. 2. Key in an Archive Store name, select whether to allow users to use the new Archive Store and the method used to create it. Select Wizard option and click Next. 3. Select Microsoft SQL Server option and click Next. GFI Archiver 7 Configuring GFI Archiver 180

181 Screenshot 76: Attach a GFI MailArchiver 3 database 4. Select Attach a version 3 database and select the database to attach. 5. Click Next to continue Configuring Roles and Permissions GFI Archiver ships with a set of roles that can be assigned to selected users to grant them the required permissions to access specific functions within GFI Archiver. One of these roles is set as default and can neither be deleted nor modified. After GFI Archiver 2014 is installed (or upgraded), access is controlled according to Active Directory permissions. After assigning the first role with the 'Manage access configuration' permission to a user or group (using the GFI Archiver Roles and Permissions feature), the Active Directory permissions are overridden by the roles assigned in GFI Archiver. Active Directory users that have not been assigned a role and do not make part of any group, are assigned to the Default Role automatically. For more information refer to Default Role (page 187). The initial configured set of roles shipped with GFI Archiver are: GFI Archiver 7 Configuring GFI Archiver 181

182 Administrator Auditor Full Access and Administrator Full Access User (Default) These roles can be customized as required or deleted (except for Default Role) Viewing configured roles and permissions From the Configuration tab, click Roles and Permissions. Screenshot 77: Viewing configured roles and permissions The Roles and Permissions page is divided in two windows. Manage Roles and Permissions: Create, configure or delete roles and permissions. The top window displays the currently configured roles. Click on each role to view the permissions set for that role. Use the provided controls in this window to: GFI Archiver 7 Configuring GFI Archiver 182

183 OPTION Add New Role Configure Role Permissions Delete Role Click to add a new role. Highlight an existing role, then click to edit role permissions. Select an existing role and click to remove role. Users assigned to that role are reverted back to the default role. For more information refer to Default Role (page 187). Manage Role Assignments: Assign, edit or remove roles for Active Directory users or groups. The bottom window shows a list of Active Directory users and groups and their assigned roles. Use the provided controls in this window to: OPTION Assign Edit Remove Change Priority Click to assign a role to an Active Directory user or group. Highlight an existing user or group and click to edit the role assignment. Select an existing user or group and click to remove role assignment. Users assigned to that role are reverted back to the default role. Click to open the Change group priority window and change the order of how GFI Archiver checks for permissions assigned to users. Select an existing Group role assignment and click to increase or decrease priority. GFI Archiver first checks if user is assigned a role. In that case, the individual role assignment has the first priority. If the user is not mapped to any role, GFI Archiver then checks if the user is part of a group and grants the permissions assigned to the group. The user can be part of more than 1 group. In that case, the group with the highest priority takes precedence. Changing priorities is only allowed for groups. Filter By Find Role All Roles Filter by User or by Group. Use Find Role button to input an Active Directory user or group in a dialog and view Roles and Permissions for selected user or group. Select a Role from the drop down list to filter the view by Role Adding a new role Create new roles according to your organization's requirements. Each role is defined by a unique name and a set of permissions. To add a new role: 1. Go to Configuration > Roles and Permissions. GFI Archiver 7 Configuring GFI Archiver 183

184 2. Click Add new Role. 3. In the Role Name field, enter a name that defines the new role. 4. Select the permissions assigned to the new role from the following set of values: OPTION View All s Manage general configuration Manage access configuration User can view all s for all GFI Archiver users. This permission grants the user access to most configuration nodes (excluding Access Control, Roles and Permissions, and Auditing nodes) Select to grant permissions to the Roles and Permissions and Access Control configuration. IMPORTANT If a user with Administrative rights revokes this permission to himself or to the group he makes part of, he will no longer be able to access Roles and Permissions and Access Control. Manage Auditing configuration View Auditing User can access and configure Auditing. User can view all auditing reports. GFI Archiver 7 Configuring GFI Archiver 184

185 OPTION Connect using IMAP Generate MailInsights Reports (All) Generate MailInsights Reports (for Mailboxes defined in Access Control) Manually archive s (to own mailbox) Manually Archive s (to Mailboxes defined in Access Control) Manually Archive Files Delete s (from own mailbox) Delete s Click to grant permission to connect to GFI Archiver using IMAP. For more information refer to Configuring IMAP Server (page 190). User can generate MailInsights Reports for all GFI Archiver users. Select to grant permission to generate MailInsights reports for mailboxes defined in Access Control. Users are not able to view the users' s unless View All s permission is set. User is able to manually archive s to own mailbox using the Archive Assistant. Archive s to mailboxes the users have access to. For more information refer to Access Control (page 189). Manually archive files to own mailbox using the Archive Assistant. User is able to delete s from own mailbox. User is able to delete s only if Deletion is enabled. Permissions can still be set but the delete functionality will not be available. For more information refer to Configuring Deletion (page 209). User is granted permission to delete s from all mailboxes he has access to. User is able to delete s only if Deletion is enabled. Permissions can still be set but the delete functionality will not be available. For more information refer to Configuring Deletion (page 209). Create/Assign Labels to s Select to grant the user permission to create personal labels and assign them to s from the view window. For more information refer to Working with archived items (page 84). 5. Click Save Assigning Roles A user or a group can be assigned one Role. No user or group can be assigned two roles. However, since a user can be a member of more than one group, each group assigned to a Role will have priority. This is done to overcome inheritance issues. Users will be automatically assigned higher priorities than groups. To assign a role: 1. Go to Configuration > Roles and Permissions. 2. Click Assign Role. GFI Archiver 7 Configuring GFI Archiver 185

186 3. In the User/Group field, select an Active Directory user or group. 4. In the Role field, select a role from the drop down list and click Add. 5. The selected user or group is added to the list. To remove an entry, click. 6. Click Save Configuring a Full Access role GFI Archiver ships with five predefined roles, two of which offer different levels of Full Access. Depending on your requirements, assign a Full Access role as follows: 1. Select Configuration and click Roles and Permissions. 2. In the Manage Role Assignments area, click Assign Role. 3. In the User/Group field, select an Active Directory user. 4. In the Role field, select: GFI Archiver 7 Configuring GFI Archiver 186

187 ROLE Full Access Full Access and Administrator Select the Full Access role for users who need to access mailboxes belonging to other users. This role grants users access to all s archived within GFI Archiver and to MailInsights reports. Users assigned to this role do not have access to Configuration and Auditing areas. Assign the Full Access and Administrator role for Administrators of GFI Archiver who need access to the configuration area. This role also grants users access to all s archived within GFI Archiver, to Auditing and to MailInsights reports. 5. Click Add. 6. The selected user is added to the list. 7. Click Save Deleting Roles To delete a role: 1. Go to Configuration > Roles and Permissions. 2. Select a role and click Delete Role Default Role The Default Role is assigned automatically to Active Directory users that have not been assigned a Role. This process is carried out by GFI Archiver when new user mailboxes are added. The Default Role is assigned after GFI Archiver checks: 1. If user has been assigned a role 2. If user is part of a group that is assigned a role If both steps are not confirmed, the Default Role is assigned automatically to Active Directory users. The Default Role is read-only and can neither be deleted nor modified. The Default Role is configured with the following permissions: OPTION DEFAULT PERMISSION STATUS View all s Manage general configuration Manage Auditing configuration Manage access configuration A user with this permission is allowed to view all s in mailboxes he has access to. This permission grants access to the GFI Archiver configuration area. For more information refer to Configuring GFI Archiver (page 124). Allows a user to change Auditing settings. For more information refer to Configuring Auditing (page 205). Grants permission to configure group managers and user level access on specific mailboxes. For more information refer to Access Control (page 189). DISABLED DISABLED DISABLED DISABLED GFI Archiver 7 Configuring GFI Archiver 187

188 OPTION DEFAULT PERMISSION STATUS View Auditing Connect using IMAP Generate MailInsights Reports (All) Generate MailInsights Reports (for Mailboxes defined in Access Control) Archive Assistant archive s (to own mailbox) Archive Assistant archive s (to Mailboxes defined in Access Control) Archive Assistant archive files Delete s (from own mailbox) Delete s Create/Assign Labels to s Rename folders Enables user to view audit reports in the Auditing tab. For more information refer to Audit Reports (page 207). Allows a user to connect to GFI Archiver using IMAP. For more information refer to Configuring IMAP Server (page 190). A user with this permission is able to generate MailInsights reports for all GFI Archiver users. For more information refer to Achieving results with GFI Archiver - Analyze your archived s (page 121). Allows user to generate MailInsights reports for specific users defined in Access Control. Grants a user permission to use the Archive Assistant to archive s from within Microsoft Outlook to their own archive on GFI Archiver. Grants a user permission to use the Archive Assistant to archive s from within Microsoft Outlook to specific mailboxes defined in Access Control. Grants a user permission to use the Archive Assistant to archive files saved in Microsoft Outlook to their own archive on GFI Archiver. A user with this permission is allowed to delete s from his own archive on GFI Archiver. A user with this permission is allowed to delete s from other users' mailboxes defined in Access Control. For more information refer to Configuring Deletion (page 209). Enables users to categorize s and calendar items through labeling. This feature is useful during searches for specific types of archived items. For more information refer to Working with archived items (page 84). Grants a user permission to rename folders from the GFI Archiver Web UI, IMAP and in Outlook Connector. When using the Rename folders permission in conjunction with Folder Synchronization you might experience some problems where the renamed folder reverts back to its original name. This happens when the old folder still resides in Exchange. DISABLED ENABLED DISABLED DISABLED ENABLED ENABLED ENABLED ENABLED ENABLED ENABLED DISABLED File Archive Assistant archiving Ensure this permission is enabled for users who need to archive files using the File Archive Assistant. For more information refer to Deploying the File Archive Assistant (page 233). ENABLED GFI Archiver 7 Configuring GFI Archiver 188

189 For the Delete s (from own mailbox) and Delete s (from Mailboxes defined in Access Control) permissions, user is able to delete s only if Deletion is enabled. Permissions can still be set but the delete functionality will not be available. For more information refer to Configuring Deletion (page 209) Access Control By default, Active Directory Users can browse and search only their archived items. Access Control enables you to group users together and grant them access to other users archived items. The preconfigured groups are listed in the table below. OPTION Group managers User access control Shared mailboxes Enables users with a management or supervisory role in your organization to browse and search through archived items of all the users forming part of that Active Directory group. Enables specific users to browse and search archived items of other users. For example, this feature can be used to grant a user access to the archived items of another user that no longer forms part of your company, and who's Active Directory account was deleted. Enables a group to access archived items in a specific mailbox. For example, enable all sales persons to have access to sales@mycompany.com Adding users to the Group Manager archive access Adding a user to the Group Manager Archive Access grants users access to all items archived within GFI Archiver for a particular Active Directory group of users. 1. Select Configuration tab and click Access Control. 2. Click Configure Group Managers. 3. Select the user to add as a manager from the Manager field and the group to which full access will be granted and click Add. Repeat to add other users to other groups. A user can be added to multiple groups by selecting the same user and a different Active Directory group. 4. Click Save to finalize settings Define user Access Control User Access Control enables you to grant specific users access to items archived for other users. 1. Select Configuration tab and click Access Control. 2. Click Configure User Access Control. 3. Select the user to grant access to in the User field and the user to which mailbox access will be granted from the Has access to User field. Click Add and repeat to add other users to other groups. GFI Archiver 7 Configuring GFI Archiver 189

190 A user can be added to users by selecting the same user and a different user to grant access to archived items. 4. Click Save to finalize settings Configuring Shared Mailboxes Shared mailboxes are mailboxes that can be accessed by a whole set of users in a group. 1. Select Configuration tab and click Access Control. 2. Click Configure Shared Mailboxes. 3. Select the group to grant access to from the Group field and the mailbox to which access will be granted from the Mailbox Account field. Click Add and repeat to add other groups to different mailboxes. The same group can be added to different mailboxes by selecting the same user and a different mailbox to grant access to archived items. 4. Click Save to finalize settings Configuring IMAP Server Internet Message Access Protocol (IMAP) is an Internet protocol for retrieval. A number of e- mail clients and mail servers use IMAP to transfer messages from a server to a client. The IMAP service is used to retrieve identifiers and users' folder structures from GFI Archiver Archive Stores. This data is stored within a Firebird database on the IMAP Server machine. The IMAP Server back-end Firebird database is stored in Data\IMAPDB.FDB and contains the folder structure of each user's mailbox. This database does NOT contain any message data (subject, headers, body content etc). Such information is retrieved directly from the GFI Archiver Store service when requested. This database is created by the IMAP service on startup (if not found) and the synchronization will start as soon as items are available from the archive stores. IMAP server will not return any items for the users until the data is synchronized. When a client makes a request, the IMAP Server looks in the local database for the identifiers and performs the following actions: Folder names - sends the data directly Message details - contacts the store service before returning the data. Clients connect to the IMAP service using valid authentication. GFI Archiver 7 Configuring GFI Archiver 190

191 When GFI Archiver is installed (not upgraded) and IMAP is enabled for the first time, it takes a long time for IMAP server to sync up with the store. The synchronization is a background process transparent to the user. To configure the IMAP Server: 1. From the Configuration page, select IMAP Server. 2. Click Configure IMAP Server. Screenshot 78: IMAP Server configuration 3. Select Enable IMAP Server checkbox. 4. (Optional) In the Port Number field, enter a value and click Check Availability. The default port number is Changing the port number effects clients that have been configured to use this port. GFI Archiver 7 Configuring GFI Archiver 191

192 5. In the Network Interface field, select the listening network card from the available options. GFI Archiver scans your system and lists discovered network interface cards as possible options. It is however recommended to retain default setting (All Network Interfaces). 6. In the Server URL field, key in the address of the IMAP server to be used by mail clients. The IMAP Server is restarted whenever there are changes in IMAP server configuration related to network card interface or listening port number. All clients are disconnected when the IMAP server is restarted. 7. Use the Maximum months to show in mail clients field to set the period of time (in months) GFI Archiver goes back and retrieves s (default set to 12 months). 8. (Optional) Select Enable SSL Security checkbox to enable secure transmission of information. For more information refer to Working With Certificates (page 192). If Force SSL certificate is selected, clients will authenticate using a valid certificate. Authentication is refused if the client tries to connect unencrypted. 9. Click Save to finish the configuration Working With Certificates Secure Sockets Layer (SSL) is a protocol designed to enable applications to transmit information back and forth securely. Applications that use SSL, exchange encryption keys with other applications, and are designed to encrypt and decrypt data sent between the two. Applications that are configured to run SSL (for example, web browsers like Microsoft Internet Explorer and Firefox and programs like Microsoft Outlook, Mozilla Thunderbird and Apple Mail) are automatically able to receive SSL connections. To establish a secure SSL connection, the application must first have an encryption key assigned to it by a Certification Authority in the form of a Certificate. IMAP supports encryption via certificates. Certificates can be: Purchased from an online vendor such as Verisign Generated from IIS (refer to KB article To enable SSL and configure a security certificate: 1. In the IMAP Server configuration wizard, select Enable SSL checkbox. 2. In the SSL Certificate field, select the certificate to upload. 3. In the SSL Certificate Password field, type the certificate password. This will be validated when you click save. 4. (Optional) Select Force SSL certificate checkbox to force encryption of transmitted data. GFI Archiver 7 Configuring GFI Archiver 192

193 IMPORTANT When Force SSL certificate is enabled, encryption is forced, meaning that clients using the IMAP service will not be able to connect unless they configure encryption from their side. If Force SSL certificate is not enabled, the clients can connect to the IMAP server both in encrypted and unencrypted mode. 5. Click Save Retention Policies Retention Policies define the length of time that an archived item is retained in the Archive Store before it is deleted. For example, you can configure GFI Archiver to retain s marked Sales for two years while keeping s marked as Legal indefinitely. GFI Archiver also provides you with the facility to temporarily suspend (hold) retention policies. This prevents archived items from being deleted. For example, you can hold retention policies until a court case is resolved. In this case, archived items are marked for deletion and deleted once the hold is switched off. For more information refer to Configuring Legal Hold (page 199). Retroactive Retention is a feature that enables you to apply Retention policies created or modified after GFI Archiver has already stored an item in an archive store. For more information refer to Using Retroactive Retention (page 199) How Are Retention Policies Applied? OPTION When Retention Policies are already configured: When applying Retention Polices Retroactively: GFI Archiver checks item content against any existing retention policies at the time of archiving. Policies are applied according to priority. If the item matches the configured conditions, the retention policy is associated with the item. If the item does not match the highest priority retention policy, GFI Archiver checks against the next retention policy. This process is repeated until the item either matches a retention policy or there are no more retention policies. When Retroactive Retention is run on demand, GFI Archiver checks the item content against configured retention policies, updating retention options assigned to an item after the item has been archived. When an archived item does not match any retention policy, GFI Archiver archives the item indefinitely. Important notes An archived item can match only one retention policy. Priorities assigned to retention policies are very important. Any archived item that matches a retention policy where the configured action is delete archived item immediately is discarded immediately without ever being stored in an archive store. GFI Archiver 7 Configuring GFI Archiver 193

194 Any archived item that matches a retention policy where the configured action is set to delete after a number of days, is stored in an archive store. GFI Archiver removes the archived item from the archive store when the pre-configured time elapses Viewing Retention Policies To view retention policies, select Configuration tab and click Retention and Spam Policies. The retention policies are displayed in retention policy table, sorted by the order in which these will be executed. Available fields are listed in the table below. OPTION Policy name Active Displays the name of the retention policy. Displays whether retention policy is active, inactive or disabled due to legal hold. Action Displays the action configured for this retention policy. For example: Retain s for 2 years Adding a new Retention Policy 1. Select Configuration tab and click Retention and Spam Policies. 2. Click. 3. From the Retention Policy wizard, select Retention Policy and click Next. GFI Archiver 7 Configuring GFI Archiver 194

195 Screenshot 79: Retention Policy details 4. In the Retention Policy Details screen, key in the details for the new retention policy and click Next. Available options are: OPTION Policy name Defines the name for the new policy to be created. GFI Archiver 7 Configuring GFI Archiver 195

196 OPTION Criteria Defines the conditions that will identify an item as being part of this retention policy. From the drop down list select one of the following options and provide the values that an item must match to fall under this retention policy. Click to delete a keyed in condition. Select: Subject define an subject to add more conditions or Body define key words that can be found in the body of s Sender define the sender s address or specify the user name in the format domain\username Recipient key in the recipient s address or specify the user name in the format domain\username Wildcards are supported for both Sender and Recipient fields. For example, if you enter '*@domain.com', the value will match all users of 'domain.com'. Full size select a parameter and provide the size in MB. Available parameters are: Equals to Greater Than Greater Or Equal Than Smaller Than or Smaller Or Equal Than Attachment size - select a parameter and provide the size in MB. Available parameters are: Equals to Greater Than Greater Or Equal Than Smaller Than or Smaller Or Equal Than Attachment Type - define the file type condition by selecting a category from the drop down list of predefined values. For more information on File Types refer to Retention File Types in this section. Manual / File - select to include all manually archived items in the retention policy. Item Type - Select from available options. Available parameters are: Calendar or Meeting Requests Files s GFI Archiver 7 Configuring GFI Archiver 196

197 OPTION Enable Policy Defines whether a policy is in effect or not and if archived items are to be deleted immediately or retained for a specific amount of time. Select Enable Policy and select an option between: Do NOT retain items matching above conditions, delete immediately. Do NOT retain items matching the above conditions, delete after x days To configure a number of years, specify the number of days. For example: To retain s for 2 years, key in 730 days and to retain s for 5 years, key in 1825 days. 5. Click Finish. Retention File Types The following table lists the file types associated with each Attachment Type category available when filtering a Retention Policy by attachment type: CATEGORY Images Documents Music Video FILE TYPE *.jpg,*.jpeg, *.exif, *.tiff, *.raw, *.png, *.gif, *.bmp, *.ppm, *.pgm, *.pbm, *.pnm, *.webp, *.tga, *.pcx, *.img, *.psd, *.psp, *.cgm, *.svg, *.ai, *.cdr, *.eps, *.hvif, *.odg, *.pict, *.pgml, *.swf, *.vml, *.wmf, *.emf, *.xps, *.pns, *.jps *.acl, *.csv, *.cwk, *.doc*, *.dot*, *.htm*, *.hwp*, *.lwp, *.mcw, *.odm, *.odt, *.ott, *.pages, *.pdax, *.pdf, *.rtf, *.rpt, *.stw, *.sxw, *.tex, *.txt, *.wpd, *.wps, *.wpt, *.wrd, *.wri, *.xhtml, *.xml, *.xps, *.xls, *.xlsx, *.ppt, *.pptx, *.mdb, *.accdb, *.accde *.aiff, *.au, *.cdda, *.raw, *.wav, *.flac, *.la, *.m4a, *.ape, *.wma, *.mp2, *.mp3, *.ogg, *.ra, *.rm, *.ots, *.swa, *.vox, *.voc, *.mid, *.psf, *.mod, *.asf, *.asx, *.m3u, *.ram, *.xspf, *.omf, *.cel *.aaf, *.3gp, *.gif, *.asf, *.avchd, *.avi, *.dat, *.flv, *.mpeg, *.mpg, *.fla, *.flr, *.sol, *.m4v, *.mkv, *.mov, *.mpe, *.mxf, *.ogg, *.rm, *.swf, *.wmv Changing the order of Retention Policies The order in which retention policies are applied is very important within GFI Archiver. GFI Archiver first checks the archived item against the highest priority retention policy. If the item matches the configured conditions, retention policy is associated with the item. If the item does not match the highest priority retention policy, GFI Archiver checks against the next retention policy configured, according to priority. To change the order of the retention policies: 1. Select Configuration tab and click Retention and Spam Policies. 2. Select the retention policy to change the order for and click Move up or Move Down to move up or down respectively Adding a SPAM Retention Policy By default, s marked as spam are archived with all other s and GFI Archiver does not discriminate between valid s and s marked as SPAM by anti-spam solutions such as GFI MailEssentials. Within GFI Archiver, you can set up a SPAM Retention Policy that enables you to delete spam immediately on archival or after a specific number of days. GFI Archiver 7 Configuring GFI Archiver 197

198 Creating a SPAM Retention Policy also enables users to browse s marked as spam and if these are not actually spam, mark them as not spam. This causes the SPAM Retention Policy not to delete such s. 1. Select Configuration tab and click Retention Policies. 2. Click. 3. From the Retention Policy wizard, select Specify a SPAM policy and click Next. Screenshot 80: SPAM Retention Policy dialog 4. Fill in a name for the SPAM Retention Policy, configure whether the policy is active or not, and select the retention period. The table below shows a list of available options. OPTION Policy Name Enable policy Defines the name for the policy being created/edited. Key in or edit the name in this text box. Defines whether the policy being created/edited is active or disabled. Check or uncheck the checkbox to enable or disable the policy. GFI Archiver 7 Configuring GFI Archiver 198

199 OPTION Do NOT retain s marked as SPAM, delete immediately Do NOT retain s matching the above conditions, delete after x days Instructs GFI Archiver to immediately delete all s marked as SPAM. Instructs GFI Archiver to retain all s marked as SPAM and delete them only after the configured time elapses. 5. Click Next and Finish to complete retention policy configuration Configuring Legal Hold Legal Hold instructs GFI Archiver to pause deleting archived s and to retain them until further notice. Enable this feature to temporarily halt archived deletion until, for example, a court case is resolved. Enabling this feature still causes GFI Archiver to mark the archived s for deletion. Delete instruction will be executed only once the legal hold is removed. To enable Legal Hold: 1. Select Configuration tab and click Retention and SPAM Policies. 2. Select. Verify that Legal Hold is enabled from the Home tab, under About GFI Archiver. To disable Legal Hold: 1. Select Configuration tab and click Retention and SPAM Policies. 2. Select. IMPORTANT Use this feature with caution, since s are immediately deleted on disabling Legal Hold Using Retroactive Retention Retroactive Retention enables you to apply retention policies after the has been archived. The process is run on demand and archived s can be removed (or marked for removal) from selected archive stores. The process can be paused or stopped. IMPORTANT Enabling Legal hold does not stop a retroactive retention job but for legal reasons s are not deleted until the Legal hold is removed. New retention policies cannot be created while a Retroactive job is running. GFI Archiver 7 Configuring GFI Archiver 199

200 To run retroactive retention: 1. Click Run Retroactive. 2. In the Archive Store field, select the archive stores on which Retroactive retention will run. 3. Click Add. 4. Click Run Retroactive. 5. Use the Summary for retroactive retention to monitor the progress of the running process. 6. Click Pause Retroactive to pause the current job or Stop Retroactive to cancel. Retroactive Retention is a lengthy process depending on the amount of s to process. Only one instance of retroactive retention is processed at any one time Configuring File History Retention Policies Retention Policies define the length of time that an archived version of a file is retained in the Archive Store before it is deleted. If Legal Hold is enabled, GFI Archiver temporarily suspends all active retention policies. This prevents archived items from being deleted. Archived items are marked for deletion and deleted once the hold is switched off. For more information refer to Configuring Legal Hold (page 199). File History Retention policies are applied from the top down. When a file is archived, GFI Archiver checks configured policies and if there is a match, the retention policy is applied. Priorities assigned to retention policies are very important. For more information refer to Changing the order of File History Retention Policies (page 202) Add a new File History Retention Policy 1. Select Configuration tab and click File History Retention Policies. 2. Click Add. 3. In the Retention Policy Details screen, key in the details for the new retention policy and click Next. Available options are: OPTION Policy name Defines the name for the new policy to be created. GFI Archiver 7 Configuring GFI Archiver 200

201 OPTION Criteria Defines the conditions that will identify an item as being part of this retention policy. From the drop down list select one of the following options and provide the values that an item must match to fall under this retention policy. Click to delete a keyed in condition. Select: to add more conditions or Latest file older than - if the latest archived file is older than the specified number of days, GFI Archiver will either remove the file from history (if Do NOT retain any file history is selected) or keep the number of versions specified in Keep latest N versions in the file history of each archive. Extension type - specify the file type from the available list. Enable Policy Owner define the user or group that owns the archived file. Defines whether a policy is in effect or not, if items are to be deleted immediately or how many versions will be retained. Select Enable Policy and select an option between: Do NOT retain any file history - Any archived file that matches a retention policy where the configured action is do not retain any file history will not have any archived versions. If selected and file is deleted from disk this could result in file being deleted from archive Keep latest N versions in the file history of each archive - keeps the specified number of versions in the archive store. When a new version is archived, GFI Archiver removes one of the older versions. 4. Click Finish. Retention File Types The following table lists the file types associated with each Attachment Type category available when filtering a Retention Policy by attachment type: CATEGORY Images Documents Music Video FILE TYPE *.jpg,*.jpeg, *.exif, *.tiff, *.raw, *.png, *.gif, *.bmp, *.ppm, *.pgm, *.pbm, *.pnm, *.webp, *.tga, *.pcx, *.img, *.psd, *.psp, *.cgm, *.svg, *.ai, *.cdr, *.eps, *.hvif, *.odg, *.pict, *.pgml, *.swf, *.vml, *.wmf, *.emf, *.xps, *.pns, *.jps *.acl, *.csv, *.cwk, *.doc*, *.dot*, *.htm*, *.hwp*, *.lwp, *.mcw, *.odm, *.odt, *.ott, *.pages, *.pdax, *.pdf, *.rtf, *.rpt, *.stw, *.sxw, *.tex, *.txt, *.wpd, *.wps, *.wpt, *.wrd, *.wri, *.xhtml, *.xml, *.xps, *.xls, *.xlsx, *.ppt, *.pptx, *.mdb, *.accdb, *.accde *.aiff, *.au, *.cdda, *.raw, *.wav, *.flac, *.la, *.m4a, *.ape, *.wma, *.mp2, *.mp3, *.ogg, *.ra, *.rm, *.ots, *.swa, *.vox, *.voc, *.mid, *.psf, *.mod, *.asf, *.asx, *.m3u, *.ram, *.xspf, *.omf, *.cel *.aaf, *.3gp, *.gif, *.asf, *.avchd, *.avi, *.dat, *.flv, *.mpeg, *.mpg, *.fla, *.flr, *.sol, *.m4v, *.mkv, *.mov, *.mpe, *.mxf, *.ogg, *.rm, *.swf, *.wmv Edit File History Retention Policies To edit an existing File History Retention Policy: 1. Select Configuration tab and click File History Retention Policies. 2. Select the policy to edit. Click Edit. 3. In the Retention Policy Details screen, key in the details for the new retention policy and click Next. Available options are: GFI Archiver 7 Configuring GFI Archiver 201

202 OPTION Policy name Criteria Defines the name for the new policy to be created. Defines the conditions that will identify an item as being part of this retention policy. From the drop down list select one of the following options and provide the values that an item must match to fall under this retention policy. Click to delete a keyed in condition. Select: Latest file older than to add more conditions or Extension type Enable Policy Owner define the sender s address or specify the user name in the format domain\username Defines whether a policy is in effect or not, if items are to be deleted immediately or how many versions will be retained. Select Enable Policy and select an option between: Do NOT retain any file hostory. Keep latest n versions in the file history of each archive. 4. Click Finish Viewing File History Retention Policies To view retention policies, select Configuration tab and click File History Retention Policies. The retention policies are displayed in retention policy table, sorted by the order in which these will be executed. Available fields are listed in the table below. OPTION Policy name Active Displays the name of the retention policy. Displays whether retention policy is active, inactive or disabled due to legal hold. Action Displays the action configured for this retention policy. For example: Retain s for 2 years Changing the order of File History Retention Policies The order in which retention policies are applied is very important within GFI Archiver. GFI Archiver first checks the archived item against the highest priority retention policy. If the item matches the configured conditions, retention policy is associated with the item. If the item does not match the highest priority retention policy, GFI Archiver checks against the next retention policy configured, according to priority. To change the order of the retention policies: 1. Select Configuration tab and click File History Retention Policies. 2. Select the retention policy to change the order for and click Move up or Move Down to move up or down respectively Removing File History Retention Policies To remove a configured File History Retention Policy: 1. Select Configuration tab and click File History Retention Policies. 2. Select the policy to remove and click Remove. GFI Archiver 7 Configuring GFI Archiver 202

203 3. When you receive the message Are you sure you want to delete the selected file history retention policies? click OK Classification Rules Classification Rules enable you to automatically classify s according to the content. From the moment that a classification rule is enabled, new s are automatically reviewed according to the classification rule set up and labeled accordingly in their respective Archive Store. Using the Advanced Search functionality in the Archive tab, users can search archived s for a particular label. The search can also be saved in the Classifications window in the Archive tab for ease of use. For more information refer to Using Advanced Search (page 90). This section will help you: Add a new Classification Rule Edit an existing Classification Rule Remove an existing Classification Rule Adding a New Classification Rule 1. Select Configuration tab and click Classification Rules. 2. Click. GFI Archiver 7 Configuring GFI Archiver 203

204 Screenshot 81: Categorization rule details 3. Key in a rule name in the Policy Name field and configure the criteria that s have to fulfill to fall under this classification rule. Available options are: OPTION Subject Body Sender Key in the subject text that the must match to fall under this categorization rule. Key in the body text that the must match to fall under this categorization rule. Select whether to classify by address or user name. Provide the address or select a user name that the must match to fall under this categorization sign must always be present in sender address specified. Wildcard characters are also supported as follows:? - matches any letters For example:???n@?aster-domain.com will match both john@master-domain.com and joan@faster-domain.com. - matches complete words For example: *@master-domain.com matches all addresses with the domain part master-domain.com GFI Archiver 7 Configuring GFI Archiver 204

205 OPTION Recipient Key in the recipient address that the must match to fall under this categorization rule. Wildcards are supported for both Sender and Recipient fields. For example, if you enter the value will match all users of 'domain.com'. 4. Click to add further classification criteria or to delete previously keyed in criteria. 5. Select Enable policy and key in the label with which s should be labeled in the s that match this categorization policy should be labeled field. Click Next to continue. 6. In the Summary page review the categorization rule details and click Finish Editing a Classification Rule 1. Select the classification rule to edit and click Edit. 2. Follow the instructions listed in the Adding a New Classification section for information on how to edit a classification rule Removing a Classification Rule Select the classification rule to remove and click removed.. Classification rule will automatically be 7.18 Configuring Auditing GFI Archiver database activity auditing uses the tracing capabilities of SQL Server to record all activity affecting the archive databases. Auditing cannot be enabled on Archive Stores based on GFI Archiver (Firebird) database and file system. We recommend using your OS User Configuration auditing and User Trail for this environment. Trace data is stored in a text file in a user specified location on the SQL Server machine. There is one trace file per server, containing trace data from all archive stores hosted on the server. The SQL Server service holds an exclusive lock on the trace file, ensuring the file is not tampered with. From GFI Archiver, you can then trigger the process to upload trace files into the auditing database. Following the upload, you can view auditing reports through the Auditing Reports page in the console. GFI Archiver 7 Configuring GFI Archiver 205

206 IMPORTANT Auditing can be enabled for archive stores based on SQL Server and SQL Server with file system. However, if unauthorized access is given on the server, a potential hacker could delete or modify archived data in the database and all of this would NOT be audited Configuring Database Activity Auditing 1. From the Configuration tab, click Auditing. 2. Click Configure. Screenshot 82: Select authentication method 3. Select the SQL Server to use from the Microsoft SQL Server drop-down box and choose the Authentication method to use to connect to the selected SQL Server. OPTION Windows Authentication Uses the currently logged on user to connect to SQL Server. GFI Archiver 7 Configuring GFI Archiver 206

207 OPTION Microsoft SQL Server Authentication Uses the credentials you key in the Login Name and Password: fields to connect to SQL Server. These will be used by GFI Archiver to read/write from the auditing database. Click Next to continue setup. IMPORTANT The account specified must have sysadmin or database owner privileges. 4. To create a new database within the previously selected SQL Server, select New Auditing Database and provide a name in the text box. To use an existing database, choose Select an Existing: auditing database from the displayed list of databases. Click Next to continue. 5. Specify whether to enable tracing on GFI Archiver archive stores. Select Enable trace on Archive Stores to log database activity data and specify the path on the SQL Server machine where the trace files will be stored. Click Next to continue. Ensure that the location specified is accessible using the user account under which the SQL Server service is running Lock down the location where you store the SQL Server trace files through NTFS permissions, so that only the SQL Server Service can access the location. This, together with the exclusive lock held by the SQL Server service, ensures that the data in the trace files cannot be tampered with. 6. Specify whether to enable user interaction auditing. This will record all the activity of the GFI Archiver user interface by users. To enable, select Enable user interaction auditing. Click Next to continue. 7. Review the Auditing Database setup summary and click Finish to finalize setup Editing Database Activity Auditing To edit an existing database activity auditing setup, select the previously configured settings and click Configure. Follow the instructions listed in the Configuring Database Activity Auditing section to edit an existing database activity auditing setup Audit Reports Auditing reports are based on data generated by database activity auditing and user interaction auditing. To access auditing reports: 1. Select Auditing tab and select from the following reports: GFI Archiver 7 Configuring GFI Archiver 207

208 REPORT NAME Configuration Management Auditing Report Use this report to list all the configuration changes made in GFI Archiver. Information displayed includes: User who made the changes Changes effected Clicking on any configuration change in the list will bring up a window with further detailed information. Access Control Auditing Report Use this report to list all the changes made to the access control configuration of GFI Archiver. Information displayed includes: User who made the changes The user affected by the change Archived items Auditing Report What permissions were changed Use this report to list the number of items archived in GFI Archiver Archive Stores per day. Information displayed includes: Date Name of archive store Bulk Import Auditing Report Number of archived items Use this report to list the amount of items imported into the archive stores through the bulk import service, for each import. Information displayed includes: Date of import Name of archive store Retention Policy Auditing Report Number of items imported Use this report to list the retention policies executed and the amount of items deleted. Information displayed includes: Date on which the policy was executed Name of archive store Name of retention policy Number of items deleted Data Leakage Prevention Auditing Report Clicking on any executed retention policy in the list will bring up a window with detailed information on the policy executed. Use this report to list which users performed actions that could lead to data leakage, such as forwarding of s from the archive stores. Information displayed includes: User that performed the action Action performed Number of items affected. GFI Archiver 7 Configuring GFI Archiver 208

209 REPORT NAME User Audit Trail Auditing Report Use this report to list the actions taken by users whilst using the GFI Archiver web interface. Information displayed includes: User name Action taken Date/time action was taken The following report options are available: To group the list by user, click on the Group by user button, located at the top of the report page. To group the list by date, click on the Group by date button, located at the top of the report page. Data Integrity Auditing Report Clicking on any user action in the list will bring up a window with detailed information on the action taken. Use this report to list all the changes made to the GFI Archiver archive stores and auditing databases, which were not carried out through the GFI Archiver services. Information displayed includes: Event type Microsoft SQL server and database affected Database user affected Action taken 2. Perform the following actions: Machine from which action originated. The following report options are available: To group the list by event type, click on the Group by event type button, located at the top of the report page. To group the list by date, click on the Group by date button, located at the top of the report page. Clicking on any database change in the list will bring up a window with detailed information on that change. OPTION Filter reports: Print reports: Use the Filter by: area by selecting a value to filter by and providing the details that a record has to match to be displayed on screen. The Filter by: area is located at the top of each report page. Click on the print report button, located at the top of each report page to print the report Configuring Deletion The Deletion feature enables users to permanently delete s from the GFI Archiver Mail View. If enabled, an additional delete button is displayed in the Archive tab toolbar and in the Mail View toolbar. To be able to delete s, the user must also be assigned to a Role with Delete s permissions. For more information refer to Configuring Roles and Permissions (page 181). GFI Archiver 7 Configuring GFI Archiver 209

210 IMPORTANT Enabling this feature may breach company policy or legal compliance related to retention. 1. From Configuration tab, select Deletion. 2. Click Enable Deletion. Screenshot 83: Configuring deletion 3. (Optional) If you want to retain a copy of the deleted in the Archive Stores, check Leave a copy of the in the Archive Stores accessible by a Full Access User. The retained s are only accessible by users with full access rights. If the checkbox remains unchecked, deleted s will be removed permanently from the Archive Stores. 4. Check the I agree checkbox. 5. Click OK. GFI Archiver 7 Configuring GFI Archiver 210

211 User cannot delete s from a read-only Archive Store. Users are notified if delete fails. IMPORTANT If Legal Hold is enabled, Deletion is disabled until Legal Hold is removed. For more information refer to Configuring Legal Hold (page 199) Viewing and editing license keys A fully licensed version of GFI Archiver requires a license key. For information on GFI Archiver licensing, refer to: To evaluate GFI Archiver, request a free evaluation key from GFI Software Ltd To review the license key that is currently used within GFI Archiver select Configuration tab and click Change license key label. To change your current license key: 1. Click Edit Licensing Key. 2. Key in or paste the new license key in the License Key text box. Click Verify License Key to verify that the new license key is correct. 3. Click Save to finalize settings. After installing GFI Archiver, the Post-installation Wizard redirects you automatically to this page Configuring General Settings The following sections help you to: OPTION Change General Settings Configure version check settings Configure the Fax Archiving search tab Configure Archiving status notification Specify the administrator address and server details for notifications. Enable, disable and configure version checks which enable GFI Archiver to check for and advise you of any new versions of GFI Archiver. Enable this feature to display the additional fax search tab within the Archive page. Users will be able to search for faxes or SMS archived in GFI Archiver from GFI FaxMaker. Enable this feature to receive a notification if GFI Archiver stops archiving. You can then go to the Home tab to troubleshoot further and identify the source of the problem. GFI Archiver 7 Configuring GFI Archiver 211

212 7.22 Changing General Settings Specify the administrator address and server details for notifications: 1. Select Configuration tab and click General Settings. 2. Click General Settings. Screenshot 84: General Settings 3. Perform all the required modifications from the list of available options. OPTION Administrator address SMTP Server Port Number Use SSL The SMTP requires authentication Defines the administrator address where important notifications are sent. Defines the SMTP server used by GFI Archiver to send notifications and to restore s from Archive Store. Defines the port number over which GFI Archiver will communicate to the SMTP server. Default value: 25 Instructs GFI Archiver to connect and communicate with the SMTP Server using SSL. Instructs GFI Archiver to connect to the SMTP server using a username and a password. The username and password fields are automatically displayed if this option is chosen. GFI Archiver 7 Configuring GFI Archiver 212

213 4. Click Save to save new setup. 5. Click Send a test to confirm that details are correct Changing version check settings Enable, disable and configure the GFI Archiver version checks. This enables GFI Archiver to check for and advise you of any new versions of GFI Archiver. 1. Select Configuration tab and click General Settings. 2. Click Additional Settings. Screenshot 85: Version check configuration 3. Perform all the required modifications from the list of available options. OPTION Enable Version Check Enable Proxy server Enables/Disables the GFI Archiver Version Check. Uncheck option to disable GFI Archiver automated checks for newer versions. Instructs GFI Archiver to use a proxy server to connect to the GFI Software Ltd servers and check for updated versions. GFI Archiver 7 Configuring GFI Archiver 213

214 OPTION Proxy server/port Proxy requires authentication Username/Password Defines the Proxy server and the port that GFI Archiver uses to connect to the GFI servers for version check purposes. Enable option if the Proxy server specified in the Proxy server and Port fields requires authentication. Defines the username and password that GFI Archiver uses if the proxy server uses authentication. 4. Click Save to save new setup Configure the Fax Archiving search tab GFI Archiver identifies faxes and SMS coming from GFI FaxMaker. A label is assigned to the received item. The faxes and SMS are stored in GFI Archiver as normal . To enable or disable the Fax Archiving search option: 1. Select Configuration tab and click General Settings. 2. Click Additional Settings. 3. In the Fax Archiving and Notification Settings area, perform all the required modifications from the list of available options. OPTION Show the Fax search tab in the Archive page Send archiving status notifications Enable this feature to display the additional fax search tab within the Archive page. Users will be able to search for faxes or SMS archived in GFI Archiver from GFI FaxMaker. When this option is enabled, the GFI Archiver system administrator receives a notification when s are not being archived in GFI Archiver. 3. Go to Archive tab and verify that the Fax search option appears in the Simple search window Configuring Archiving status notification Enable this feature to receive a notification if GFI Archiver stops archiving. You can then go to the Home tab to troubleshoot further and identify the source of the problem. For more information refer to Using the Home tab (page 80). To enable or disable notifications search option: 1. Select Configuration tab and click General Settings. 2. Click Additional Settings. 3. In the Fax Archiving and Notification Settings area, perform all the required modifications from the list of available options. OPTION Show the Fax search tab in the Archive page Send archiving status notifications Enable this feature to display the additional fax search tab within the Archive page. Users will be able to search for faxes or SMS archived in GFI Archiver from GFI FaxMaker. When this option is enabled, the GFI Archiver system administrator receives a notification when s are not being archived in GFI Archiver. GFI Archiver 7 Configuring GFI Archiver 214

215 7.26 Configuring GFI Directory Service GFI Directory is a directory of users and groups that integrates with GFI Archiver in environments where there is no Microsoft Active Directory available. GFI Directory can be downloaded from the following link: To learn how to install and configure GFI Directory consult the GFI Directory Administrator Guide at the following link: Installing GFI Archiver with GFI Directory When installing GFI Archiver with GFI Directory, the installation wizard will detect that GFI Directory is installed. If the installed version is older than the one packaged with GFI Archiver you are asked whether to upgrade the installed GFI Directory version or skip the upgrade process. It is highly recommended to upgrade to the most recent version of GFI Directory. If GFI Archiver is installed with GFI Directory it is not possible to switch to Microsoft Active Directory and you have to re-install GFI Archiver. Manage users and groups in GFI Directory Using GFI Directory, you can create new users and groups, assign administrative rights to users and also reset user passwords. To access GFI Directory from GFI Archiver: 1. In GFI Archiver, go to Configuration > GFI Directory Service. 2. Use administrator credentials to log in GFI Directory. GFI Archiver 7 Configuring GFI Archiver 215

216 8 Configuring Client Access GFI Archiver provides integration with various clients and technologies so that users can access their archived data from remote locations, while in the office or on the move. Use the Client Access page to download and configure any of the following: OPTION GFI Archiver Outlook Connector GFI Archiver Archive Assistant GFI Archiver File Archive Assistant GFI Archiver Touch App for Windows 8/RT IMAP Access A Microsoft Outlook plugin that enables users to view archived items from their Microsoft Outlook client. A tool that enables users to manually archive s, files and calendar items contained in their Microsoft Outlook installation. An agent that enables users to archive files either automatically from a synced folder or manually from any location on their machine. An App that enables users to search archived data directly from Windows 8 or Windows RT. Configure an IMAP account on your client of choice to view archived items in mailboxes you have access to. 8.1 Installing GFI Archiver Outlook Connector The Outlook Connector enables users to synchronize their Microsoft Outlook folders with the data archived by GFI Archiver. This connector can be installed via Active Directory Group Policy Objects (GPO) or via manual install. GFI Archiver 8 Configuring Client Access 216

217 8.1.1 How GFI Archiver Outlook Connector works Figure 2: How does GFI Archiver Outlook connector work? 1. Outlook Connector (installed on client machine) initiates a request to synchronize Microsoft Outlook folders with GFI Archiver. 2. GFI Archiver retrieves the required and folder data from the GFI Archiver archive store. 3. GFI Archiver sends the data to the Microsoft Outlook client machines Downloading GFI Archiver Outlook Connector The Outlook Connector can be downloaded from the GFI Archiver web interface. 1. Open GFI Archiver. 2. Select Client Access tab. 3. Click Outlook Connector tab. GFI Archiver 8 Configuring Client Access 217

218 4. Select one of the available download options link to download Outlook Connector. Available options are: OPTION Outlook Connector (32-bit Outlook) Outlook Connector (64-bit Outlook) Download the Outlook Connector for Microsoft Outlook 32-bit version. Download the Outlook Connector for Microsoft Outlook 64-bit version Changing the Outlook Connector tab availability By default, the Outlook Connector tab is visible and available to all users when they log in GFI Archiver. To disable users from seeing it: 1. In the Client Access page, click on the Outlook Connector tab. 2. Select an option and click Save. Available options are: OPTION Administrators only All users and Administrators Makes the Outlook Connector tab available only to users that log on using domain administrator privileges. Makes the Outlook Connector tab available to all users, regardless of their logon privileges Outlook Connector system requirements Software The machines where Outlook Connector is deployed must be able to connect to the GFI Archiver server. COMPONENT Supported Microsoft Outlook Versions - 32 bit and 64 bit Microsoft Outlook 2003 (including Service Packs 1, 2, 3 or 4) Microsoft Outlook 2007 (including Service Packs 1 or 2) Microsoft Outlook 2010 Microsoft Outlook 2013 Supported Operating Systems Windows 8/8.1 Windows 7 Windows Vista Windows Server 2003 Windows Server 2008 Windows Server 2012 Windows Server 2012 R2 GFI Archiver 8 Configuring Client Access 218

219 COMPONENT Other Required Components Internet Explorer 7 or later (Internet Explorer 9 Compatibility Mode only)/mozilla Firefox/Google Chrome/Safari HTTP port 80 (or HTTPS default port 443 for secure connections) - used by Outlook Connector to connect with GFI Archiver. Outlook Connector cannot be installed on the Microsoft Exchange Server. When using a web-filtering tool, this must be configured to allow all HTTP requests between GFI Archiver server and Outlook Connector. Ensure that the GFI Archiver server s IP address, NETBIOS name and DNS name are not blocked by the web filter. For more information, refer to: Hardware COMPONENT Processor Memory Physical Storage REQUIREMENTS 1GHz processor or more. Minimum: 512MB RAM Recommended: 2GB RAM 20MB physical disk space required for Outlook Connector installation. More space is required to store headers and s for offline access Installing Outlook Connector - Manual install The Outlook Connector can be downloaded from within GFI Archiver as an executable file. To download Outlook Connector: 1. On the machine where you want to install Outlook Connector, log to GFI Archiver using the web UI. 2. Go to Client Access > Outlook Connector. 3. Select one of the following options: OPTION Download for 32-bit Outlook (Installer for Microsoft Outlook bit computers only) Download for 64-bit Outlook (Installer for Microsoft Outlook bit computers only) 4. Wait for the download to complete. If the setup file does not run automatically, double click the downloaded file and follow the installation wizard to complete installation. GFI Archiver 8 Configuring Client Access 219

220 To check installation open Microsoft Outlook and check that a new folder called GFI Archiver Mailbox is created. For information on how to use the Outlook Connector, refer to the Outlook Connector manual available from: Using an ADM Template Administrative Template files (ADM) facilitate the centralized management of machines and users in an Active Directory environment. Use an ADM template to set up and manage the required registry settings for the GFI Archiver Addon to communicate with GFI Archiver server. To add an administrator template: a. From command prompt, key in: mmc.exe b. Click Enter to launch the Microsoft Management Console. c. Click File > Add/Remove Snap-in and click Add... d. Select Group Policy Object Editor snap-in and click Add. e. Click Browse and select the domain policy to edit. f. Select the domain policy and click OK. g. Click Finish to close Select Group Policy Object dialog. Click Close to close Add standalone Snapin dialog and click OK to close Add/Remove Snap-in dialog; to return to the Microsoft Management Console. h. Navigate to Console Root > <domain policy> > User Configuration, right-click Administrative Templates, and select Add/Remove Templates. i. Click Add, browse for the file gfiapps.adm located in: <Program Files\GFI\Archiver\Client Tools> and click Open. j. Click Close to return to the Microsoft Management Console Installing Outlook Connector via GPO This section will help you install Outlook Connector via GPO in the following environments: Windows Server 2003 Windows Server Installing Outlook Connector via GPO in Windows Server Download one of the following Outlook Connector MSI packages from GFI Archiver 8 Configuring Client Access 220

221 MAROC_32bitOutlook.msi (Installer for Microsoft Outlook bit computers only) MAROC_64bitOutlook.msi (Installer for Microsoft Outlook bit computers only) Make sure that when deploying the 32-bit version of the Outlook Connector, the domain policy used contains only computers with Microsoft Outlook bit version installed. Also, ensure to use a domain policy that applies only to computers where Microsoft Outlook bit version is installed when deploying GFI Archiver bit edition. 2. Save the downloaded file to a shared folder accessible by all domains. 3. Open command prompt (CMD). 4. Key in: mmc.exe and click Enter to launch the Microsoft Management Console. 5. Click File > Add/Remove Snap-in and click Add Select Group Policy Object Editor snap-in and click Add. 7. Click Browse and select the domain policy to edit. 8. Select the domain policy and click OK. 9. Click Finish to close Select Group Policy Object dialog. Click Close to close Add standalone Snapin dialog and click OK to close Add/Remove Snap-in dialog; to return to the Microsoft Management Console. 10. Navigate to Console Root > <domain policy> > User Configuration, right-click Administrative Templates, and select Add/Remove Templates. 11. Click Add, browse for the file gfiapps.adm located in: <Program Files\GFI\Archiver\Client Tools> and click Open. 12. Click Close to return to the Microsoft Management Console. 13. Expand Console Root > <domain policy> > User Configuration > Administrative Templates > GFI Applications. GFI Archiver 8 Configuring Client Access 221

222 Screenshot 86: Setting GFI Archiver server URL in Windows Server 2003 GPO 14. From the right pane, double click GFI Archiver Server Location policy and select Enabled. In the Server URL text box enter the URL where user machines can access GFI Archiver in the form Archiver virtual folder name> For example: <Optional> Click Next Setting and configure the following settings. For each option select Not Configured to use the default value or click Enable to specify a custom value. GFI Archiver Outlook Connector Data Path Root - specify a different root location where store configurations and local s are stored on client machines. For example, type %MyDocuments% to store in the My Documents folder of the logged on user. GFI Archiver Outlook Connector days span - specify the number of days for which s are synchronized. Only s received within this time span are accessible through GFI Archiver Outlook Connector. GFI Archiver Outlook Connector download batch size - Specify how many s can be downloaded during one synchronization session. GFI Archiver Outlook Connector connection timeout - Specify the timeout period in milliseconds for accessing data from the GFI Archiver server. GFI Archiver Outlook Connector maximum offline days - Specify the maximum number of days which a user can set for s offline access. GFI Archiver 8 Configuring Client Access 222

223 GFI Archiver Outlook Connector offline support - Enable or disable offline support. If offline support is enabled, specify the number of days to support offline access. If this setting is enabled: Users are not allowed to modify offline access GFI Archiver Outlook Connector maximum offline days setting is ignored. 16. Click OK when all settings are configured. 17. Select Console Root > <domain policy> > Computer Configuration > Software Settings. 18. Right click Software installation and select New > Package 19. In the Open dialog, locate the share where msi file is saved. When selecting the location of the msi file ensure that this is done through My network locations so that the share name in GFI Archiver includes the full network share location rather than the local path. 20. Choose the deployment option - select Assigned and OK. 21. Outlook Connector will be installed the Next time each client machine is started. To check installation, from Microsoft Outlook, check that a new folder called GFI Archiver Mailbox is created. For information on how to use the Outlook Connector, refer to the Outlook Connector Guide available from: Installing Outlook Connector via GPO in Windows Server Download one of the following Outlook Connector MSI packages from MAROC_32bitOutlook.msi (Installer for Microsoft Outlook bit computers only) MAROC_64bitOutlook.msi (Installer for Microsoft Outlook bit computers only) Make sure that when deploying the 32-bit version of the Outlook Connector, the domain policy used contains only computers with Microsoft Outlook bit version installed. Also, ensure to use a domain policy that applies only to computers where Microsoft Outlook bit version is installed when deploying GFI Archiver bit edition. 2. Save the downloaded file to a shared folder accessible by all domains. 3. Open command prompt (CMD) 4. Key in: mmc.exe and click Enter to launch the Microsoft Management Console. 5. Click File > Add/Remove Snap-in and click Add Select Group Policy Management Editor snap-in and click Add. 7. Click Browse and select the domain policy to edit. GFI Archiver 8 Configuring Client Access 223

224 8. Select the domain policy and click OK. 9. Click Finish to close Select Group Policy Object dialog. Click Close to close Add standalone Snapin dialog and click OK to close Add/Remove Snap-in dialog; to return to the Microsoft Management Console. 10. Navigate to Console Root > <domain policy> > User Configuration > Policies, right-click Administrative Templates, and select Add/Remove Templates. 11. Click Add, browse for the file gfiapps.adm located in: <Program Files\GFI\Archiver\Client Tools> and click Open. 12. Click Close to return to the Microsoft Management Console. 13. Expand Console Root > <domain policy> > User Configuration > Policies > Administrative Templates > Classic Administrative Templates (ADM) > GFI Applications. Screenshot 87: Setting GFI Archiver server URL in Windows Server 2003 GPO 14. From the right pane, double click GFI Archiver Server Location policy and select Enabled. In the Server URL text box enter the URL where user machines can access GFI Archiver in the form Archiver virtual folder name> For example: <Optional> Click Next Setting and configure the following settings. For each option select Not Configured to use the default value or click Enable to specify a custom value. GFI Archiver 8 Configuring Client Access 224

225 GFI Archiver Outlook Connector Data Path Root - specify a different root location where store configurations and local s are stored on client machines. For example, type %MyDocuments% to store in the My Documents folder of the logged on user. GFI Archiver Outlook Connector days span - specify the number of days for which s are synchronized. Only s received within this time span are accessible through GFI Archiver Outlook Connector. GFI Archiver Outlook Connector download batch size - Specify how many s can be downloaded during one synchronization session. GFI Archiver Outlook Connector connection timeout - Specify the timeout period in milliseconds for accessing data from the GFI Archiver server. GFI Archiver Outlook Connector maximum offline days - Specify the maximum number of days which a user can set for s offline access. GFI Archiver Outlook Connector offline support - Enable or disable offline support. If offline support is enabled, specify the number of days to support offline access. If this setting is enabled: Users are not allowed to modify offline access GFI Archiver Outlook Connector maximum offline days setting is ignored. 16. Click OK when all settings are configured. 17. Select Console Root > <domain policy> > Computer Configuration > Policies > Software Settings. 18. Right click Software installation and select New > Package 19. In the Open dialog, locate the share where msi file is saved. When selecting the location of the msi file ensure that this is done through My network locations so that the share name in GFI Archiver includes the full network share location rather than the local path. 20. Choose the deployment option - select Assigned and OK. 21. Outlook Connector will be installed the Next time each client machine is started. To check installation, from Microsoft Outlook, check that a new folder called GFI Archiver Mailbox is created. For information on how to use the Outlook Connector, refer to the Outlook Connector Guide available from: Configuring the Archive Assistant The Archive Assistant enables users to manually archive s, calendar items and files (such as documents or images) from Microsoft Outlook. The Archive Assistant can be installed via Active Directory Group Policy Objects (GPO) or via manual install. GFI Archiver 8 Configuring Client Access 225

226 IMPORTANT s or calendar items archived through the Archive Assistant get archived irrespective of any rules set in Rules-based Archiving How does Archive Assistant work? 1. Within Microsoft Outlook, user selects an , a group of s, calendar item/s, a file or a number of files, or a folder and uses the archive commands in the additional toolbar that is installed when Archive Assistant is deployed. Using the File Archiving feature of Archive Assistant, you can easily archive files from any location on your machine (including Microsoft Office documents), into GFI Archiver. This feature is designed to provide a centralized location for user data. 2. Archive Assistant (installed on client machine) initiates a request to synchronize the selected items with GFI Archiver. GFI Archiver 8 Configuring Client Access 226

227 8.2.2 System requirements - Outlook Connector Archive Assistant File Archive Assistant Software IMPORTANT The machine where is deployed must be able to connect to the GFI Archiver server. SOFTWARE Supported Operating Systems Windows 8 and 8.1 Windows 7 Windows Vista Windows Server 2003 Windows Server 2008 Windows Server 2012 Other Required Components Windows Server 2012 R2 HTTP port 80 (or HTTPS default port 443 for secure connections) - used to connect with GFI Archiver. Microsoft.NET Framework 4.0 or 4.5 Client Profile When using a web-filtering tool, this must be configured to allow all HTTP requests between GFI Archiver server and Archive Assistant/File Archive Assistant. Ensure that the GFI Archiver server s IP address, NETBIOS name and DNS name are not blocked by the web filter. For more information, refer to: Hardware COMPONENT Processor Memory Physical Storage REQUIREMENTS 1GHz processor or more. Minimum: 512MB RAM Recommended: 2GB RAM 20MB physical disk space required for installation Enabling and disabling Manual Archiving The manual method of archiving needs to be enabled for Archive Assistant to work. To enable or disable Manual Archiving: 1. Log on to GFI Archiver with a user that has administrative privileges. 2. From the Configuration page, select Archiving Method. GFI Archiver 8 Configuring Client Access 227

228 3. Click Configure Archiving Method. Screenshot 88: Enable or disable Manual Archiving 4. Perform one of the following actions: To enable, check the Manual Archiving checkbox. To disable, uncheck the Manual Archiving checkbox. 5. Click Save to complete the configuration Changing the Archive Assistant tab availability By default, the Archive Assistant tab is visible and available to all users when they log in GFI Archiver. To disable users from seeing it: 1. In the Client Access page, click on the Archive Assistant tab. 2. Select an option and click Save. Available options are: GFI Archiver 8 Configuring Client Access 228

229 OPTION Administrators only All users and Administrators Makes the Archive Assistant tab available only to users that log on using domain administrator privileges. Makes the Archive Assistant tab available to all users, regardless of their log on privileges Installing Archive Assistant manually 1. Open GFI Archiver. 2. Click Client Access tab. 3. From Archive Assistant area, click Download Archive Assistant. The following file is downloaded to your machine: mar_archiveassistant.exe. 4. The installation wizard should now start automatically. Click Run and follow the wizard to install. 5. If the installation wizard does not start automatically, locate and double click the file downloaded in step 3 above. To verify successful installation, check that Archive buttons are now visible within Microsoft Outlook Installing the Archive Assistant via GPO in Windows Server 2008 Group Policy software installation is a method that enables you to install applications automatically across your entire network. Prepare the software to install 1. Download the following Archive Assistant MSI package from DownloadMSI10.0: mar_archiveassistant.msi 2. Save the downloaded file to a shared folder on your network, accessible by all domains. 3. Locate the downloaded file. Take note of the folder path for later use. 4. Click Start > Administrative Tools > Group Policy Management. 5. Expand Forest > Domains > domain name. Right-click the domain name and select Create a GPO in this domain, and Link it here Enter a name for the new Group Policy Object (GPO). For example: Archive Assistant. Click OK. 7. Right-click the newly created Linked GPO and click Edit. 8. In the Group Policy Management Editor window, expand User Configuration > Policies > Software settings > Software Installation. Right click Software Installation > New > Package to configure the GPO to install on log in. 9. Enter the network path of the shared folder that contains the Archive Assistant MSI package. Click OK. GFI Archiver 8 Configuring Client Access 229

230 When selecting the location of the msi file ensure that this is done through My network locations so that the share name in GFI Archiver includes the full network share location rather than the local path. 10. In the Deploy Software pop-up, select Assigned and click OK. 11. The new package is now added under Software Installation. Configure the ADM file Use an Administrative Template file (ADM) to set up and manage the required registry settings for the GFI Archiver Addon to communicate with GFI Archiver server. To add an ADM template: 1. Click Start > Administrative Tools > Group Policy Management. 2. Expand Forest > Domains > domain name. Right-click Archive Assistant and select Edit 3. In the Group Policy Management Editor window, expand User Configuration > Policies > Software settings > Software Installation. 4. Double-click the package to open the properties window. 5. In the Deployment tab, select Install this application at logon. 6. Click Apply and OK to close the window. 7. In the Group Policy Management window expand Forest > Domains > domain name > Archive Assistant 8. In the Security Filtering Pane, click Add. 9. In Select User, Computer or Group add Domain Users and click OK. 10. In Group Policy Management, expand Forest > Domains > Group Policy Objects. Right click Archive Assistant and click Edit. 11. In the Group Policy Management Editor, expand Archive Assistant > User Configuration > Policies > Administrative Templates. 12. Right-click Administrative Templates and select Add/Remove Templates. 13. Click Add. Open the GFI Archiver installation folder (default path C:\Program Files\GFI\Archiver) and open the Client Tools folder. 14. Locate gfiapps.adm and click Open to add the template. Click Close. Configure the GFI Archiver server location 1. In the Group Policy Management Editor, expand File Archive Assistant > User Configuration > Policies > Administrative Templates > Classic Administrative Templates (ADM) > GFI Applications. 2. Double click GFI Archiver Server Location. 3. Select the Enabled radio-button. 4. In the Server URL field, type the GFI Archiver URL (for example: Click Apply and OK to close the window. 5. The set up should now be complete. Archive Assistant will be installed the Next time each client machine is started. To check installation, verify that the Archive Assistant toolbar is visible in Microsoft Outlook. GFI Archiver 8 Configuring Client Access 230

231 For information on how to use the Archive Assistant, refer to the Archive Assistant manual available from: Configuring Archive Assistant When Archive Assistant is installed, default settings are sufficient for the add-in to operate. However, various settings can be customized according to the user s preferences. To change default settings: 1. Open Microsoft Outlook. 2. In the Microsoft Outlook ribbon, click Archive Assistant. 3. From the drop down menu, click Settings. Screenshot 89: Archive Assistant configuration settings. 4. Click the Connection tab. 5. In the Authentication area, specify one or both methods of authentication: GFI Archiver 8 Configuring Client Access 231

232 OPTION Windows authentication Custom authentication Archive Assistant uses your Windows credentials to connect with GFI Archiver server. This method is used when you are working in an Intranet environment and connected to the same Active Directory domain as the GFI Archiver server. Select this method of authentication to connect to GFI Archiver from a remote location outside your organization's network. The Username and Password provided here are authenticated on the GFI Archiver server. IMPORTANT When forms authentication is configured on the server, Archive Assistant requires custom authentication. 6. In the Service address for GFI Archiver area, select from the following options: OPTION Default Custom Ignore SSL Policy errors This field contains the server address if Archive Assistant is installed through GPO and your Systems Administrator has also deployed the server address. If the field is blank, you will receive an error when trying to archive an . Manually specify the address where GFI Archiver is installed. This option is enabled by default. It enables Archive Assistant to connect to GFI Archiver, ignoring SSL policy errors when validating the remote certificate provided by the GFI Archiver for authentication. This allows users to connect to GFI Archiver server over SSL even if the server is using a self-signed, expired, withdrawn, compromised, or otherwise invalid certificate. IMPORTANT The Service address for GFI Archiver is always set to Default, even when Archive Assistant is installed manually. If the field is blank, perform the following actions: 1. Contact your System Administrator and ask for the server address 2. Click the Custom button and type the address provided in the address field. 7. Click Manual Archiving tab. Under General, configure the following Archiving Operations options: OPTION Automatically retry on recoverable error Automatically close dialog on completion When selected, Archive Assistant automatically retries to archive the selected when a problem is encountered and recovered. Select this option to automatically close the Archive Progress dialog after the selected is archived. 8. Click Delete Options tab. 9. Configure the following options for messages and for Calendar items within Microsoft Outlook: OPTION Do not delete archived messages Select this option to keep all s or calendar items from being deleted after they are archived. GFI Archiver 8 Configuring Client Access 232

233 OPTION Permanently delete archived messages immediately Permanently delete archived messages after N days Run deletion policy now on messages already archived When selected, the s or calendar items will be deleted as soon as they are archived. Specify the number of days to keep local copies of messages or calendar items after these have been archived (Default 30 days). When enabled, the retention method selected will be applied to all old s or calendar items that were archived but not yet deleted. If this option is not selected, deletion will become effective only on s/calendar items archived from that day onward. These settings do not effect s and calendar items stored within the archive store in GFI Archiver and are not affected by retention policies configured in GFI Archiver. 10. Click OK. 8.3 Deploying the File Archive Assistant The File Archive Assistant enables users to archive files such as documents or images. This can be done manually from any location on their machine, or automatically, by placing the files they need to archive in a folder synchronized with GFI Archiver. The File Archive Assistant can be installed manually or via Active Directory Group Policy Objects (GPO). IMPORTANT Items archived through the File Archive Assistant get archived irrespective of any rules set in Rulesbased Archiving. The deployment of the File Archive Assistant requires the following steps: STEP Step 1 Step 2 Step 3 Step 4 Step 5 Download the File Archive Assistant Install the File Archive Assistant on the client computers Configure Roles and Permissions for file archiving Configure the File Archive Assistant Configure default File Archive Assistant settings GFI Archiver 8 Configuring Client Access 233

234 8.3.1 System requirements - Outlook Connector Archive Assistant File Archive Assistant Software IMPORTANT The machine where is deployed must be able to connect to the GFI Archiver server. SOFTWARE Supported Operating Systems Windows 8 and 8.1 Windows 7 Windows Vista Windows Server 2003 Windows Server 2008 Windows Server 2012 Other Required Components Windows Server 2012 R2 HTTP port 80 (or HTTPS default port 443 for secure connections) - used to connect with GFI Archiver. Microsoft.NET Framework 4.0 or 4.5 Client Profile When using a web-filtering tool, this must be configured to allow all HTTP requests between GFI Archiver server and Archive Assistant/File Archive Assistant. Ensure that the GFI Archiver server s IP address, NETBIOS name and DNS name are not blocked by the web filter. For more information, refer to: Hardware COMPONENT Processor Memory Physical Storage REQUIREMENTS 1GHz processor or more. Minimum: 512MB RAM Recommended: 2GB RAM 20MB physical disk space required for installation Changing the File Archive Assistant tab availability By default, the File Archive Assistant tab is visible and available to all users when they log in GFI Archiver. To disable users from seeing it: 1. In the Client Access page, click on the File Archive Assistant tab. GFI Archiver 8 Configuring Client Access 234

235 2. Select an option and click Save. Available options are: OPTION Administrators only All users and Administrators Makes the File Archive Assistant tab available only to users that log on using domain administrator privileges. Makes the File Archive Assistant tab available to all users, regardless of their log on privileges. 8.4 Configuring default File Archive Assistant settings The File Archive Assistant is a small client-side agent that enables users to manually archive files from any location on their machine. Users can also setup synchronized folders from which GFI Archiver can automatically archive files. Configure the Default File Archive Assistant Settings to enable File Archive Assistant clients installed on your network to inherit the configuration settings. The Summary of Default File Archive Assistant Settings located in Configuration > File Archive Assistant lists the currently configured settings. To configure or update Default File Archive Assistant Settings: 1. In GFI Archiver, go to Configuration > File Archive Assistant. 2. Click Update Default File Archive Assistant Settings. 3. Configure the following details: OPTION Polling interval Enable default synchronized folder Default Destination mailbox path Maximum file size Include / Exclude extensions Define the interval in minutes at which GFI Archiver polls synchronized folders on client machines to retrieve files for archiving. When enabled, the folder specified in the Default Synchronized Folder field will be pushed to all the client machines on which the File Archive Assistant is installed. If the folder does not exist on the client machine, it is automatically created. Any file placed within this folder will be synchronized with GFI Archiver. This feature is intended to automate the configuration process for File Archive Assistant. The path set in the Default destination mailbox path field determines the structure seen by the user in the Archive tab of the GFI Archiver Web UI. The default folder name is set to Sync Files. Define the maximum size of files to be archived. Files exceeding the maximum size are not archived. Use this field to manage the existing list of file types Configuring Roles and Permissions for file archiving To configure the required Roles and Permissions for file archiving: 1. Log on to GFI Archiver with a user that has administrative privileges. 2. From the Configuration page, select Roles and Permissions. GFI Archiver 8 Configuring Client Access 235

236 3. Select a Role from the available list that applies to your configured users and click Configure Role. Otherwise, create a new one by clicking Add new Role. 4. Ensure that the selected Role has the File Archive Assistant archiving permission enabled. 5. Click Save to complete the configuration Downloading the File Archive Assistant The File Archive Assistant can be downloaded from within GFI Archiver as an executable file: 1. From the machine where you want to install File Archive Assistant, log to GFI Archiver using the web UI. 2. Go to Client Access > File Archive Assistant. 3. Select one of the following options: OPTION Download the 32-bit version Download the 64-bit version 4. Select Run to initiate the Installation Wizard immediately or select Save to download the installation file to a desired location, then double click the downloaded file to run. 5. Follow the installation wizard to complete installation. See also: Configuring the File Archive Assistant Using an ADM Template Administrative Template files (ADM) facilitate the centralized management of machines and users in an Active Directory environment. Use an ADM template to set up and manage the required registry settings for the GFI Archiver Addon to communicate with GFI Archiver server. To add an administrator template: a. From command prompt, key in: mmc.exe b. Click Enter to launch the Microsoft Management Console. c. Click File > Add/Remove Snap-in and click Add... d. Select Group Policy Object Editor snap-in and click Add. e. Click Browse and select the domain policy to edit. f. Select the domain policy and click OK. g. Click Finish to close Select Group Policy Object dialog. Click Close to close Add standalone Snapin dialog and click OK to close Add/Remove Snap-in dialog; to return to the Microsoft Management Console. h. Navigate to Console Root > <domain policy> > User Configuration, right-click Administrative Templates, and select Add/Remove Templates. i. Click Add, browse for the file gfiapps.adm located in: <Program Files\GFI\Archiver\Client Tools> and click Open. j. Click Close to return to the Microsoft Management Console. GFI Archiver 8 Configuring Client Access 236

237 8.4.3 Downloading the File Archive Assistant MSI package The File Archive Assistant can be downloaded from as an MSI package. The MSI file can then be used to install File Archive Assistant through GPO. Save the downloaded the File Archive Assistant MSI package into a shared folder on your network. Ensure that the shared folder has read properties. Take note of the folder path for later use Installing the File Archive Assistant via GPO - Windows Server 2008 Group Policy software installation is a method that enables you to install applications automatically across your entire network. Prepare the software to install 1. Download one of the following File Archive Assistant MSI packages from MAR_FileArchiveAssistant_32bit.msi (Installer for Microsoft Windows 32-bit computers only) MAR_FileArchiveAssistant_64bit.msi (Installer for Microsoft Windows 64-bit computers only) Make sure that when deploying the 32-bit version of the File Archive Assistant, the domain policy used contains only computers running Microsoft Windows 32-bit version. Similarly, ensure that when deploying File Archive Assistant 64-bit edition, the domain policy used contains only computers running Microsoft Windows 64-bit version. 2. Save the downloaded file to a shared folder on your network, accessible by all domains. 3. Locate the downloaded file. Take note of the folder path for later use. 4. Click Start > Administrative Tools > Group Policy Management. 5. Expand Forest > Domains > domain name. Right-click the domain name and select Create a GPO in this domain, and Link it here Enter a name for the new Group Policy Object (GPO). For example: File Archive Assistant. Click OK. 7. Right-click the newly created Linked GPO and click Edit. 8. In the Group Policy Management Editor window, expand User Configuration > Policies > Software settings > Software Installation. Right click Software Installation > New > Package to configure the GPO to install on log in. 9. Enter the network path of the shared folder that contains the File Archive Assistant MSI package. Click OK. GFI Archiver 8 Configuring Client Access 237

238 When selecting the location of the msi file ensure that this is done through My network locations so that the share name in GFI Archiver includes the full network share location rather than the local path. 10. In the Deploy Software pop-up, select Assigned and click OK. 11. The new package is now added under Software Installation. Configure the ADM file Use an Administrative Template file (ADM) to set up and manage the required registry settings for the GFI Archiver Addon to communicate with GFI Archiver server. To add an ADM template: 1. Click Start > Administrative Tools > Group Policy Management. 2. Expand Forest > Domains > domain name. Right-click File Archive Assistant and select Edit 3. In the Group Policy Management Editor window, expand User Configuration > Policies > Software settings > Software Installation. 4. Double-click the package to open the properties window. 5. In the Deployment tab, select Install this application at logon. 6. Click Apply and OK to close the window. 7. In the Group Policy Management window expand Forest > Domains > domain name > File Archive Assistant 8. In the Security Filtering Pane, click Add. 9. In Select User, Computer or Group add Domain Users and click OK. 10. In Group Policy Management, expand Forest > Domains > Group Policy Objects. Right click File Archive Assistant and click Edit. 11. In the Group Policy Management Editor, expand File Archive Assistant > User Configuration > Policies > Administrative Templates. 12. Right-click Administrative Templates and select Add/Remove Templates. 13. Click Add. Open the GFI Archiver installation folder (default path C:\Program Files\GFI\Archiver) and open the Client Tools folder. 14. Locate gfiapps.adm and click Open to add the template. Click Close. Configure the GFI Archiver server location 1. In the Group Policy Management Editor, expand File Archive Assistant > User Configuration > Policies > Administrative Templates > Classic Administrative Templates (ADM) > GFI Applications. 2. Double click GFI Archiver Server Location. 3. Select the Enabled radio-button. 4. In the Server URL field, type the GFI Archiver URL (for example: Click Apply and OK to close the window. 5. The set up should now be complete. File Archive Assistant will be installed the Next time each client machine is started. GFI Archiver 8 Configuring Client Access 238

239 8.4.5 Configuring the File Archive Assistant The File Archive Assistant can be installed manually or by the System Administrator using Group Policy Object (GPO). For both installation types, the URL of the GFI Archiver server needs to be configured. This is the address used by File Archive Assistant to connect to GFI Archiver. You should be able to use the File Archive Assistant when logging onto your computer. However, if authentication fails, you can change the connection settings that enable the File Archive Assistant to communicate with the GFI Archiver server. To manually configure File Archive Assistant: 1. In the Microsoft Windows desktop toolbar of your computer, right-click the File Archive Assistant icon. 2. In the Connection tab, configure the following: OPTION Windows Authentication Custom Authentication Server Address for GFI Archiver Ignore SSL policy errors File Archive Assistant uses your Windows credentials to connect with GFI Archiver server. This method is used when you are working in an Intranet environment and connected to the same Active Directory domain as the GFI Archiver server. Select this authentication method to connect to GFI Archiver from a remote location outside your organization's network. The Username and Password provided here are authenticated on the GFI Archiver server. Provide the server address where GFI Archiver is installed. If File Archive Assistant is installed through GPO the server address is provided automatically in the Default field. If the server address field is blank, you will receive an error when trying to archive an . When this option is enabled, File Archive Assistant ignores security certificate errors when trying to connect to the GFI Archiver server. This enables users to connect to GFI Archiver server over SSL even if the server is using a self-signed, expired, withdrawn, compromised, or otherwise invalid certificate. A user can select both Windows Authentication and Custom Authentication methods, given that the user credentials entered in the Custom Authentication field are of the same user logged on the computer. The application will try to use Windows Authentication by default, but if this fails, it will try to use the Custom Authentication settings. IMPORTANT If you are logged in Windows and enter Custom Authentication credentials for a different user, all activity history is cleared and your Synchronized Folders are disabled. New Synchronized Folders need to be created for the new user (A default Synchronized Folder is automatically created if this feature is configured in GFI Archiver). 3. Click Apply. 4. Click OK. GFI Archiver 8 Configuring Client Access 239

240 8.5 Deploying the GFI Archiver App for Windows 8/RT The GFI Archiver Touch App enables users to connect to their archive from Windows 8 or Windows RT. Users can browse the GFI Archiver archive store and access archived s, files, faxes and SMS. The GFI Archiver Touch App can be downloaded from: System requirements OPTION Supported processors Supported Operating Systems Other x86, x64, ARM Microsoft Windows 8, 8.1 or RT HTTP Connection to GFI Archiver Server Configuring the GFI Archiver Touch App After you download the GFI Archiver Touch App you need to configure the connection settings that enable the app to download data from the GFI Archiver server. 1. Open the GFI Archiver Touch App. GFI Archiver 8 Configuring Client Access 240

241 2. Enter the following information: OPTION Host URL Username/ Address Password Domain Key in the name of the server where GFI Archiver is installed. Enter the address for GFI Archiver in the format [servername]/archiver Key in the user name you use to access the GFI Archiver UI or your address. Enter the password associated with your GFI Archiver username or address. Enter the Active Directory domain address where GFI Archiver is installed. GFI Archiver 8 Configuring Client Access 241

242 OPTION Number of Search Results Live Tile Enabled Enter the number of results you would like the GFI Archiver Touch App to display. Check this option to enable dynamic data to be displayed in the GFI Archiver Touch App tile on the desktop. 3. (Optional) If you need the clear previously entered data click Reset. 4. Click Save Settings to continue. 8.6 Configuring GFI Archiver IMAP Client Access GFI Archiver supports a number of clients that use IMAP to transfer archived messages from the Archive Stores to the client. Users are able to access their archived s using one of the following supported clients: Android application Apple Mail ios5 application Microsoft Outlook 2003 Microsoft Outlook 2007 Microsoft Outlook 2010 Microsoft Outlook 2013 Microsoft Outlook 2011 for Mac Mozilla Thunderbird Windows Live Mail Internet Message Access Protocol (IMAP) is an Internet protocol for retrieval. When IMAP is enabled for the first time, you may notice a delay until your client synchronizes with GFI Archiver to retrieve archived s. Viewing Shared Mailboxes As a user with access to other users mailboxes, you can use your IMAP account to view the shared mailboxes you have access to. To do this, you need to configure a new account for each shared mailbox. Follow the instructions on how to create a new IMAP client account in the client of your choice, however, as a username, type your username in the following format: <your address> <user address> using your own password. Folder Delete, Folder Rename and Delete functionality GFI Archiver 2014 and later versions offer Folder Delete, Folder Rename and Delete functionality when connecting with IMAP using one of the supported clients. GFI Archiver 8 Configuring Client Access 242

243 IMPORTANT To configure clients to use IMAP, you must first configure the IMAP Server. For more information refer to Configuring IMAP Server (page 190) Configuring IMAP in Apple Mail 3.0 Follow these instructions to configure IMAP in Apple Mail 3.0: The following configuration requires an Internet connection. 1. Click Mail > Preferences On the Accounts tab, click the + button to add a new account. 3. Enter the following information: OPTION Full Name: Address: Password: VALUE [your name] [full address] [your password] 4. Click Continue. 5. Enter the following Incoming Mail Server information: OPTION Account Type: Description Incoming Mail Server: User Name: Password: VALUE Select IMAP Enter account description [IMAP server name] [full address] [your password] 6. Click Continue to view the Incoming Mail Security screen. 7. Select Use Secure Sockets Layer (SSL) to connect to GFI Archiver using an encrypted connection. If SSL is not enabled, the connection will be unencrypted. 8. Enter the following Outgoing Mail Server information: OPTION Outgoing Mail Server: Use Authentication: User Name: Password: VALUE [SMTP server name] selected [User name] [your password] 9. Click Continue. GFI Archiver 8 Configuring Client Access 243

244 10. Review your Account Summary, and click Create. 11. Select the account you just created. 12. In the Advanced tab, enter the following information: OPTION Port Use SSL VALUE Use the default port number or the port number specified by your Systems Administrator. Select to connect to GFI Archiver using an encrypted connection Configuring IMAP in ios5 Follow these instructions to configure IMAP in ios5: The following configuration requires an Internet connection. 1. Tap Settings and select Mail, Contacts, Calendars. 2. In the Accounts section, tap Add Account. 3. From the list, select Other. 4. Select Add Mail Account and enter the following information: OPTION Name: Address: Password: Description: VALUE [your name] [full address] [your password] [meaningful description] 5. Tap Next. The device will connect to the Internet and check your account. 6. Select IMAP and enter the following information: INCOMING MAIL SERVER DETAILS: Host Name: User Name: Password: OUTGOING MAIL SERVER DETAILS: Host Name: User Name: Password: VALUE [IMAP server name] [full address] [your password] VALUE [SMTP server name] [User name] [your password] Outgoing Mail Server details must be provided by your Systems Administrator. 7. Tap Next. If you receive an error indicating that you Cannot Connect Using SSL, tap Yes to continue without SSL, then tap Save. GFI Archiver 8 Configuring Client Access 244

245 SSL can be configured after you save the new account. If SSL is not enabled, the connection will be unencrypted. 8. From Mail, Contacts, Calendars, locate the account you created under the Accounts section. 9. Tap the account name, scroll to Advanced. 10. Under Incoming Settings, change Server Port number to the default port number or the port number specified by your Systems Administrator. 11. Tap Use SSL to turn it on. 12. Tap Next. The device will verify the information you entered Configuring IMAP in Microsoft Outlook Start Outlook. 2. On the Tools menu, click Accounts. 3. Under Accounts, click Add a new account, and then click Next. 4. Click IMAP as the type of account that you are creating, and then click Next. 5. In the User Information section enter the following information: OPTION Your Name: Address: VALUE [your name] [full address] 6. In the Server Information section enter the following information: OPTION Incoming mail server (IMAP): Outgoing mail server (SMTP): VALUE [IMAP Server name] [SMTP server name provided by your Systems Administrator] 7. In the Logon Information section enter the following information: OPTION User Name: Password: VALUE [full address] [your password] 8. Click More Settings > Advanced enter the following information: OPTION Incoming server (IMAP): This server requires an encrypted connection VALUE Use the default port number or the port number specified by your Systems Administrator. Select this option to connect using an encrypted connection. If SSL is not enabled, the connection will be unencrypted. GFI Archiver 8 Configuring Client Access 245

246 9. Click Next after you have completed entering this configuration information, and then click Finish Configuring IMAP in Microsoft Outlook Start Outlook. 2. On the Tools menu, click Options. 3. On the Mail Setup tab, click Accounts. 4. Click New. 5. In the Auto Account Setup dialog box, select Manually configure server settings or additional server types, then click Next. 6. Click Internet , and then click Next. 7. In the User Information section enter the following information: OPTION Your Name: Address: VALUE [your name] [full address] 8. In the Server Information section enter the following information: OPTION Account Type: Incoming mail server: Outgoing mail server (SMTP): VALUE IMAP [IMAP server name] [SMTP server name provided by your Systems Administrator] 9. In the Logon Information section enter the following information: OPTION User Name: Password: VALUE [full address] [your password] 10. Click More Settings > Advanced enter the following information: OPTION Incoming server (IMAP): Use the following type of encrypted connection: VALUE Use the default port number or the port number specified by your Systems Administrator. Select the encryption method provided by your Systems Administrator. If prompted, accept the Security Certificate. If NONE is selected as the type of encryption, the connection will be unencrypted. 11. Click Next after you have completed entering this configuration information, and then click Finish Configuring IMAP in Microsoft Outlook Start Outlook. GFI Archiver 8 Configuring Client Access 246

247 2. On the File menu, click Info, then click Account Settings. 3. Select Account Settings from the list. 4. On the tab, click New. 5. Select the Manually configure server settings or additional server types check box, and then click Next. 6. Click Internet , and then click Next. 7. In the User Information section enter the following information: OPTION Your Name: Address: VALUE [your name] [full address] 8. In the Server Information section enter the following information: OPTION Account Type: Incoming mail server: Outgoing mail server (SMTP): VALUE IMAP [IMAP server name] [SMTP server name provided by your Systems Administrator] 9. In the Logon Information section enter the following information: OPTION User Name: Password: VALUE [full address] [your password] 10. Click More Settings > Advanced enter the following information: OPTION Incoming server (IMAP): Use the following type of encrypted connection: VALUE Use the default port number or the port number specified by your Systems Administrator. Select the encryption method provided by your Systems Administrator. If prompted, accept the Security Certificate. If NONE is selected as the type of encryption, the connection will be unencrypted. 11. Click Next after you have completed entering this configuration information, and then click Finish Configuring IMAP in Microsoft Outlook Start Outlook. 2. On the File menu, click Info, then click Account Settings. 3. Select Account Settings from the list. 4. On the tab, click New. GFI Archiver 8 Configuring Client Access 247

248 5. Select the Manually configure server settings or additional server types check box, and then click Next. 6. Click Internet , and then click Next. 7. In the User Information section enter the following information: OPTION Your Name: Address: VALUE [your name] [full address] 8. In the Server Information section enter the following information: OPTION Account Type: Incoming mail server: Outgoing mail server (SMTP): VALUE IMAP [IMAP server name] [SMTP server name provided by your Systems Administrator] 9. In the Logon Information section enter the following information: OPTION User Name: Password: VALUE [full address] [your password] 10. Click More Settings > Advanced enter the following information: OPTION Incoming server (IMAP): Use the following type of encrypted connection: VALUE Use the default port number or the port number specified by your Systems Administrator. Select the encryption method provided by your Systems Administrator. If prompted, accept the Security Certificate. If NONE is selected as the type of encryption, the connection will be unencrypted. 11. Click Next after you have completed entering this configuration information, and then click Finish Configuring IMAP in Outlook 2011 for Mac Follow these instructions to configure IMAP Outlook 2011 for Mac: 1. Open Outlook If you see a Welcome to Outlook screen, click Add Account. Otherwise click Tools > Accounts and click + in the menu bar. 3. Click Account. 4. Enter the following information: GFI Archiver 8 Configuring Client Access 248

249 OPTION Address: Password: User Name: Type: Incoming Server: Select Override default port and enter port number: Use SSL to connect (recommended) VALUE [full address] [your password] [full address] Select IMAP [IMAP server name] Use the default port number or the port number specified by your Systems Administrator. Select to connect to GFI Archiver using an encrypted connection. If SSL is not enabled, the connection will be unencrypted. Outgoing Server: [SMTP server name provided by your Systems Administrator] Unselect Configure Automatically. 5. Click Add Account. 6. In the Accounts window, click on More Options and set Authentication to Use Incoming Server Info. 7. Click Advanced and select Use IMAP IDLE (If the server supports it) to be notified when there are new messages. 8. Click OK Configuring IMAP in Windows Live Mail 1. Open Windows Live Mail and from the Accounts tab, click In the Add your accounts window enter the following information: OPTION Address: Password: Manually configure server settings: VALUE [full address] [your password] [Selected] 3. Click Next. 4. In the Configure server settings window enter the following information: OPTION Incoming server information: Server type: Server address: Port: VALUE [port number] [IMAP server name] Use the default port number or the port number specified by your Systems Administrator. GFI Archiver 8 Configuring Client Access 249

250 OPTION Requires a secure connection (SSL): Authenticate using: Outgoing server information: VALUE Select to connect to GFI Archiver using an encrypted connection. If SSL is not enabled, the connection will be unencrypted. [Clear text] [Use details provided by your Systems Administrator] 5. Click Next, then click Finish Configuring IMAP on Android Follow these instructions to configure IMAP on Android devices: The following configuration requires an Internet connection. 1. Launch client and select option to create a new IMAP account. 2. Configure the following Incoming Mail Server settings: OPTION Address: Password: VALUE [full address] [your password] 3. In Manual setup mode, enter the following information: OPTION Username: Password: IMAP server: Port: Security type: VALUE [full address] [your password] [IMAP server name] Use the default port number or the port number specified by your Systems Administrator. Select the Security type provided by your Systems Administrator. If Security Type is set to None, your connection to the IMAP server will be unencrypted. 4. After entering your IMAP configuration parameters, the device checks your incoming settings. 5. When prompted, enter Outgoing server settings supplied by your System Administrator. The device checks your outgoing settings. Configuration instructions depend on your Android OS version. Consult your device documentation for more information on how to set up a new IMAP account. GFI Archiver 8 Configuring Client Access 250

251 Configuring IMAP in Mozilla Thunderbird 10 Follow these instructions to configure IMAP in Mozilla Thunderbird 10: 1. In Thunderbird, select File > New > Mail Account. 2. In the Mail Account Setup screen enter the following information: OPTION Your name: address: Password: VALUE [first and last name] [full address] [your password] 3. Click Continue. Click Stop to prevent Thunderbird from automatically detecting account settings, then click Manual config. 4. In Mail Account Setup, enter the following information: OPTION Incoming: Server hostname: Port: SSL: VALUE From the drop down menu, select IMAP. [IMAP server name] [use default] Select the encryption type provided by your Systems Administrator. If SSL is not enabled, the connection will be unencrypted. Authentication: Outgoing: [Normal password] [Use settings provided by your Systems Administrator] 5. Click Advanced Config and under the account name locate Server Settings. Enter the following information: OPTION Port: Username: VALUE Use the default port number or the port number specified by your Systems Administrator. [full address] 6. After Thunderbird verifies the account information, click Create Account. 7. Click Get Mail to download s. GFI Archiver 8 Configuring Client Access 251

252 9 Using the Import Export Tool GFI Archiver enables you to extract s and calendar items from various databases and to import them into the Archive Stores using the Import Export Tool. The Import Export Tool is recommended only when importing historical calendar items. For current calendar items we suggest using the Archive Assistant. For more information refer to Importing s and Calendar Items via the GFI Archiver Archive Assistant (page 148). IMPORTANT If Microsoft Outlook is not detected on the machine where the tool is running, the following import options are disabled: Import from.pst files Download to PST option when selecting Export data from GFI Archiver. Through GFI Archiver, you can also export s from the Archive Stores, for example, to restore deleted s. Import Export Tool can export s: to a specific address to a folder on disk in.eml or.msg format to a PST file. To export Calendar Items you must use the Login as current user (Using MAPI/Outlook) option. 9.1 Import s From Microsoft Exchange Mailboxes GFI Archiver 9 Using the Import Export Tool 252

253 The Import Export Tool enables you to extract s from Microsoft Exchange mailboxes and import them to the GFI Archiver Archive Stores. The process of adding from Microsoft Exchange Mailboxes to GFI Archiver involves the following procedure: 1. The Import Export Tool extracts s from Microsoft Exchange mailboxes. 2. The Import Export Tool converts the s to MIME format. 3. The Import Service processes the extracted s based on the date of each GFI Archiver stores s in the appropriate archive store Step 1: Importing s from a remote computer IMPORTANT This section only applies when extracting items from a mailbox on a remote machine. If importing s from the same machine where GFI Archiver is installed, skip to Run the GFI Archiver Import Export Tool in this manual. GFI Archiver lets you extract mailboxes located on remote machines. To do this: GFI Archiver 9 Using the Import Export Tool 253

254 1. From the GFI Archiver machine, navigate to <GFI Archiver installation path>\mais\ 2. Share Pickup folder to give full read and write permissions to the remote machine from where the Import Export Tool is to run. To share a folder: In Windows Server 2003: a. Right-click the Pickup folder and select Sharing and Security b. Select Share this folder and click Permissions button to enter the Permissions dialog. c. Click Add. d. Enter the username of the user where the tool is going to be run and click Check Names to confirm the user. e. Click OK to add the user in the Permissions dialog. f. In the Permissions dialog select the username added and select the Allow checkbox for Full Control. g. Click OK to save and exit the Permissions dialog. h. Click OK to save and exit the folder properties sharing dialog. In Windows Server 2008: a. Right-click Pickup folder and select Share b. Specify the credentials under which the Import Export Tool will run and click Add. c. From the Permission Level drop-down list next to the added user, select Co-owner. d. Select Share and click Done. 3. Return to where GFI Archiver is installed and copy the MarcImportExport folder. 4. Paste the folder on remote machine. 5. Open an instance of CMD 6. Browse to the MarcImportExport Folder on the local machine 7. Run the following command: <regsvr32 redemption.dll> 8. Run MArcImportExport.exe Microsoft Exchange mailbox access permissions Grant Permissions The Import from Microsoft Exchange Mailbox Wizard within Import Export Tool uses the credentials of the logged-on user when run on the Microsoft Exchange Server machine directly. To run the wizard on a server that is not the Microsoft Exchange Server 2003/2007/2010 machine, specify a user name and a password. This account needs to be granted full mailbox access ( SendAs and ReceiveAs permissions) on the mailboxes from which s are to be extracted. It is recommended to remove these permissions after extracting the mailboxes. See Also: Importing mailboxes remotely from Microsoft Exchange 2003 server Importing mailboxes remotely from Microsoft Exchange 2007 GFI Archiver 9 Using the Import Export Tool 254

255 Importing mailboxes remotely from Microsoft Exchange 2007 SP1 / SP2 / SP3 Importing mailboxes remotely from Microsoft Exchange 2010 Importing mailboxes remotely from Microsoft Exchange 2013 Importing mailboxes remotely from Microsoft Exchange Server 2003 server 1. Open Microsoft Exchange System Manager. 2. Navigate to Servers > [Server Name] > [Storage Group], right click on the Mailbox Store and select Properties. 3. Select Security tab. 4. Click Advanced button and uncheck Allow inheritable permissions checkbox. 5. In the Security dialog box, select Copy. 6. Click OK to apply changes and return to the Mailbox Store Security properties. 7. In the Security tab, select Administrator from the Group or user names. 8. From the Permissions list, check Allow check boxes for Receive As and Send As. 9. Repeat steps 7 and 8 to allow Receive As and Send As permissions for: Domain Admins Enterprise Admins Microsoft Exchange Domain Servers. 10. Click OK to save settings. 11. Restart the Information Store: a. Navigate to Start > Run, type services.msc, and click OK. b. In the Results pane, right-click Microsoft Exchange Information Store service and click Restart. Importing mailboxes remotely from Microsoft Exchange Server Open the Microsoft Exchange Management Console. 2. Expand Recipient Configuration in the left pane. 3. In the right pane, locate the name of the user you want to grant permission to. Right-click the name and select Manage Send As Permission In the wizard, click Add. 5. Select the user name of the mailbox owner from which you will be importing s and click Manage. 6. Click Finish. 7. Right-click the name again and select Manage Full Access Permission In the wizard, click Add. 9. Select same user name selected in step 5, and click Manage. 10. Click Finish. GFI Archiver 9 Using the Import Export Tool 255

256 Importing mailboxes remotely from Microsoft Exchange Server 2007 SP1 SP2 SP3 1. Open the Exchange Management Shell on the Microsoft Exchange Server Run the following Windows PowerShell commandlet: foreach ($exchangeserver in Get-ExchangeServer) { if ($exchangeserver.serverrole -match 'ClientAccess') { Add-ADPermission -Identity $exchangeserver.distinguishedname -User 'domain\user' -ExtendedRights ms-exch-epi-impersonation } } Example: foreach ($exchangeserver in Get-ExchangeServer) { if ($exchangeserver.serverrole -match 'ClientAccess') { Add-ADPermission -Identity $exchangeserver.distinguishedname -User 'master-domain\administrator' -ExtendedRights ms-exch-epi-impersonation } } IMPORTANT If you have more than one Microsoft Exchange server in your domain, run the Importing mailboxes remotely command on all of them before running the Import Export Tool. Importing mailboxes remotely from Microsoft Exchange Server Open the Exchange Management Shell on the Microsoft Exchange Server. 2. Run the following PowerShell commandlet: New-ManagementScope -name "MAUMPolling" -recipientrestrictionfilter {recipienttype -eq "UserMailbox"} 3. On completion, run the following PowerShell commandlet: New-ManagementRoleAssignment -name "MAExport s" - role:applicationimpersonation -user "administrator@domain.com" - customrecipientwritescope "MAUMpolling" GFI Archiver 9 Using the Import Export Tool 256

257 Example: New-ManagementRoleAssignment -name " MAExport s " - role:applicationimpersonation -user "administrator@mydomain.com" - customrecipientwritescope "MAUMpolling" Importing mailboxes remotely from Microsoft Exchange Open the Exchange Management Shell on the Microsoft Exchange Server. 2. Run the following PowerShell commandlet: New-ManagementScope -name "MAUMPolling" -recipientrestrictionfilter {recipienttype -eq "UserMailbox"} 3. On completion, run the following PowerShell commandlet: New-ManagementRoleAssignment -name "MAExport s" - role:applicationimpersonation -user "administrator@domain.com" - customrecipientwritescope "MAUMpolling" Example: New-ManagementRoleAssignment -name " MAExport s " - role:applicationimpersonation -user "administrator@mydomain.com" - customrecipientwritescope "MAUMpolling" IMPORTANT Ensure that latest MAPI version is installed on the Exchange server for this procedure to work Step 2: Run the GFI Archiver Import Export Tool To export s from Microsoft Exchange mailboxes and import them into GFI Archiver: 1. Launch the Import Export Tool by navigating to Start > Programs > GFI Archiver > GFI Archiver Import Export Tool. 2. Click Import from Microsoft Exchange mailbox. GFI Archiver 9 Using the Import Export Tool 257

258 Screenshot 90: Importing from a Microsoft Exchange mailbox 3. From the Microsoft Exchange Version area, select the applicable option: Microsoft Exchange Server 2003 or 2007 Microsoft Exchange Server 2007 SP1 or 2010 Microsoft Exchange Server From the Login Credentials area, configure a user with permissions to access the Microsoft Exchange mailboxes to import. Configure: OPTION Login as current user Use other credentials Exchange Server Use SSL Extract s from Public Folders Verify Credentials Login to Microsoft Exchange Server using the credentials of the logged on user. Specify the username (use domain\username format) and password of a user with full mailbox access permissions. Specify the Microsoft Exchange Server name or IP address. Check this option if the Microsoft Exchange Server requires SSL connection. Check this option to extract s from public folders. Click this button to confirm access and authentication with Microsoft Exchange Server. GFI Archiver 9 Using the Import Export Tool 258

259 5. Click Next to continue. Screenshot 91: Import from Microsoft Exchange: Mailbox and folder selection 6. Select the mailboxes and folders to import: OPTION All mailboxes and folders Select the mailboxes and folders from where to extract s Export from all Folders Import all the s in mailboxes that the configured user has access to. Select this option to import the s of a particular mailbox. Specify the Mailbox name or click button to select a mailbox to import. To import s from a particular folder only, check Import s from the following folder only and key in the folder s name. Check this option to extract s from public folders. GFI Archiver 9 Using the Import Export Tool 259

260 OPTION Export calendar items Check this option to extract historical calendar items from public folders. The Import Export Tool is recommended only when importing historical calendar items. For current calendar items we suggest using the Archive Assistant. For more information refer to Importing s and Calendar Items via the GFI Archiver Archive Assistant (page 148). 7. Click Next to continue. IMPORTANT To export Calendar Items you must use the Login as current user (Using MAPI/Outlook) option. Screenshot 92: Import from Microsoft Exchange: Configure import options 8. From Import destination area, select one of the following options: Import to GFI Archiver import s to GFI Archiver Archive Stores. Extract s to given path extract s to a location on disk in.txt format GFI Archiver 9 Using the Import Export Tool 260

261 9. In the Cut-off time area, specify a date range. s sent between the specified dates are extracted, while other s are ignored. 10. In the Owner area, enable Select the owner of the s to extract and specify the user in the Owner text box. Example: If user@testdomain.com is specified in the Owner field, imported s are displayed under user@testdomain.com. 11. (Optional) Click Advanced Options and select from the following options: OPTION Ignore already processed flag Do not mark processed s Clear flag prior processing If checked, the process goes through all s in the selected date range, irrelevant of whether an export process had already occurred before and exported the same s. If unchecked, the process skips already exported s in the selected date range and resumes with the unprocessed ones. Select this option if you want Import Export Tool to process s without marking them as processed. The result is that there will be no flag to ignore when s are processed again. If in a previous export s have already been marked, the flag indicating this process is removed. 12. Click Next to start the export process. 13. When the process completes, click Finish. The duration of the process depends on the amount of s to extract Microsoft Exchange mailbox access permissions Revoke Permissions Importing mailboxes on the Microsoft Exchange Server There are no permissions to be revoked when running the Import Export Tool directly on the Microsoft Exchange Server machine. If the Import from Microsoft Exchange Mailbox Wizard was run on a machine that is not the Microsoft Exchange Server 2003/2007/2010 server, Send As and Receive As permissions are granted automatically to user credentials. It is recommended to revoke these permissions after running the Import Export Tool. Importing mailboxes remotely from Microsoft Exchange 2003 server: a. Open Exchange System Manager. b. Navigate to Servers > <Server Name> > <Storage Group>, right click Mailbox Store and select Properties. c. Select Security tab. d. From Group or user names box, select Administrator. e. From the Permissions list, select Deny for Receive As and Send As. GFI Archiver 9 Using the Import Export Tool 261

262 f. Repeat steps 4 and 5 to deny Receive As and Send As permissions for: Domain Admins Enterprise Admins Exchange Domain Servers. g. Click Advanced button, select Allow inheritable permissions option, and click OK. h. Click OK to exit the Mailbox Store Properties dialog. i. Restart the Information Store: a. Navigate to Start > Run, type services.msc, and click OK. b. In the Results pane, right-click Microsoft Exchange Information Store service and click Restart. Importing mailboxes remotely from Microsoft Exchange Server 2007/2010 server: 1. Open the Microsoft Exchange Management Shell. 2. Run the following Windows PowerShell commandlet: Remove-ADPermission -identity "Mailbox Store" -User "Trusted User" - AccessRights GenericAll Replace Mailbox Store with the name of the mailbox store that contains the mailboxes of the users and Trusted User with the user that was previously granted full mailbox access. Example: Remove-ADPermission -identity "Mailbox Database" -User "masterdomain/johnsmith" -AccessRights GenericAll GFI Archiver 9 Using the Import Export Tool 262

263 9.2 Import s from PST files locally The Import Export Tool enables you to extract s from PST files. s can then be imported into the GFI Archiver archive stores. IMPORTANT If Microsoft Outlook is not detected on the machine where the tool is running, the following import options are disabled: Import from.pst files Download to PST option when selecting Export data from GFI Archiver. The process of adding s from PST files to GFI Archiver involves the following procedure: 1. The Import Export Tool extracts s from one or more PST files. 2. The Import Export Tool converts the s to MIME format. 3. The GFI Archiver Import Service processes the extracted s based on the date of each GFI Archiver stores s in the appropriate archive store. Microsoft Outlook 2003 (32 bit) or later must be installed on the machine running the Import Export Tool. During extraction, s in PST files are copied and the PST file is left in its original state. GFI Archiver 9 Using the Import Export Tool 263

264 9.2.1 Step 1: Importing items from a remote computer IMPORTANT This section only applies when extracting items from a mailbox on a remote machine. If importing s from the same machine where GFI Archiver is installed, skip to Run the GFI Archiver Import Export Tool in this manual. GFI Archiver lets you extract mailboxes located on remote machines. To do this: 1. From the GFI Archiver machine, navigate to <GFI Archiver installation path>\mais\ 2. Share Pickup folder to give full read and write permissions to the remote machine from where the Import Export Tool is to run. To share a folder: In Windows Server 2003: a. Right-click the Pickup folder and select Sharing and Security b. Select Share this folder and click Permissions button to enter the Permissions dialog. c. Click Add. d. Enter the username of the user where the tool is going to be run and click Check Names to confirm the user. e. Click OK to add the user in the Permissions dialog. f. In the Permissions dialog select the username added and select the Allow checkbox for Full Control. g. Click OK to save and exit the Permissions dialog. h. Click OK to save and exit the folder properties sharing dialog. In Windows Server 2008: a. Right-click Pickup folder and select Share b. Specify the credentials under which the Import Export Tool will run and click Add. c. From the Permission Level drop-down list next to the added user, select Co-owner. d. Select Share and click Done. 3. Return to where GFI Archiver is installed and copy the MarcImportExport folder. 4. Paste the folder on remote machine. 5. Open an instance of CMD 6. Browse to the MarcImportExport Folder on the local machine 7. Run the following command: <regsvr32 redemption.dll> 8. Run MArcImportExport.exe Step 2: Run the GFI Archiver Import Export Tool to Import from PST Files Run Import Export Tool to extract s and calendar items from PST file. 1. Navigate to Start > Programs > GFI Archiver > GFI Archiver Import Export Tool. 2. Click Import from.pst files. GFI Archiver 9 Using the Import Export Tool 264

265 Screenshot 93: Microsoft Outlook personal folders (PST) files 3. Click Add PST File and select a PST file to extract. Repeat for each PST file to be added. 4. Click Next when all PST files are added. GFI Archiver 9 Using the Import Export Tool 265

266 Screenshot 94: Import from Microsoft Exchange: Configure import options 5. From Import destination area, select one of the following options: Import to GFI Archiver import items to GFI Archiver Archive Stores. Extract s to given path extract items to a location on disk in.txt format. 6. In the Cut-off time area, specify a date range. s and calendar items that fall between the specified dates are extracted, all others are ignored. 7. In the Owner area, enable Select the owner of the s to extract and specify the user in the Owner text box. Example: If user@testdomain.com is specified in the Owner field, imported items are displayed under user@testdomain.com. 8. Click Next to start the export process. 9. When the process completes, click Finish. The duration of the process depends on the amount of items to extract. GFI Archiver 9 Using the Import Export Tool 266

267 9.3 Export s from GFI Archiver Archive Stores The GFI Archiver OneClick Restore feature enables you to restore individual s to an address you define. If you however want to export or restore more than one at a time, use the Import Export Tool. Through this tool, you can connect to a GFI Archiver installation, search for s to export and export all of the s in one go using the following options: Restore to a specific address Download to a folder on disk in.eml or.msg format Download to a PST file. The export feature in the Import Export Tool is useful to export a set of s that match specific search criteria, for example, to provide s to satisfy a litigation support request. The export process exports a copy of the s and does not remove the original s from the Archive Stores Exporting s 1. Navigate to Start > Programs > GFI Archiver > GFI Archiver Import Export Tool. 2. From the Export Data from GFI Archiver area, click Download s from GFI Archiver. GFI Archiver 9 Using the Import Export Tool 267

268 Screenshot 95: Export: Connecting to GFI Archiver 3. In the Login Credentials area: In the GFI Archiver URL field specify the URL used to connect to GFI Archiver. Select Login as Current User to login using the credentials of the logged on user or select Use Other Credentials to login using another username and password. Click Verify Connection to confirm that a connection can be established to the GFI Archiver URL using the specified credentials. 4. Click Next to continue. GFI Archiver 9 Using the Import Export Tool 268

269 Screenshot 96: Export: Search options 5. Select the type of search from the following options: OPTION Entire mailbox s containing specific words s with specific search criteria Search for all s in a particular mailbox. Search for s that include particular words in subject, body and/or attachment. Search for s stored in a particular Archive Store, in a particular mailbox or s that contain a particular tag. 6. Click Next to continue. 7. Depending on the type of search selected in the previous step, specify the search criteria as follows: GFI Archiver 9 Using the Import Export Tool 269

270 TYPE OF SEARCH Entire mailbox s containing specific words SEARCH CRITERIA Mailbox Search All s in mailbox Click button and add the mailbox to search all containing s. Retrieve only the first s Search returns only the first s that match search criteria. Simple Search Look for Key in terms to search in s subject and body. Search in Attachments check this option to include attachments when searching. Return only the first 5000 occurrences Search returns only the first s that match search criteria. Only in mailbox(es) Search only in particular mailboxes. Click button to specify the mailbox to search in. GFI Archiver 9 Using the Import Export Tool 270

271 TYPE OF SEARCH s with specific search criteria SEARCH CRITERIA Advanced Search Search in all Archive Stores Restrict search on particular Archive Stores Run search through specific Archive Stores. Click hyperlink to select the Archive Stores to search in. Search in mailbox(es) Check this option to search for s in specific mailboxes. Click button to select the mailboxes to search in. Retrieve only the first 5000 occurrences Search returns only the first s that match search criteria. Query Criteria - select the search criteria and specify the condition from the drop-down list. Click to add more criteria. Available conditions are: Subject Search for s having a specific subject. Sender - Specify the address or Active Directory display name of the sender for which to search s. Recipient - Specify the address or Active Directory display name of the recipient for which to search s. Sent Date - Search for s sent before, after or exactly on a specific date. Key in or select a date, and select Is before, Is after or Is exactly. Received Date - Search for s received before, after or exactly on a specific date. Key in or select a date, and select Is before, Is after or Is exactly. Size (KB) - Search for s that are bigger, smaller or equal to a particular size. Key in a size and select Is greater than, Is smaller than and Is exactly. Message ID - Search using the Message ID field contained in the header. Key in or paste the message ID of the to find. Whole - Search for s that have some specific content anywhere in the (including the body, headers and attachments). Body - Search for s that have some specific content in the body. Attachment - Search for s that have some specific content anywhere in the attachment. Folder - Search for s contained in a specific mailbox folder. Folder/Subfolders - Search for s contained in a specific subfolder within a mailbox folder. Personal Label - Search for s labeled with a specific label. Global Label - Search for s labeled with a global label. Classification Label - Search for s labeled with a classification label. SPAM Tag - Search for s classified as SPAM. Contains document - Search for s with attachments of the following file types:.txt,.rtf,.htm,.html,.xml,.zip,.pdf,.msg,.doc,.xls,.ppt,.docx,.xlsx,.pptx,.wpd,.wpf,.sxc,.sxd,.sxi,.sxw,.sxg,.stc,.sti,.stw,.stm,.odt,.ott,.odg,.otg,.odp,.otp,.ods,.ots,.odf,.eml,.mht,.xps,.zip. GFI Archiver 9 Using the Import Export Tool 271

272 TYPE OF SEARCH SEARCH CRITERIA Click displayed next to a search condition to remove it. 8. Click Find to show all matching s. To export the returned s click Next. After you perform a search, you might need to review particular s from the result set to check that they actually contain what you are looking for. Double-click on the to view. The GFI Archiver Bulk Export tool loads the in a separate window. Screenshot 97: Export: Export options 9. Select how to export the s: GFI Archiver 9 Using the Import Export Tool 272

273 EXPORT OPTION Restore to the following address Download to path Download to PST CONFIGURATION Select this option to export s to a mailbox. Specify the address and select the method how to send the s: Send s as separate attachments Send s as original Export s to a location on disk. Key in the path or click Browse to select the folder where to export the s. Select the format how to export the s in.eml or.msg format. Export s to a Microsoft Outlook PST file. Key in the path or click Browse to select the pst file where to export the s. To maintain the folder structure of exported s, check Retain folder structure. 10. Click Next to start the export process. 11. When the export process completes, click Finish. The duration of the export process depends on the amount of s to export. GFI Archiver 9 Using the Import Export Tool 273

274 10 Restoring Mailboxes The Mailbox Restore tool provides you with the facility to restore s archived within GFI Archiver Archive Stores to a mailbox in Microsoft Exchange Server. For example, use the Mailbox Restore feature to restore s for deleted mailboxes. The Mailbox Restore tool is available in 32-bit and 64-bit. When using MAPI Client/CDO or Microsoft Outlook 32-bit, ensure you use Mailbox Restore 32-bit version. Use Mailbox Restore 64-bit version when using Microsoft Outlook 64-bit. To restore a mailbox: 1. Launch the Mailbox Restore tool from the GFI Archiver program group (GFI Archiver > Mailbox Restore). Screenshot 98: Restore mailbox utility 2. Select a mailbox to restore from the Restore from Mailbox field. Use domain/mailbox format in this field, for example: 'MYDOMAIN\JSmith'. 3. Select All messages to restore all messages or specify a Date from and a Date to to restore a specific date range. 4. Key in the mailbox to restore s to in the To mailbox field. Use only the mailbox alias in this field, without the domain part, for example: 'JSmith'. 5. Click Start to start the mailbox restore process. GFI Archiver 10 Restoring Mailboxes 274