EMC SourceOne Offline Access

Transcription

1 EMC SourceOne Offline Access Version 7.2 Installation and Administration Guide REV 03

2 Copyright All rights reserved. Published in USA. Published September 29, 2015 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. The information in this publication is provided as is. EMC Corporation makes no representations or warranties of any kind with respect to the information in this publication, and specifically disclaims implied warranties of merchantability or fitness for a particular purpose. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. EMC², EMC, and the EMC logo are registered trademarks or trademarks of EMC Corporation in the United States and other countries. All other trademarks used herein are the property of their respective owners. For the most up-to-date regulatory document for your product line, go to EMC Online Support ( EMC Corporation Hopkinton, Massachusetts In North America EMC SourceOne Offline Access 7.2 Installation and Administration Guide

3 CONTENTS Preface 5 Chapter 1 Offline Access Overview 9 Introduction Offline Access benefits...10 Offline Access architecture...10 Offline Access components Offline Access processes...12 Chapter 2 General Prerequisites and Guidelines 13 System requirements System considerations Installation considerations...14 Security considerations...15 Display settings Synchronizing computer clocks...16 Considerations for mixed Xtender-SourceOne environments Xtender User Cache server is no longer supported Uninstalling previous versions of Offline Access client Xtender software altered by EMC SourceOne Offline Access...17 Chapter 3 Installing Offline Access 19 Installing the Offline Access software Manual installation Silent installation...24 Verifying the installation for Outlook 2010/ Chapter 4 Updating from a Previous Release 27 Updating from a previous release Supported update scenarios Silent upgrade...28 Manual upgrade...28 Repair Offline Access after upgrading to Outlook...28 Chapter 5 Configuring Offline Access 31 Introduction Configuration considerations User permissions Configuration guidelines Accessing Xtender messages in a SourceOne environment Offline Access cache Configuring Offline Access for multi-user computers...37 Configuring group policy Adding the Offline Access administrative template to Group Policy Editor...38 EMC SourceOne Offline Access 7.2 Installation and Administration Guide 3

4 CONTENTS Configuring Offline Access policies...38 Enabling settings in GPO Enabling/disabling Offline Access...39 Enabling/disabling copy shortcut behavior Enabling/disabling move shortcut behavior Configuring the maximum age of messages to cache...43 Configuring the maximum cache size Showing/hiding the Offline Access tray icon...46 Configuring the location of the cache database...47 Configuring the synchronization frequency...49 Configuring the types of messages to cache Configuring the minimum age of messages to pre-cache Configuring SourceOne Web Services host settings...52 Configuring delay for Requesting Message dialog box Configuring log files Configuring the startup synchronization delay...59 Specifying item types to cache Configuring Offline Access for User Delete Considerations and limitations for User Delete...63 GPO entries for User Delete Registry entries for User Delete...66 Modifying ports used by Offline Access Registry entries HKEY_CURRENT_USER Registry entries HKEY_LOCAL_MACHINE Registry entries Enabling Kerberos authentication...80 Overview of using Kerberos authentication with Offline Access Enabling Kerberos authentication Enabling Kerberos on Offline Access clients Verifying Kerberos authentication on the server and client Chapter 6 Troubleshooting Offline Access 89 Troubleshooting checklist Repairing the components Repairing Microsoft Visual C++ Redistributable Repairing Microsoft.NET framework Repairing EMC SourceOne Offline Access Offline Access and Microsoft Office Upgrading to Microsoft Office 2010 or Uninstalling Microsoft Outlook...92 Offline Access and expired passwords Configuring number of retries Enabling and viewing log files for Offline Access Uninstalling EMC SourceOne Offline Access client software...93 Uninstallation considerations Uninstalling the Offline Access software manually...94 Uninstalling the Offline Access software silently EMC SourceOne Offline Access 7.2 Installation and Administration Guide

5 Preface As part of an effort to improve its product lines, EMC periodically releases revisions of its software and hardware. Therefore, some functions described in this document might not be supported by all versions of the software or hardware currently in use. The product release notes provide the most up-to-date information on product features. Contact your EMC technical support professional if a product does not function correctly or does not function as described in this document. Note This document was accurate at publication time. Go to EMC Online Support ( support.emc.com) to ensure that you are using the latest version of this document. Purpose This document describes how to install and configure EMC SourceOne Offline Access. Audience This document is part of the EMC SourceOne Offline Access documentation set, and is intended for use by installers of the product, Discovery Manager system administrators, and mail server administrators. Revision history The following table presents the revision history of this document. Table 1 Revision history Revision Date Description 03 September 29, 2015 Updated supported update scenarios section. 02 June 10, 2015 Revised references to updating from a previous release procedures. 01 April 30, 2015 First release of the EMC SourceOne Offline Access 7.2 Installation and Administration Guide. Related documentation The EMC SourceOne documentation set includes the following publications: EMC SourceOne Product Guides EMC SourceOne Products Compatibility Guide EMC SourceOne Products Security Configuration Guide EMC SourceOne Management EMC SourceOne Management Installation Guide EMC SourceOne Management Administration Guide EMC SourceOne Management Release Notes EMC SourceOne Management Localized Product Release Notes EMC SourceOne Auditing and Reporting Installation and Administration Guide EMC SourceOne Offline Access 7.2 Installation and Administration Guide 5

6 Preface EMC SourceOne Management Pack for Microsoft System Center Operations Manager Guide EMC SourceOne Search User Guide EMC SourceOne Disaster Recovery Solution Guide EMC SourceOne Discovery Manager EMC SourceOne Discovery Manager Installation and Administration Guide EMC SourceOne Discovery Manager Desktop User Guide EMC SourceOne Discovery Manager Web Application User Guide EMC SourceOne Discovery Manager Release Notes EMC SourceOne Discovery Manager Localized Product Release Notes EMC SourceOne Discovery Manager Desktop Quick Reference Cards EMC SourceOne for File Systems EMC SourceOne for File Systems Installation Guide EMC SourceOne for File Systems Administration Guide EMC SourceOne for File Systems Release Notes EMC SourceOne Offline Access EMC SourceOne Offline Access Installation and Administration Guide EMC SourceOne Offline Access User Guide EMC SourceOne Offline Access Release Notes EMC SourceOne Archiving for Microsoft SharePoint EMC SourceOne Archiving for Microsoft SharePoint Installation Guide EMC SourceOne Archiving for Microsoft SharePoint Administration Guide EMC SourceOne Archiving for Microsoft SharePoint Release Notes EMC SourceOne Archiving for Microsoft SharePoint Quick Reference Card EMC SourceOne for Microsoft SharePoint Storage Management EMC SourceOne for Microsoft SharePoint Storage Management Installation Guide EMC SourceOne for Microsoft SharePoint Storage Management Administration Guide EMC SourceOne for Microsoft SharePoint Storage Management Release Notes EMC SourceOne Supervisor EMC SourceOne Supervisor Installation Guide EMC SourceOne Supervisor Administration Guide EMC SourceOne Supervisor Web Application (Reviewer and Reports) Guide EMC SourceOne Supervisor Release Notes Special notice conventions that are used in this document EMC uses the following conventions for special notices: NOTICE Addresses practices that are not related to personal injury. 6 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

7 Preface Note Presents information that is important, but not hazard-related. Typographical conventions EMC uses the following type style conventions in this document: Table 2 Style conventions Bold Italic Monospace Used for names of interface elements, such as names of buttons, fields, tab names, and menu paths (what the user specifically selects or clicks) Used for full titles of publications that are referenced in text Used for: System code System output, such as an error message or script Pathnames, file names, prompts, and syntax Commands and options Monospace italic Monospace bold Used for variables Used for user input [ ] Square brackets enclose optional values Vertical bar indicates alternate selections - the bar means or { } Braces enclose content that the user must specify, such as x or y or z... Ellipses indicate non-essential information that is omitted from the example Where to get help EMC support, product, and licensing information can be obtained as follows: Product information For documentation, release notes, software updates, or information about EMC products, go to EMC Online Support at Technical support Go to EMC Online Support and click Service Center. Several options for contacting EMC Technical Support appear on the site. Note that to open a service request, you must have a valid support agreement. Contact your EMC sales representative for details about obtaining a valid support agreement or with questions about your account. Online communities Go to EMC Community Network at for peer contacts, conversations, and content on product support and solutions. Interactively engage online with customers, partners, and certified professionals for all EMC products. Your comments Your suggestions help to improve the accuracy, organization, and overall quality of the user publications. Send your opinions of this document to DPAD.Doc.Feedback@emc.com. EMC SourceOne Offline Access 7.2 Installation and Administration Guide 7

8 Preface 8 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

9 CHAPTER 1 Offline Access Overview This section contains an overview of Offline Access. Introduction Offline Access benefits...10 Offline Access architecture...10 Offline Access Overview 9

10 Offline Access Overview Introduction The EMC SourceOne Offline Access provides a seamless experience to the user when retrieving shortcut messages in Outlook. In addition, you can configure Offline Access to cache messages on users hard drives so that users can retrieve messages when they are not connected to the network. EMC SourceOne Offline Access provides support for Outlook 2013 and the new offline access cache mode feature synchronizes Outlook cache data. Offline Access benefits EMC SourceOne Offline Access client application provides the following benefits. User access to archived , online or off-line Increased performance when users access from remote locations Reduced Exchange and SourceOne server load and network traffic by caching data locally Automatic synchronization and caching Instant resolution of shortcut Preview pane which works fully with shortcut messages Ability to open attachments directly from the preview pane Improved efficiency in handling shortcut messages and attachments Offline Access architecture This figure illustrates how the Offline Access client components work with Microsoft Outlook and the EMC SourceOne Web server. Figure 1 Architecture diagram Offline Access for Outlook EMC SourceOne Offline Access 7.2 Installation and Administration Guide

11 Offline Access Overview Figure 1 Architecture diagram Offline Access for Outlook 2007 (continued) Architecture diagram Offline Access for Outlook 2010/2013 Offline Access components The following table describes the major Offline Access components. Table 3 Offline Access components Component Offline Access Agent Description The Offline Access Agent on the client computer: Pre-caches messages to be shortcut. Monitors network and archive server connection status. Backfills existing shortcuts if required. Removes cached items that no longer exist in the user s mailbox. Ensures that the cache size is within a few percentage points of the configured maximum. Offline Access Extension (Outlook 2007) The Offline Access Extension on the user s computer monitors user actions and intercepts Outlook events: Read Open Reply Forward Copy Offline Access Add-In (Outlook 2010/2013) The Offline Access Add-In on the user s computer monitors user actions and intercepts Outlook events: Read Open Offline Access components 11

12 Offline Access Overview Table 3 Offline Access components (continued) Component Description Reply Forward Copy Offline Access Sync Agent Offline Access SourceOne Provider Database Provider Offline Access Compact component The Offline Access Sync Agent builds a local database cache and determines the connection status to the network. The Remote Repository Provider accesses archive content by using the EMC SourceOne Web Services host. Offline Access interfaces with the database through the database provider. The Offline Access Add-in/Extension and Sync Agent use this component to add, remove, or modify items in the database. When the user selects the Compact option, the Compact component frees unused disk space. Compacting the cache does not compress data. Offline Access processes How Offline Access works Synchronization process This section describes the Offline Access processes. Offline Access works in the following way. 1. Shortcut messages are created in the user s mailbox on the Exchange server and replicated to the OST file on the user s computer. 2. The Offline Access Agent on the user s computer synchronizes the OA cache with the OST file. 3. After initial synchronization with the OST file, the Offline Access cache contains the contents of shortcut messages. 4. The Offline Access Extension on the user s computer intercepts user requests to open messages. 5. If the messages are not in the Offline Access cache, then the SourceOne Provider recaches messages from the SourceOne Web server. Synchronization occurs between the Offline Access and Outlook. At initial load. At the interval specified in either: The Cache Sync frequency setting in Offline Access Group Policy. If the policy is not enabled, in the Sync frequency field in the Options > EMC SourceOne tab > Cache Settings dialog box. When the user requests an on-demand sync by using the Update option. For more information, refer to the EMC SourceOne Offline Access User Guide. 12 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

13 CHAPTER 2 General Prerequisites and Guidelines This section provides details on system requirements, security considerations, and best practices for installing and configuring EMC SourceOne Offline Access software. System requirements System considerations Considerations for mixed Xtender-SourceOne environments...16 General Prerequisites and Guidelines 13

14 General Prerequisites and Guidelines System requirements This table describes the requirements for client computers running the EMC SourceOne Offline Access software. Table 4 EMC SourceOne Offline Access client computer requirements Hardware OS Network Software Standard desktop or laptop used in a corporate environment. The EMC SourceOne Products Compatibility Guide provides more detailed information about operating system requirements. Standard connection to the corporate network. The EMC SourceOne Products Compatibility Guide provides more detailed information about supported versions of the software described in this section. software (Exchange) Ensure Microsoft Outlook installed. Ensure that the EMC SourceOne software installation software has validated that the client version is supported. Microsoft.NET Framework Redistributable Package Microsoft Visual C SP1 Redistributable Package (x86) Microsoft Visual C SP1 Redistributable Package (x64) Manually or silently install. Ensure that the EMC SourceOne software installation software has validated that the client version is supported. English language systems are automatically installed with EMC SourceOne Offline Access software if not present. English language systems are automatically installed with EMC SourceOne Offline Access software 64-bit version if not present. System considerations Installation considerations Before you install and configure Offline Access, refer to the following system considerations. Review the following installation consideration when installing Offline Access. Outlook profile If you log in as a user without an Outlook profile on a client computer and you install Offline Access by using the installation wizard, then the EMC SourceOne server port settings are not saved. As a workaround, install Offline Access silently by using the Registry keys or GPO to push out configuration settings. Random Uninstall/reinstall behavior Sometimes after uninstalling the Offline Access software and then reinstalling Offline Access, the following events might occur: 14 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

15 General Prerequisites and Guidelines Security considerations The Offline Access Extension does not load. The Offline Access Agent does not start. The maximum cache size is set to 0 MB The maximum cache size occurs error during the following scenario: 1. Disable the Offline Access Extension through Outlook. 2. Exit Outlook. 3. Uninstall Offline Access. 4. Install Offline Access. Outlook preserves the cache state when it restarts. There is no safe method to force Outlook to discard its cached state. Use one of the following steps as a workaround: After uninstalling Offline Access, restart Outlook and then reinstall Offline Access. In Outlook s Add-in Manager, enable the Offline Access Extension. Uninstall leaves log files By design, log files are not removed when you uninstall Offline Access. Log files are located at: C:\Documents and Settings\<user>\Local Settings\Application Data\EMC\. Unused language folder A Korean language folder is created in \Program Files\EMC SourceOne\Offline Access\Languages\1042. The Korean language folder is not used. Review the following security considerations. Client security Follow these tip to enhance client security with Offline Access. Use strong passwords for the user s Windows account. Refer to Microsoft best practices for creating and using strong passwords. Use a password-enabled screen saver. Secure the user s hard drive with Windows encryption. Windows firewall Windows firewall support is turned on by default. The following versions of Windows include firewall support: Windows XP SP2 Windows Vista Windows 7 If you have problems accessing shortcutted s, try turning off the default Windows firewall on your client computer. Refer to the following Microsoft article for detailed information: Security considerations 15

16 General Prerequisites and Guidelines McAfee antivirus software For EMC SourceOne Offline Access to operate with McAfee VirusScan s Buffer overrun protection for Outlook option, you must use either of the following versions. McAfee VirusScan 8.0i Patch 13 or later McAfee VirusScan 8.5 or later Using Offline Access with S/MIME encrypted and signed messages EMC SourceOne Offline Access can be used to open and view messages encrypted and digitally signed by Outlook mail clients using the S/MIME (Secure/Multipurpose Internet Mail Extensions) protocol. S/MIME is a protocol that adds digital signatures and encryption to MIME messages as described in RFC Consider the following: Messages digitally signed and encrypted using S/MIME that were shortcut by EMC SourceOne Management can be opened and viewed using Offline Access. Other Non-S/MIME types of encryption are not supported with Offline Access. Digital signing is not supported with Offline Access. Note When using Microsoft Outlook Delegate Access, a delegated user will require access to the delegator's signed certificate to access any encrypted and digitally signed messages. Display settings For the best display of the icons in the Tools > Options > EMC SourceOne tab of Outlook on Microsoft Windows, set the Color Quality to 32-bit by using the Control Panel > Display > Display Properties > Settings tab option. Synchronizing computer clocks Ensure that the clocks on Offline Access client computers are synchronized with servers; otherwise, errors can occur. Considerations for mixed Xtender-SourceOne environments Consider the following information when installing Offline Access in a mixed Xtender and SourceOne environment. Xtender User Cache server is no longer supported The Offline Access client works with SourceOne servers. The Xtender User Cache server is no longer supported. 16 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

17 General Prerequisites and Guidelines Uninstalling previous versions of Offline Access client If you are deploying the Offline Access client application on a client computer in which a previous version of EMC Xtender Offline Access is already installed, perform the following steps. 1. Uninstall the older version of the client application. 2. Type the following command, and ensure that there is a space before /l*v: MsiExec.exe /qn /x{53412f82-8f2f-4aab-90cb-57e39e06308b} /l*v %temp%:\emc_uc_uninstall.log Note The GUID is the same regardless of the Offline Access version, and the original installation executable does not need to be available. Xtender software altered by EMC SourceOne Offline Access The EMC SourceOne Offline Access installation program alters the Xtender Shortcut Add-in on Xtender client computers. Both products include a COM add-in used to resolve shortcuts that is incompatible with the components used by the EMC SourceOne Offline Access application. If this shortcut COM add-in is detected during installation, you are notified and it is disabled. Uninstalling previous versions of Offline Access client 17

18 General Prerequisites and Guidelines 18 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

19 CHAPTER 3 Installing Offline Access This section describes how to install EMC SourceOne Offline Access software. Installing the Offline Access software Installing Offline Access 19

20 Installing Offline Access Installing the Offline Access software You can install the EMC SourceOne Offline Access software on client computers to provide transparent access to shortcut (online or offline). This section includes procedures for installing this software manually using the MSI installation, or silently using a distribution package such as Microsoft SMS. Note Do not install the Exchange Management Console on client computers that are running Offline Access. The Exchange Management Console installs a version of MAPI that Offline Access does not support, and which causes the error: Offline Access Cache Agent: Failed to open MAPI message store 0x This table provides an overview of the prerequisites that you must complete before installing software. Table 5 Prerequisites Prerequisite System requirements Accounts and permissions Details Hardware, operating system, network connectivity, and prerequisite software requirements are described in General Prerequisites and Guidelines on page 13. Ensure that: Active Directory accounts and groups and other permissions-related configuration is performed as described in the EMC SourceOne Management Installation Guide. Database permissions are configured as described in the EMC SourceOne Management Installation Guide. EMC SourceOne software Review considerations This installation requires that an EMC SourceOne Web Services computer exists and is accessible on the network. You will specify this hostname during the EMC SourceOne Offline Access software installation. If you have configured two or more Web Services computers in a load balancing cluster, you will instead specify the virtual hostname during the EMC SourceOne Offline Access software installation. For more information, see the EMC SourceOne Management Installation Guide. Ensure that you review the considerations provided in System considerations on page 14. Manual installation Use the following procedure to install the Offline Access software manually. Procedure 1. Log in to the host computer by using an account with local administrator privileges. 2. Browse to the Setup\Windows directory on the EMC SourceOne Offline Access software kit. 20 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

21 Installing Offline Access 3. Based on the installation, copy any of the following executables to a temporary location on the host computer: Table 6 Executables Outlook Architecture Installer 32-Bit Platform 64-Bit Platform ES1_OfflineAccess.exe ES1_OfflineAccessx64.exe 4. Browse to the temporary location to which you copied the setup executable. 5. Double-click the executable and then click Run. The Welcome page appears. When the installer runs, it validates the system configuration by ensuring that the installation of prerequisite components is complete. Depending on the system configuration, the installer can automatically install one or more prerequisite components before displaying the Welcome page. Automatically installed components are listed in the EMC SourceOne Management Installation Guide. 6. Click Next to display the Destination Folder window. Figure 2 Destination folder Consider the following: If the installation process detects an installation of other EMC SourceOne software, or a previous version of Offline Access on the computer, then the Change button is not available and you cannot change the installation directory. Continue to the next step. If the installation process does not detect an installation of other EMC SourceOne software, or a previous version of Offline Access on the computer, then the Change button is available, and you can change the installation directory. To specify a non-default directory in which to install EMC SourceOne Offline Access client software: Manual installation 21

22 Installing Offline Access a. Click Change to display the Change Current Destination Folder page. b. Browse to or create the destination folder. c. Click OK. The destination you specified appears in the Destination Folders page. You cannot install the Offline Access software in the following protected operating system folders: C:\Windows C:\WinNT C:\InetPub 7. (Optional) By default, the cache location is: C: \Documents and Settings\User\Application Data\EMC\ To specify a non-default location for the cache: a. Click Advanced to display the Advanced Settings page. Figure 3 Advanced settings page Note If the cache location is set during configuration of the Offline Access Group Policy, then you cannot specify a cache location on the Advanced Settings page. Do not specify any of the following folders as the cache location: C:\Windows, C:\WinNT, C:\InetPub, C:\Program Files. b. On the Advanced Settings page, click Change. 22 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

23 Installing Offline Access Figure 4 Change cache folder location page c. Select the location for the cache. d. In the Advanced Settings page, click OK. 8. Configure the server settings by using the Server Settings page. Figure 5 Server settings 9. Specify the Server Settings information: a. In the Real-time message retrieval server field, specify the hostname of the computer that includes the Document Management service. The EMC SourceOne Web Services software includes the Document Management service. If using load balancing such as Microsoft NLBS, type the virtual hostname. Manual installation 23

24 Installing Offline Access b. In the Real-time message retrieval server: Port field, specify the primary port of the Web Services host or virtual host. The default value is To retrieve messages, the Offline Access Extension requires the configuration of the real-time message retrieval server and the real-time message retrieval server port. c. In the Synchronization (backfill) server field, specify the Web Services host (or virtual host). d. In the Synchronization (backfill) server: Port field, specify the secondary port of the Web Services host (or virtual host). The default value is To populate the Offline Access cache, the Offline Access Agent requires the configuration of the synchronization (backfill) server and the synchronization (backfill) server port. Note If you specify the same Web Services host (or virtual host) for both ports, do not specify port 8001 for the synchronization (backfill) port. Port 8001 is also used by other EMC SourceOne clients (OWA, Outlook, EMC SourceOne Search, EMC SourceOne Discovery Manager) for message retrieval. If you specify port 8001 for synchronization (backfill), then the backfilling process for Offline Access could negatively affect message retrieval by other clients. 10.Click Next to display the Ready for Installation page. 11.Click Install. After the installation is complete, the InstallShield Wizard Completed page appears. 12.Click Finish. Note Restart Outlook to use Offline Access, if Outlook was running during the installation. Silent installation You can silently install the Offline Access software. The ES1_OfflineAccess.exe program confirms the version of the Microsoft Installer (MSI) on the system and it launches the MSI with the applicable parameters. The Microsoft Installer documentation provides more information on standard command line parameters. Use the following syntax to silently install Offline Access: This table describes the required user-defined parameters. ES1_OfflineAccess.exe /s /v"/qn /L*v C:\EMC_OfflineAccess.log INSTALLDIR=\"DRIVE:\DIRECTORY\" EX_TCP_PRIMARY_SERVER=PRIMARY_TCP_SERVER EX_TCP_PRIMARY_PORT=PRIMARY_TCP_PORT EX_TCP_SECONDARY_SERVER=SECONDARY_TCP_SERVER EX_TCP_SECONDARY_PORT=SECONDARY_TCP_PORT REBOOT=ReallySuppress " 24 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

25 Installing Offline Access Table 7 Required silent install parameters for Offline Access software Parameter INSTALLDIR EX_TCP_PRIMARY_SERVER EX_TCP_PRIMARY_PORT EX_TCP_SECONDARY_SERVER EX_TCP_SECONDARY_PORT Detail Installation directory. Example: C:\EMC Enter the hostname of the computer on which Web services installed. If using load balancing, type the virtual hostname. Enter This is the default value. Enter the hostname of the computer on which Web Services installed. If using load balancing, type the virtual hostname. Enter This is the default value. This table describes the optional user-defined parameters. Table 8 Optional silent install parameters for Offline Access software Parameter EX_CACHEDIR Detail Points to a non-default location for the cache. Note If you use EX_CACHEDIR, then you must also use EX_CACHEMOD. Example: C:/EMC_OfflineAccess_Cache EX_CACHEMOD EX_SAVECACHE A value of 1 instructs the install to modify the default cache location. If you use EX_CACHEMOD, then you must also use EX_CACHEDIR. Used only for uninstalling Offline Access. Specifies whether to save an existing cache or to delete it when uninstalling Offline Access client: FALSE = Do not save the cache, delete it. TRUE = Save the cache, do not delete it. EX_SAVE_SETTINGS Used only for uninstalling Offline Access. Specifies whether to save or to delete Registry settings when uninstalling Offline Access client: FALSE = Do not save Registry settings, delete Registry settings. TRUE = Save Registry settings, do not delete Registry settings. Verifying the installation for Outlook 2010/2013 Verify the following installation options for Outlook: After you install Offline Access for Outlook 2010/2013, verify that there are two entries for Offline Access in the Outlook COM Add-Ins dialog box File > Options > Add-ins > Addins Options button. EMC SourceOne Offline Access Add-in. The Offline Access add-in for Outlook 2010/2013. Verifying the installation for Outlook 2010/

26 Installing Offline Access EMC SourceOne Offline Access Configuration page. The EMC SourceOne tab is added to the Outlook Options dialog box. Note By design, these strings are not localized. 26 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

27 CHAPTER 4 Updating from a Previous Release This section includes the following topics: Updating from a previous release Supported update scenarios Silent upgrade...28 Manual upgrade...28 Repair Offline Access after upgrading to Outlook...28 Updating from a Previous Release 27

28 Updating from a Previous Release Updating from a previous release Supported update scenarios This section describes the process for updating EMC SourceOne Offline Access from a previous installation to this release. This section includes information about supported update scenarios. The EMC SourceOne Offline Access Release Notes include information about the update paths that EMC supports. Silent upgrade To perform a silent upgrade of the Offline Access client, use the /update switch. \ES1_OfflineAccess.exe /s /update /v"/qn /L*v C: \EMC_OfflineAccess2.log INSTALLDIR=\"DRIVE:\DIRECTORY\" EX_TCP_PRIMARY_SERVER=PRIMARY_TCP_SERVER EX_TCP_PRIMARY_PORT=PRIMARY_TCP_PORT EX_TCP_SECONDARY_SERVER=SECONDARY_TCP_SERVER EX_TCP_SECONDARY_PORT=SECONDARY_TCP_PORT REBOOT=ReallySuppress " (OA-199) Manual upgrade Use the following procedure to update to EMC SourceOne Offline Access 7.2. Before you begin Procedure 1. Close Microsoft Outlook on the client computer. 2. Verify that Microsoft Outlook and Offline Access are not running. To confirm, open Task Manager and verify that the following processes are not running: Outlook.exe ExOAAgent.exe 3. Depending on the environment, run either of the following executables: ES1_OfflineAccess.exe (32-bit) ES1_OfflineAccess64.exe (64-bit) 4. After the upgrade is complete, start Microsoft Outlook Repair Offline Access after upgrading to Outlook If you install Offline Access on a computer running Outlook 2007/2010, and then later you upgrade to Outlook 2010/2013, you must run Repair on Offline Access. The Repair option registers the Offline Access COM Add-in required for Outlook 2010 support, and unregisters the Exchange Client Extension that was required for Outlook 2007 support. 28 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

29 Updating from a Previous Release As an alternative to running Repair, you can use the following procedure. Procedure 1. Script the repair of the Offline Access install. 2. Manually unregister the EXOAExtn.dll file in the Offline Access installation directory. 3. Register the EMCOAAddin.dll file also located in the Offline Access installation directory. Repair Offline Access after upgrading to Outlook 29

30 Updating from a Previous Release 30 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

31 CHAPTER 5 Configuring Offline Access This section describes how to configure the EMC SourceOne Offline Access client for EMC SourceOne. Introduction Configuration considerations Configuring Offline Access for multi-user computers...37 Configuring group policy Configuring Offline Access policies...38 Configuring Offline Access for User Delete Modifying ports used by Offline Access Registry entries Enabling Kerberos authentication...80 Configuring Offline Access 31

32 Introduction You can configure Offline Access using either the Group Policy Object (GPO) settings or Registry settings. Offline Access users can configure settings in Tools > Options > EMC SourceOne tab in Outlook, as described in the EMC SourceOne Offline Access User Guide. Note To configure Offline Access in a multi-user computer environment, you must use either GPO or custom login scripts that deploy a Registry file. Configuration considerations Before you configure Offline Access, consider the information provided in the following sections. User permissions Consider the following user permission requirements. Required permissions for Offline Access users In an EMC SourceOne environment, or in a mixed Xtender and EMC SourceOne environment, Offline Access users must have the following permissions as described in this table. Table 9 User permissions for Offline Access Action Retrieve archived messages Open shortcuts in a shared mailbox Open shortcuts in a shared folder in a mailbox Required permissions Offline Access users must have permissions on the SourceOne mapped folders. Refer to "Configuring Mapped Folders" in the EMC SourceOne Management Administration Guide. Offline Access users must have Exchange Full Mailbox permissions on the shared mailbox. Sharing the Outlook folder is not sufficient. Offline Access users must have all the following Outlook permissions to access a shared folder: Delegate access to the mailbox. In the Outlook Delegate Permissions dialog box, the delegator must select Editor in the Inbox field. Reviewer permission on the top-level Mailbox - <username> node in Outlook. Editor permission on the shared folder in Outlook. Consider the following: A delegated user does not need permissions on the SourceOne mapped folders. If the delegator has permissions on the mapped folders and can access shortcuts from the archive, then the delegated user can access the 32 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

33 Table 9 User permissions for Offline Access (continued) Action Required permissions same shortcuts. For information on setting delegate permissions, consult the documentation for the mail client. You can configure Reviewer permission to grant limited functionality. For example, some shortcut content such as inline images or attachments are not retrievable with Reviewer permission. Editor permission provides the ability to obtain full Offline Access delegate functionality. Open shortcuts in a delegate mailbox Offline Access users must delegate access to the mailbox. In the Outlook Delegate Permissions dialog box, the delegator must select Editor in the Inbox field. Consider the following: You can configure Reviewer permission to grant limited functionality. For example, some shortcut content such as inline images or attachments are not retrievable with Reviewer permission. Editor permission provides the ability to obtain full Offline Access delegate functionality. A delegated user does not need permissions on the SourceOne mapped folders. If the delegator has permissions on the mapped folders and can access shortcuts from the archive, then the delegated user can access the same shortcuts. For information on setting delegate permissions, consult the documentation for the mail client. Open shortcuts in Public Folders In a mixed SourceOne and Xtender environment, where Xtender is used to shortcut items in Public Folders, Offline Access users must have the following permissions to retrieve Xtender shortcuts from those Public Folders: Edit All permission on the Public Folders. The SourceOne service account and the Xtender service account also need client access permissions on Public Folders. Read All permission on the SourceOne mapped folders associated with the Xtender archive. User permissions on mapped folders To retrieve messages from the archive, Offline Access users must have permissions on mapped folders. For Outlook Delegate Access, a delegated user does not need permissions on the mapped folders. If the delegator has permissions on the mapped folders and can access shortcuts from the archive, then the delegated user can access the same shortcuts. In a mixed environment (EMC SourceOne and Xtender), to retrieve Xtender shortcuts in Public Folders, Offline Access users must have Read All permission on the mapped folders associated with the Xtender archive. For more information about mapped folders, refer to "Configuring Mapped Folders" in the EMC SourceOne Management Administration Guide. User permissions 33

34 Configuration guidelines This section describes best practices for deploying and configuring Offline Access. Deploy before shortcutting Deploy Offline Access on users machines before they create shortcuts in their mailboxes, particularly, for the user machines with Cached Exchange Mode enabled in Outlook. If you follow this recommendation, then Offline Access can build its local cache from Outlook s cache without having to retrieve messages over the network. Upgrade before shortcutting Upgrade Offline Access clients before shortcutting calendar items. Calendar items are cached In addition to messages, Offline Access can now store calendar items in the local cache. When disconnected from the network, users can retrieve attachments in the calendar items. Cache start time and shortcut policy To copy the messages from Outlook s cache before they become shortcuts, set the Offline Access cache start time (Cache messages older than option) earlier than the start time of the shortcut policy. During Offline Access synchronization, shortcuts must be retrieved from the archive server. Also, provide a buffer time for users, for example, users returning to the office after an extended period, to ensure that messages are retrieved from Outlook s cache. For example, if shortcuts are created for messages older than 90 days, consider setting the Offline Access cache start time to 60 days, so that messages are copied to the cache 30 days before they become shortcuts. Cache size Set the maximum cache size large enough to hold the majority of messages within the cache period. This helps disconnected and remote users to have the messages in the local cache and prevents the need to retrieve messages from the archive server. After the initial installation, by default, the maximum cache size is set to 20 % of the free disk space. You can modify the percentage before you install Offline Access. Cache Item Types To control which item types are cached ( , appointments, meetings): Use the Cache Item Types setting in the Offline Access Group Policy. or Type the following Registry entry:hkcu\software\emc\sourceone \OfflineAccess\Config\CacheItemTypes Caching options and shortcut policy Ensure that the setting for the Cache messages that option (All messages or Have attachments) matches the similar setting for the shortcut policy. If these settings do not match, the Offline Access cache either caches more items than necessary or does not cache items that are in the cache. Cached Exchange Mode If users do not enable Cached Exchange Mode in Outlook, consider setting the Cache messages that option to Don t cache any messages in Offline Access. Offline Access creates a local cache file that contains messages similar to Outlook s cache. You can decide to not create a local cache for the same reason that Outlook is configured to not use a local cache file. Offline Access continues to operate; however, 34 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

35 each time a shortcut is accessed by the user, Offline Access must retrieve the message from the archive server. Calendar items If you select to cache calendar items, deploy the new Offline Access client before you create shortcuts for calendar items. Offline Access pre-caches calendar items before they are shortcut. After you deploy the new Offline Access client, calendar items are cached based on the existing cache settings. The All messages and Have attachments options for the Cache messages that setting have the same results for calendar items as they have for messages. Accessing Xtender messages in a SourceOne environment Offline Access cache Perform the following steps to access EMC Xtender messages in an environment in which EMC SourceOne is also installed. Procedure 1. Connect the Xtender archive to EMC SourceOne. Refer to "Connecting Archives" in the EMC SourceOne Management Administration Guide. 2. Map the Xtender archive folders to EMC SourceOne mapped folders. Refer to "Configuring Mapped Folders" in the EMC SourceOne Management Administration Guide 3. Give users permissions on the mapped folders. To retrieve messages, Offline Access users must have permissions on those folders. Refer to "Configuring Mapped Folders" in the EMC SourceOne Management Administration Guide. 4. Configure Offline Access to use the EMC SourceOne TCP server settings. Refer to Configuring SourceOne Web Services host settings on page 52. You can also specify TCP server settings during installation of the Offline Access client and in the Offline Access user interface. Offline Access can run in the following modes. To specify the mode, use the Cache messages that option. Caching mode The Cache messages that option is set to either All messages or Have attachments. Messages are cached on the user s hard drive. Users can preview and open shortcut messages in Outlook whether or not they are connected to the network. Shortcut messages are opened from the user s cache. The Update, Rebuild, and Compact options are available on the status icon s rightclick menu and on the EMC SourceOne tab in Outlook. Non-caching mode The Cache messages that option is set to Don t cache any messages. Messages are not cached on the user s hard drive. Users can preview and open shortcut messages in Outlook. Accessing Xtender messages in a SourceOne environment 35

36 The Update, Rebuild, and Compact options are disabled on the status icon s rightclick menu and on the EMC SourceOne tab in Outlook. Offline Access cache maintenance on client computers This section provides information on Offline Access cache maintenance on client computers. Changing server settings after Offline Access installation In EMC SourceOne environments, to change the servers used by EMC SourceOne Offline Access after installation, edit the TCP server settings in one of the following locations. The TCP server settings in Offline Access Group Policy. The Server Settings dialog box. Enabling or disabling the Offline Access cache Rebuilding the Offline Access cache Refer to the EMC SourceOne Offline Access User Guide for detailed information. To enable or disable the cache, refer to one of the following references. Enabling/disabling Offline Access on page 39. Enabling/disabling EMC SourceOne Offline Access in the EMC SourceOne Offline Access User Guide or the online help. To rebuild the cache, see the EMC SourceOne Offline Access User Guide or the online help. Copying the Offline Access cache to another computer To avoid rebuilding the Offline Access cache on a new or re-imaged computer, copy the cache from the old computer to the new computer before starting Outlook. Table 10 Cache locations Platforms Windows XP Windows Vista Windows 7 Cache location C:\Documents and Settings\user\Local Settings\Application Data\EMC\ C:\Users\user\AppData\Local\EMC\ Windows 8 Procedure 1. Copy the EMC folder containing the cache from the old computer to the directory on the new computer. For example, if the default cache locations are used: For Windows XP, copy the EMC folder to the following directory on the new computer: C:\Documents and Settings\user\Local Settings\Application Data For Windows Vista, Windows 7, and Windows 8, copy the EMC folder to the following directory on the new computer: 36 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

37 C:\Users\user\AppData\Local 2. Delete log files from the EMC folder. 3. Start Outlook on the new computer. Results Outlook uses the Offline Access cache that was copied from the old computer. The cache has an ID that is unique for each user, so the cache can be copied. This StoreID is in the Registry: HKCU\Software\EMC\SourceOne\OfflineAccess\Config. Configuring Offline Access for multi-user computers Configuring group policy To configure Offline Access in a multi-user computer environment, you must use one of the following methods. Configure GPO and push the settings out to all users. If you use GPO, then the user cannot edit the settings in the Tools > Options > EMC SourceOne tab in Outlook. Use custom login scripts to deploy a Registry file pointing to the HKLM settings will be copied into the HKCU for each user who logs on to that computer and uses Offline Access. HKLM\Software\EMC\SourceOne\OfflineAccess\Config. If you use a Registry file, then the same settings are sent to all users of that computer. However, each user can edit the settings independently in Outlook > Tools > Options > EMC SourceOne tab, and the edited settings are saved under the HKCU for that user. Offline Access looks under the HKLM Registry key for configuration settings that have not been configured by GPO and that have not been set under HKCU. Settings found under HKLM are copied to the user s HKCU and can be edited by the user in Outlook > Tools > Options > EMC SourceOne tab. Use Microsoft Group Policy Editor and the EMC Offline Access administrative template (Offline Access Group Policy.adm and Offline Access Group Policy.admx to manage user setting). Offline Access settings managed through Group Policy are written to the Registry, under HKCU\Software\Policies\EMC\OfflineAccess\1.0. If an Offline Access policy setting exists in the Registry, then the corresponding setting in the Tools > Options > EMC SourceOne tab in Outlook is unavailable (grayed out). This is true even if the policy settings were pushed to the client computer before Offline Access was installed. If policy settings are pushed to the client computer: While Outlook is running, Outlook will not use the policy settings until it is restarted. While the Offline Access Agent is running, Outlook does not need a restart, but Outlook will not use the policy settings until the next synchronization run starts. Configuring Offline Access for multi-user computers 37

38 Adding the Offline Access administrative template to Group Policy Editor Perform the following to add the EMC Offline Access administrative template to Group Policy Editor. Procedure 1. Based on the version of Outlook you have on the computer, copy one of the following files from the EMC Offline Access release kit to a directory on the computer. Offline Access Group Policy.adm file for Windows 2007 Offline Access Group Policy.admx file for Windows Start the Microsoft Group Policy Editor. Refer to Microsoft documentation for details. 3. In the left pane: a. Right-click the Administrative Templates folder. b. Select Add/Remove Templates. 4. In the Add/Remove Templates dialog box, click Add. 5. In the Policy Templates dialog box: a. Select Offline Access Group Policy.adm. b. Click Open. The Add/Remove Templates dialog box lists Offline Access Group Policy. 6. Click Close to close the Add/Remove Templates dialog box. The EMC Offline Access Policies subfolder appears in the Administrative Templates folder. Figure 6 EMC Offline Access policies Configuring Offline Access policies The following section describes how to configure Offline Access policies. 38 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

39 Enabling settings in GPO All GPO setting have the following three standard options. Most Offline Access GPO settings also have additional options or fields. GPS option include the following: Not Configured Enabled Disabled If you select the Enabled option for a GPO setting that requires additional information, but you do not supply that information, then the GPO property will revert to Disabled. This is how Microsoft's Group Policy Management interface works. To enable Offline Access in GPO, you must select both of the following options: Enabled option Enable Offline Access checkbox Enabling/disabling Offline Access This section describes how to enable or disable Offline Access. Consider the following: If Offline Access is not enabled by Group Policy, then all other Offline Access policy settings are ignored. If Offline Access is disabled or not configured in Group Policy, then the user s local preferences are used. A user can change settings through the Tools > Options > EMC SourceOne > Offline Access checkbox in Outlook. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Enable Offline Access setting. The Enable Offline Access Properties dialog box appears. Enabling settings in GPO 39

40 Figure 7 Enable Offline Access 5. Perform one of the following steps: To enable Offline Access, select Enabled. To disable Offline Access, select Disabled. 6. After configuring the setting, perform one of the following steps: Enabling/disabling copy shortcut behavior To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the properties dialog box, click OK. This section describes enabling/disabling copy shortcut behavior. Note The Restore On Copy option applies only to Offline Access running with Outlook 2007, and is enabled by default. This option does not apply to Offline Access running with Outlook 2010/2013. You can enable or disable the restoration of shortcut items when users copy them by using the Restore On Copy setting. If this setting is not configured or is disabled in Group Policy, then the user's preferences are used. The user can change these settings through Tools > Options > EMC SourceOne > Restore on Copy options in Outlook. Other factors also affect the restoration of shortcut items during a copy, as described in "Restoring shortcut items when you copy them" in the EMC SourceOne Offline Access User Guide. 40 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

41 Perform the following to enable or disable the restoration of shortcut items when users copy or move them. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Copy Shortcuts Behavior setting. The Copy Shortcuts Behavior Properties dialog box appears. Figure 8 Copy shortcuts behavior 5. Perform one of the following steps: To enable the restoration of shortcut items when users copy them, click Enabled. To disable the restoration of shortcut items when users copy them, click Disabled. 6. After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the properties dialog box, click OK. Enabling/disabling copy shortcut behavior 41

42 Enabling/disabling move shortcut behavior This section describes enabling/disabling move shortcut behavior. Note The Restore On Move option applies only to Offline Access running with Outlook 2007, and is enabled by default. This option does not apply to Offline Access running with Outlook 2010/2013. You can enable or disable the restoration of shortcut items when users copy or move them by using the Restore On Move settings. If this setting is not configured or is disabled in Group Policy, then the user's preferences are used. The user can change these settings through Tools > Options > EMC SourceOne > Restore On Move options in Outlook. Other factors also affect the restoration of shortcut items during a move, as described in "Restoring shortcut items when you move them" in the EMC SourceOne Offline Access User Guide. Perform the following to enable or disable the restoration of shortcut items when users move them. Procedure 1. In Group Policy Editor, expand the Administrative Templates node containing the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Move Shortcuts Behavior setting. The Move Shortcuts Behavior Properties dialog box appears. 42 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

43 Figure 9 Move shortcuts behavior 5. Perform one of the following steps: To enable the restoration of shortcut items when users move them, click Enabled. To disable the restoration of shortcut items when users move them, click Disabled. 6. After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the properties dialog box, click OK. Configuring the maximum age of messages to cache Use the Don t cache messages older than setting with the Cache Maximum Age setting to specify a range of message ages to cache. This value must be greater than the value for the Cache Maximum Age setting. If this setting is not configured or is disabled, then the user's preference or a default (no limit) is used. The user can change this setting through Tools > Options > EMC SourceOne > Don t cache messages older than field in Outlook. Use the following procedure to specify the maximum age of messages to cache. Procedure 1. In Group Policy Editor, expand the Administrative Templates node containing the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Cache Maximum Age setting. The Don t Cache Maximum Age Properties dialog box appears. Configuring the maximum age of messages to cache 43

44 Figure 10 Cache maximum age 5. Perform one of the following steps: To enable the setting, perform both of the following steps: a. Select Enabled. b. Select an option from the Cache Maximum Age field. Note The default is Outlook Offline Setting. To disable the setting, click either: Not Configured Disabled Configuring the maximum cache size 6. After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the properties dialog box, click OK. You can specify the maximum size of the cache file on disk as the percentage of free disk space to allocate for the cache. Consider the following: If this setting is enabled in Group Policy but a value is not specified, then a default of 20 % of free disk space is automatically allocated on the cache drive at first run. 44 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

45 If this setting is not configured or is disabled in Group Policy, then the user's preferences are used. The user can change the absolute value for this setting in Tools > Options > EMC SourceOne > Cache maximum size (MB) field in Outlook. The user cannot change the % value. Note The maximum cache size that you specify is a target for the synchronization process. The cache size displayed in Tools > Options > EMC SourceOne > Support Information in Outlook may exceed the specified maximum cache size by several percentage points. Use the following procedure to configure the maximum cache size. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Cache Maximum Size setting. The Cache Maximum Size Properties dialog box appears. Figure 11 Cache maximum size 5. To enable the setting, perform the following steps: a. Select Enabled. b. Specify a relative maximum cache size by selecting a % from the % of Free Disk Space for Cache field. The range of valid values is 5-3 %. Configuring the maximum cache size 45

46 The default is 20 %. 6. To disable the setting, select either: Not Configured Disabled 7. After configuring the setting, perform one of the following steps: Showing/hiding the Offline Access tray icon To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the Properties dialog box, click OK. If this setting is not configured or is disabled in Group Policy, then the user's preferences are used. The user can change this setting in Tools > Options > EMC SourceOne > Show tool tray icon checkbox in Outlook. Note In Windows 7, the Offline Access icon does not appear by default. Refer to "Displaying the Offline Access icon in Windows 7" in the EMC SourceOne Offline Access User Guide. Perform the following to show or hide the Offline Access icon in the system tool tray. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Show Tray Icon setting. The Show Tray Icon Properties dialog box appears. 46 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

47 Figure 12 Show tray icon 5. Perform one of the following steps: To enable the setting, select Enabled. To disable the setting, select Disabled. 6. After configuring the setting, perform one of the following steps: Configuring the location of the cache database To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the Properties dialog box, click OK. If you enable this setting in Group Policy, but do not specify a location, then the default path configured during installation is used (the user s Application Data path). If this setting is not configured or is disabled in Group Policy, then the user s preference or the default path configured during installation is used. The user can change this setting in Tools > Options > EMC SourceOne tab > Cache Settings > Select new option in Outlook. Consider the following Do not specify any of the following folders as the cache location: C:\Windows, C: \WinNT, C:\InetPub, C:\Program Files. Do not specify any folder that contains other files. Do not store other files in the cache directory. The cache directory is removed when Offline Access is uninstalled (unless you perform a silent uninstall that includes the EX_SAVECACHE=TRUE argument). Use the following procedure to configure the location of the cache database. Configuring the location of the cache database 47

48 Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Cache Database Location setting. The Cache Database Location Properties dialog box is opened. Figure 13 Cache database location 5. To enable the setting, perform the following steps: a. Select Enabled. b. In the Path for the Cache Database field, type the path in which you want the cache to reside. Note Specify a full local path. Network shares are not supported. 6. To disable the setting, select either: Not Configured Disabled 7. After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the properties dialog box, click OK. 48 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

49 Configuring the synchronization frequency If this setting is not configured or is disabled, then the default resynchronization frequency of 1440 minutes (24 hours) is used. The user can change this setting in Tools > Options > EMC SourceOne tab > Cache Settings > Update frequency (minutes) field in Outlook. Perform these steps to specify how often to synchronize the cache with the user s mailbox. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Cache Sync Frequency setting. The Cache Sync Frequency Properties dialog box appears. Figure 14 Cache synchronization frequency 5. To enable the setting, perform the following steps: a. Select Enabled. b. Specify a frequency, in minutes, in the Cache Sync Frequency (in minutes) field. The range of valid values is 60 to minutes. The default is 1440 minutes (24 hours). 6. To disable the setting, select either: Configuring the synchronization frequency 49

50 Not Configured Disabled 7. After configuring the setting, perform one of the following steps: Configuring the types of messages to cache To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the properties dialog box, click OK. Perform the following steps to specify the types of items to cache. If these settings are not configured or are disabled in Group Policy, then the user's preferences are used. The user can change this setting in Tools > Options > EMC SourceOne tab > Cache Settings > Cache messages field. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Cache Filter setting. The Cache Filter Properties dialog box appears. Figure 15 Cache filter 5. Perform one of the following steps: To enable the setting, perform the following steps: 50 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

51 a. Select Enabled. b. Select an option from the Cache Items that field: All items: Cache all items (default) Have attachments: Cache only items with attachments Don t cache any items: Do not cache any items To disable the setting, select either of the following options: Not Configured Disabled. 6. After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the Properties dialog box, click OK. Configuring the minimum age of messages to pre-cache You use the Cache Maximum Age setting with the Don t cache items older than setting to specify a range of message ages to cache. This value must be less than the value for the Cache Maximum Age setting. Messages that are newer than the minimum age you specify are not cached. If this value is not set, then the default is 30 days. If these settings are not configured or are disabled in Group Policy, then the user's preferences are used. The user can change this setting in Tools > Options > EMC SourceOne > Cache Settings > Cache items that are older than (days) field. Use the following procedure to configure the minimum age of the messages to pre-cache. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Cache Minimum Age setting. The Cache Minimum Age Properties dialog box appears. Configuring the minimum age of messages to pre-cache 51

52 Figure 16 Cache minimum age 5. Perform one of the following steps: To enable the setting, perform both of the following steps: a. Select Enabled. b. Specify an age, in days, in the Cache Minimum Age field. The valid range of values is 0 to 999. The default is 30. To disable the setting, click either Not Configured or Disabled. 6. After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the Properties dialog box, click OK. Configuring SourceOne Web Services host settings This section describes how to Configure SourceOne Web Services host settings. If you use Group Policies to push server addresses for Offline Access, you must also push the archive server type. This is especially important for sites that: Are moving users from Xtender to EMC SourceOne. You must push the SourceOne server type along with the TCP server addresses. Install Offline Access on multi-user computers. Uninstall only cleans the Registry for the user who uninstalls Offline Access. 52 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

53 Note Refer to Accessing Xtender messages in a SourceOne environment on page 35 for information on how to access Xtender messages in an environment in which EMC SourceOne is also installed. Figure 17 Server settings About the TCP server settings Configuring TCP server settings The Offline Access Extension uses the Real-time Message Retrieval Server TCP Address: Port setting for retrieval. The Offline Access Agent uses the Synchronization (backfill) Server TCP Address: Port setting to populate (pre-cache and backfill) the cache. The following settings are required: Real-time Message Retrieval Server TCP Address: Port setting Synchronization (backfill) Server TCP Address: Port setting If these settings are not configured during installation or in Group Policy, or are disabled in Group Policy, then the user's preferences are used. The user can change this setting in Tools > Options > EMC SourceOne tab > Server Settings option in Outlook. Use the following procedure to configure TCP server settings. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. Configuring SourceOne Web Services host settings 53

54 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the SourceOne Web Services Host Settings option. The SourceOne Web Services Host Settings Properties dialog box appears. Figure 18 Web service server settings 5. Perform one of the following steps: To enable the setting: a. Select Enabled. b. In the Real-time Message Retrieval Server TCP Address: Port field, specify the following so that messages can be retrieved. Fully qualified EMC SourceOne server name. Port on that server that is hosting the Document Management Service (DocManageSvcHost): EMC_SourceOne_server..domain:8001 For example:es1server.corp.company.com:8001 c. In the Synchronization (backfill) Server TCP Address: Port field, specify the following: The fully qualified EMC SourceOne server name. The port on that server that is hosting the Document Management Offline Access Service (DocManageSvcOAHost): EMC_SourceOne_server..domain: EMC SourceOne Offline Access 7.2 Installation and Administration Guide For example: ES1Server.corp.company.com:8002

55 The Synchronization (backfill) Server TCP Address: Port field must be configured so that Offline Access caches on user computers can be populated (back-filled). Note Do not specify port 8001 for the Synchronization (backfill) Server TCP Address: Port. Port 8001 is also used by other EMC SourceOne clients (OWA, Outlook, EMC SourceOne Search, EMC SourceOne Discovery Manager) for message retrieval. If you specify port 8001 for the Synchronization (backfill) Server TCP Address: Port, then the backfilling process for Offline Access could negatively affect message retrieval by other clients. To disable the setting, select either Not Configured or Disabled. 6. After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the Properties dialog box, click OK. Configuring delay for Requesting Message dialog box If an item is taking some time to retrieve, a Requesting Message dialog box is displayed. Figure 19 Requesting message If the user does not want to wait for the item to be retrieved, then the user can click Cancel. You can configure the delay before this dialog box appears. If this setting is not configured or is disabled in Group Policy, then the user's preferences are used. The user can change this setting by using the Tools > Options > EMC SourceOne > Notifications option in Outlook. Use the following procedure to configure the delay for Requesting Message dialog box. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Cancel Dialog Delay policy. The Cancel Dialog Delay Properties dialog box appears. Configuring delay for Requesting Message dialog box 55

56 Figure 20 Cancel Dialog Delay Properties dialog box 5. Perform one of the following steps: To enable the setting: a. Select Enabled. b. In the When retrieving messages show cancel dialog after (secs) field, specify the amount of time, in seconds, to wait before displaying the Wait (Cancel) dialog box. The range of values is 1 to 100 (seconds). The default is 2 (seconds). To disable the setting, select either Not Configured or Disabled. 6. After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the Properties dialog box, click OK. Note If the user selects several items to copy or move that are not in the cache and are being retrieved, and if the user clicks Cancel in the Requesting Message dialog box, then the entire copy or move operation is cancelled. No items are copied or moved. To override this behavior, use the ContinueOnCancel Registry entry. 56 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

57 Configuring log files This section provides information on configuring log files. Note Do not operate with a high logging level. By default, the verbosity level for EMC SourceOne trace logs is set to None. For troubleshooting purposes, EMC Support personnel may instruct you to set the verbosity level to Verbose for one or more trace logs. After you supply the requested logs to EMC Support, lower the verbosity level to None. A verbosity level higher than None has a negative effect on CPU use and disk space. This table describes the Offline Access log files. Table 11 Log files Installation Offline Access for Outlook 2007 Log files OfflineAccessExtension.log - the Exchange Client Extension for Outlook interactions OfflineAccessAgent.log - the agent for background retrievals OfflineAccessConfig.log - the property page operations Offline Access for Outlook 2010/2013 OfflineAccessAddIn.log - the add-in for Outlook interactions OfflineAccessAgent.log - the agent for background retrievals OfflineAccessConfig.log - the property page operations This table lists the locations of the log files. Table 12 Location of the log files Platform Windows XP Windows Vista Windows 7 Windows 8 Location C:\Documents and Settings\user\Local Settings\Application Data\EMC\ C:\Users\user\AppData\Local C:\Users\user\AppData\Local\EMC C:\Users\user\AppData\Local\EMC Enabling logging and setting logging level Changes to the log level setting by using the Tools > Options > EMC SourceOne > Support Information dialog box take effect for each component at different times. For the Offline Access Extension, changes to logging level take effect when a message is selected or read. For the Offline Access Agent, changes to logging level take effect in two minutes, or at the next synchronization, whichever happens first. Configuring log files 57

58 Specifying size and number of log files To enable logging and to set the logging level, refer to "Configuring logging" in the EMC SourceOne Offline Access User Guide. When a log file reaches a certain size, a new log file is created. Perform these steps to control the maximum size and number of log files when logging is enabled. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Log File Settings policy. The Log File Settings Properties dialog box appears. Figure 21 Log file settings 5. Perform one of the following steps: To enable the setting: a. Select Enabled. b. In the Number of log files per component (agent and extension) field, specify the maximum number of log files to create. The value is applied to each Offline Access component (agent and extension): The range of values is 1 to 20. The default is EMC SourceOne Offline Access 7.2 Installation and Administration Guide

59 c. In the Maximum size of each log file in MB field, specify the maximum size of log files to create. The value is applied to each Offline Access component (agent and extension): The range of values is 1 to 100 (MB). The default is 20 (MB). To disable the setting, select either Not Configured or Disabled. To calculate the disk space used by the log files based on the settings, use the following formula: Number of log files per component x Maximum size of each log file x 2 For example, if you use the default settings, then the log files would use 200 MB of disk space: 5 files x 20 MB x 2 = 200 MB 6. After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the Properties dialog box, click OK. To prevent the log files from filling the hard disk, logging is disabled when the disk free space reaches 20 % or less of the total space, regardless of the size and number of log files that you specify. Deleting log files This section outlines the consideration for deleting log files. You can delete old log files at any time, even if Offline Access is running. You cannot delete the current, active OfflineAccessAgent.log file until you shut down the Offline Access Agent. You cannot delete the current, active OfflineAccessExtension.log file until you shut down Outlook. Configuring the startup synchronization delay You can specify the delay between the time that Outlook and the Offline Access Agent starts, and the time that a scheduled synchronization or a rebuild occurs. This delay prevents performance problems that can happen if a synchronization or rebuild occurs while Outlook is starting. Note Users cannot change this setting. The following procedure describes how to specify how long to delay synchronization at startup. Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. Configuring the startup synchronization delay 59

60 4. In the EMC Offline Access Policies window, double-click the Startup Sync Delay setting. The Startup Sync Delay Properties dialog box appears. Figure 22 Startup sync delay properties Specifying item types to cache 5. Perform one of the following steps: To enable the setting: a. Select Enabled. b. Specify a time, in seconds, in the After agent startup, delay scheduled syncs for (secs) field: The valid range of values is 60 to The default is 600. To disable the setting, select either Not Configured or Disabled. 6. After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the Properties dialog box, click OK. The valid values correspond to the item types supported by EMC SourceOne Shortcut activities and by Offline Access. Users cannot change this setting. Use the following procedure to specify item types to cache. 60 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

61 Procedure 1. In Group Policy Editor, expand the Administrative Templates node that contains the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. In the EMC Offline Access Policies window, double-click the Cache Item Types setting. The Cache Item Types Properties dialog box appears. Figure 23 Cache items types 5. Perform one of the following steps: To disable the setting, select either Not Configured or Disabled. To enable the setting, perform both of the following steps: a. Select Enabled. b. In the Cache item types mask field, specify one of the values listed in the following table: Table 13 Valid values for Cache item types Value Description 1 Items (default) 2 Appointments 4 Meetings 3 Items and Appointments 5 Items and Meetings Specifying item types to cache 61

62 Table 13 Valid values for Cache item types (continued) Value Description 6 Appointments and Meetings 7 Items and Appointments and Meetings To cache more than one type of item, specify the sum of the values. If you type a value outside the range of 1 through 7, then an error message appears, for example: 0 is less than the minimum allowed value of 1. 1 is saved instead of 0. 8 is greater than the maximum allowed value of 7. 7 is saved instead of After configuring the setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save the changes and to close the Properties dialog box, click OK. Configuring Offline Access for User Delete Offline Access 6.7 and higher supports the User Delete feature. By configuring Offline Access for User Delete: Users can delete items from the SourceOne archive through Outlook. Users can delete single or multiple selected items. Users are prompted for confirmation before deleting the items from the archive. Users can apply the current action to all future deletions and suppress prompting. User Delete behavior depends on the version of Outlook, as described in this table. Table 14 User Delete behavior in versions of Outlook Features Outlook 2007 Outlook 2010 Drag and drop to Deleted Items folder. Not supported Supported Deletion of Appointment types. Not supported Supported Explicit deletions from the list pane. Supported Supported Deletions from To-Do Bar. Not Supported Not Supported Deletion of items in an Inspector window. Supported Supported Deletion of items by deleting the parent Outlook folder. Not Supported in Outlook 2007 Supported To enable or disable User Delete for the Outlook mail client, use the User Delete Enable setting in EMC Offline Access Policies. 62 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

63 Considerations and limitations for User Delete Refer to the following considerations and limitations for User Delete. User Delete does not support the following: Delegate deletions (the ability for a delegate to remove a delegator s archive content). PST deletions (removing the archive content by deleting archived items within PSTs). Public folder deletions (removing the archive content by deleting the archived items within public folders). Implicit deletions through rules, out-of-store moves and so on. Items restored from the Deleted Items folder cannot be re-archived unless the Reprocess items option is specified on a subsequent Historical Archive activity. Some deletion scenarios can lead to orphaned shortcut items: Deleting a shortcut item along with its archive copy, and then restoring the shortcut from the Deleted Items folder causes the shortcut item to be orphaned. Offline Access cache copy can be deleted depending on the restore operation and Offline Access cache update. Deleting one of the multiple mailbox copies of a shortcut item, and later deleting the archive copy causes the remaining copies to be orphaned. Offline Access cache copy cannot be deleted. User Delete operates only on the following archived items: Deletion of mailbox items that do not have the ES1 MsgID property is ignored. Journaled-only items are not eligible for User Delete activity; Historical Archive processing is required. Actions taken at the Confirm Archive Delete prompt affect only archived content. Supported Delete actions include the following: Explicit deletions through delete key and context menu. Supported delete actions vary slightly across Outlook versions due to differences or limitations in the integration technologies used. By design: User Delete does not intervene in mailbox deletions. Both Soft deletions (delete actions resulting in messages being moved to the Deleted Items folder) and Hard deletions (SHIFT+DEL action to bypass the Deleted Items folder) are monitored. Deletions from the Deleted Items folder are ignored. In Outlook 2007, EMC SourceOne does not support the deletion of archived content when an Outlook folder is deleted. This behavior is due to a Microsoft defect within the Exchange client Extension and Outlook Refer to the following Microsoft Knowledge base article for more information. Users must first delete the items from the Outlook folder, then delete the Outlook folder. Considerations and limitations for User Delete 63

64 GPO entries for User Delete Enabling/disabling User Delete Refer to the following information on GPO entries for User Delete. If User Delete is disabled or not configured in Group Policy, then the following Registry entry is used. HKCU\Software\EMC\SourceOne\OfflineAccess\Config \UserDeleteEnable The user cannot enable or disable User Delete. Use the following procedure to enable or disable User Delete. Procedure 1. In the EMC Offline Access Policies window, double-click the Enable User Delete setting. The User Delete Enable Properties dialog box appears. Figure 24 Enable User Delete 2. Perform one of the following steps: Enabling/disabling the User Delete Prompt To enable User Delete, click Enabled. To disable User Delete, click Disabled. If the User Delete prompt is not configured in the Outlook mail client, then the user's preference is used. If User Delete Prompt is disabled or not configured in Group Policy, then the following Registry entry is used: 64 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

65 HKCU\Software\EMC\SourceOne\OfflineAccess\Config \UserDeletePrompt The user cannot enable or disable User Delete Prompt. The user can change this setting through Outlook > Tools > Options > EMC SourceOne tab > Notifications, as described in the EMC SourceOne Offline Access User Guide. Use the following steps to enable or disable the User Delete Prompt. Procedure 1. In the EMC Offline Access Policies window, double-click the User Delete Prompt Enable setting. The User Delete Prompt Enable Properties dialog box appears. 2. Perform one of the following steps: To enable the User Delete Prompt, click Enabled. To disable the User Delete Prompt, click Disabled. Figure 25 Enable User Delete Prompt Specifying the default delete action If the default delete action setting is not configured, and if the user chooses to suppress the User Delete prompt, then the button that the user selects in the prompt becomes the default delete action. The following Registry entry is used to set User Delete Default Delete. HKCU\Software\EMC\SourceOne\OfflineAccess\Config \UserDeleteDefaultDelete The user cannot enable or disable User Delete Default Delete. Consider the following: Yes/Yes to All = Always delete selected messages from the archive GPO entries for User Delete 65

66 No/No to All = Never delete selected messages from the archive Use the following procedure to specify the default delete action. Procedure 1. In the EMC Offline Access Policies window, double-click the Enable Default User Delete setting. The User Delete Default Delete Properties dialog box appears. Figure 26 User Delete Default Delete Registry entries for User Delete 2. Perform one of the following steps: To enable Default User Delete, click Enabled. To disable Default User Delete, click either Not Configured or Disabled. If you use the User Delete Enable setting in the Offline Access GPO, then the UserDeleteEnable entry is added to HKCU\Software\Policies\EMC\OfflineAccess\1.0, overriding the UserDeleteEnable entry in HKCU\Software\EMC\SourceOne \OfflineAccess\Config. This table lists the entries that User Delete uses in HKCU\Software\EMC\SourceOne \OfflineAccess\Config. Table 15 Registry entries for User Delete Value name Type Valid/Default values Description UserDeleteEnable DWORD Valid values: 0 = False Corresponds to the Enable User Delete policy. 66 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

67 Table 15 Registry entries for User Delete (continued) Value name Type Valid/Default values Description Non-zero = True Default = 0 (False) Indicates whether User Delete is enabled or disabled for Outlook. The user cannot change this value. UserDeleteShowP rompt DWORD Valid values: 0 = False Non-zero = True Default = 1 (True) Corresponds to: The Perform this action without prompting for all future deletions checkbox in the Confirm Archive Delete dialog box. When the user selects this checkbox, then the Registry value is set to 0. When the user clears this checkbox, then the Registry value is set to 1. The Prompt to delete archive copies on deletion of mailbox items checkbox in the Tools > Options > EMC SourceOne > Notifications> dialog box in Outlook. When the user selects this checkbox, then the Registry value is set to 1. When the user clears this checkbox, then the Registry value is set to 0. UserDeleteDefaul tdelete DWORD Valid values: 0 = False Non-zero = True Default = 0 (False) This value is written to the Registry only when the user selects the Perform this action without prompting for all future deletions checkbox in the Confirm Archive Delete dialog box. Indicates the default action selected by the user in the Confirm Archive Delete dialog box: Yes or Yes to All = 1 No or No to All = 0 Modifying ports used by Offline Access Offline Access uses the Document Management services on the Web Services server. After installation, perform the following to modify ports used by Offline Access. Each Document Management service has its own configuration file on the Web Services server: Program Files\EMC SourceOne\ExDocMgmt \DocManageSvcHost.exe.config Modifying ports used by Offline Access 67

68 Program Files\EMC SourceOne\ExOAService \DocManageSvcOAHost.exe.config Procedure 1. Edit the port value for the baseaddress key in the following configuration files: In DocManageSvcHost.exe.config: add baseaddress="net.tcp://localhost:8001/docsvc" In DocManageSvcOAHost.exe.config: add baseaddress="net.tcp://localhost:8002/docsvc" 2. Restart the services on the Web Services server. 3. Deploy the port changes to Offline Access clients. Note To change the port numbers manually in the Offline Access client, refer to the EMC SourceOne Offline Access User Guide or the online help. Registry entries The following sections describe the Registry keys created during installation and operation of EMC SourceOne Offline Access. Some of these entries are created or modified: HKEY_CURRENT_USER Registry entries HKCU\Software\EMC\SourceOne When you edit settings in the Offline Access Group Policy When a user edits settings in Outlook > Tools > Options > EMC SourceOne tab, as described in the EMC SourceOne Offline Access User Guide. The following sections describe the Offline Access Registry keys created in HKEY_CURRENT_USER. Within each table, the names of the Registry values are listed in alphabetical order. This Registry key contains one subkey and one value as specified in the following table. Table 16 HKCU\Software\EMC\SourceOne Value name Type Valid/Default values Description LastTally DWORD No longer used. 68 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

69 HKCU\Software\EMC\SourceOne\OfflineAccess This Registry key contains one subkey and two values. Table 17 HKCU\Software\EMC\SourceOne\OfflineAccess Value name Type Valid/Default values Description LastGoodServer REG_SZ Default: blank The name of the last server with which Offline Access communicated successfully. HKCU\Software\EMC\SourceOne\OfflineAccess\Config This key contains most of the properties of the user s cache. These settings are created or modified by the system or when a user edits settings in Tools > Options > EMC SourceOne tab in Outlook, as described in the EMC SourceOne Offline Access User Guide. Offline Access Group Policy settings, take precedence over user settings. Table 18 HKCU\Software\EMC\SourceOne\OfflineAccess\Config Value name Type Valid/Default values Description BeginCacheItems OlderThan_Days DWORD Default: 30 (days) The age of messages to cache, in days. The user can change this value in the Cache messages that are older than field in the Cache Settings dialog box. The minimum value is 0. CacheEnabled DWORD Valid values: 0 (False) 1 (True) Default: 1 Set to 1 (True) when the user selects the Enable Cache option from the tool tray icon s right-click menu or the Enable Cache checkbox on the EMC SourceOne tab in Outlook Options dialog box. When the CacheEnabled key is set to 1 (True): EMC SourceOne Offline Access cache is enabled, allowing content that was shortcut on the Exchange server to be cached locally. The local cache then resolves the shortcut links in the . EMC SourceOne Offline Access is always loaded with Outlook, but this key must be 1 (True) for Outlook to use its functionality. The user can use the Update menu option or the Rebuild option on the cache. When the CacheEnabled key is set to 0 (False): The local caching performed by EMC SourceOne Offline Access is disabled and Outlook displays what it gets from Exchange. In an EMC SourceOne environment with the Mobile service installed, if the mailbox has been shortcut, then the messages display with links that can be resolved. CacheItemTypes DWORD Valid values: 1 ( Items) The item types to cache. The valid values correspond to the item types supported by EMC SourceOne Shortcut activities and by Offline Access. HKEY_CURRENT_USER Registry entries 69

70 Table 18 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description 2 (Appointments) 4 (Meetings) Default: 1 ( Items) To cache more than one item type, specify the sum of the values: 3 ( Items and Appointments) 5 ( Items and Meetings) 6 (Appointments and Meetings) 7 ( Items and Appointments and Meetings) The user cannot change this value. Refer to Specifying item types to cache on page 60. CacheLocation REG_SZ Default for Windows XP: C:\Documents and Settings\User \Application Data \EMC\ Default for Windows Vista: C:\Users\user \AppData\Local The path to the current user s cache on the local drive. The user can change this value in the Cache Settings dialog box. If the user uses the Rebuild option, then all the files and folders at this location are deleted. Refer to Configuring the location of the cache database on page 47. CacheMessagesOf Type_enum DWORD Valid values: 0 (All messages) 1 (Have attachments) The level of caching. The user can change this value in the Cache messages that field in the Cache Settings dialog box. 2 (Don t cache any messages) Default: 0 CachePeriod_Days DWORD Default: 0xffffffff (No limit) How long to keep items in the cache, in days. The user can specify a cache period by selecting a value in the Don t cache messages older than field in the EMC SourceOne tab of the Outlook Options dialog box. Values shown in the Don t cache messages older than field as months or years are represented as days in the Registry. CancelDialogDelay_Secs DWORD Default: 5 (seconds) The time delay before the Wait dialog box appears when retrieving contents. The user can change this value in the When retrieving messages, show Cancel dialog after _ seconds field in the Notifications dialog box. Compact_Cache DWORD Default: 0 The Offline Access Agent sets this value to True when it wants the Offline Access Compact component to compact the current cache. The Offline Access Compact component sets this value to False when it starts compacting the cache. 70 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

71 Table 18 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description ConnectionState DWORD Valid values: 0 (No front-end servers are reachable) 1 (The primary server is reachable) 2 (The secondary server is reachable) 3 (Both primary and secondary servers are reachable) Default: 3 Note Do not edit this value. The Offline Access Extension and Agent components use this value internally to track the connectivity of the primary and secondary front-end servers. ContinueOnCancel Valid values: 0 (Default behavior of Cancel in the Requesting Message dialog box) 1 (Overrides Cancel in the Requesting Message dialog box) If the user selects several items to copy or move that are not in the cache and are being retrieved, and if the user clicks Cancel in the Requesting Message dialog box, then by default the entire copy or move operation is cancelled. No items are copied or moved. To override this default behavior, and to continue retrieving items (restored or shortcut) and complete the copy/move operation, set the ContinueOnCancel Registry entry to 1. Note Use the RestoreOnCopy and RestoreOnMove Registry entries to control whether shortcut items are restored when they are copied/moved. CurrentCacheDBSize_MB DWORD Default: 0 (MB at installation) The current size of the cache, in MB. This value is updated by the system, and cannot be edited. This value displays in the Cache Size (MB) field in the Support Information dialog box. CurrentOutlookProfile REG_SZ Default: Outlook The Offline Access Extension sets this value to the current profile that Outlook is using, so that the Offline Access Agent can create a MAPI session by using the same profile as Outlook. DisableCacheBuilds DWORD Default: 0 The Offline Access Extension sets this value when the user is using Outlook with a default profile that is not associated with the current cache. This notifies the Offline Access Agent to not to build or work with the cache. For example, assume: The users have a default Outlook profile named Profile1 and have a cache for this profile. The users have another Outlook profile named Profile2, which they define as their new default profile. Profile1 is no longer the user s default profile. In this case, when the user starts Outlook (and the Offline Access extension starts), the Offline Access Extension determines that the user s default profile does HKEY_CURRENT_USER Registry entries 71

72 Table 18 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description not match the profile associated with the cache. The user is prompted to delete the old cache and build a new cache for Profile2. If the user selects No, then the Offline Access Extension runs in cache disabled mode, and the Offline Access extension sets the DisableCacheBuild value to notify the Offline Access Agent not to use the cache. ForceSaveForCacheMode DWORD In Outlook 2007, HTML messages with embedded images or attachments display as plain text when a mailbox is opened by another user with full mailbox access to that mailbox. To work around the issue, set this Registry entry to 1. HttpURLPrimary REG_SZ Default: /EMCRetriever /drpwebservice.asmx HttpURLSecondary REG_SZ Default: LanguageID DWORD Default: 1033 (U.S. English) Note This setting is no longer used. Note This setting is no longer used. The language code page. LastSyncTime DWORD Default: blank Used by the Offline Access Agent to determine when the next synchronization is to occur, based on the update (resynchronization) frequency. The units are ticks, used to represent time to epoch (the number of seconds since January 1, :00:00). The Offline Access Extension uses this value to display the last sync time as a datetime string in the Last cache update field in the Support Information dialog box. This value is updated by the system, and cannot be edited directly. The user can trigger synchronization by selecting the Update option from the tool tray icon s right-click menu. LogginLevel DWORD Valid values: 0 (None) 1 (Low) 2 (Medium) The current logging level. The user can enable/disable logging by selecting an option from the Logging Level field in the Support Information dialog box. 3 (High) 4 (Verbose) Default: 0 (None) MaxCacheSize_MB DWORD Default: calculated, based on (PercentDiskSpace) x (the free space on the disk) Maximum size of the user s cache, in MB. The user can change this value in the Cache maximum size (MB) field in the EMC SourceOne tab of the Outlook Options dialog box. 72 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

73 Table 18 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description When MaxCacheSize_MB is set to 0 (Not Set), then the maximum cache size is calculated using the PercentDiskSpace value. MaxConsecutiveConnectFails DWORD Range: Default: 200 If a backfill server is not running, then synchronization is interrupted after the specified number of consecutive connection failures. MaxLogonAttempts DWORD Default: 3 Determines how many times the Offline Access status agent attempts to authenticate with the front-end server. After the third try, Offline Access is set to an offline state and no longer prompts the user for credentials. NextSyncTime DWORD Calculated time at which the next synchronization occurs, based on LastSyncTime. NumberLogFiles DWORD Range: 1-20 Default: 5 Corresponds to the Number of log files per component field in the Log file settings policy. Maximum number of log files to create for each Offline Access component (agent and extension). The value is applied to each component. Use with SizeLogFiles_MB. NumberOfItemsInCache DWORD Default: 0 The number of items in the cache. This value displays in the Items in the cache field in the Support Information dialog box. This value is updated by the system, and cannot be edited directly. OutlookOfflineSetting DWORD Valid values: 0 (False) 1 (True) Default: 1 The user can set this value to 1(True) by selecting offline access cache mode. This value is the same as Outlook cache mode. PercentDiskSpace DWORD Default: 20% The % of free disk space to use for the cache. The % of free disk space to use for the cache when MaxCacheSize_MB is set to 0 (Not Set). RebuildCache DWORD Valid values: 0 (False) 1 (True) Default: 0 The user can set this value to 1 (True) by selecting Rebuild cache in the Support Information dialog box. The user can select Rebuild cache during normal Outlook operation. However, the reset does not occur until after Outlook shuts down. Rebuild cache: Deletes the entire contents of the user s cache (mailbox folder). Re-synchronizes the user s cache with Exchange and EMC SourceOne server when the user restarts Outlook and reconnects to the Microsoft Exchange network. HKEY_CURRENT_USER Registry entries 73

74 Table 18 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description RestoreOnCopy DWORD Valid values: 0 (False) 1 (True) Default: 0 Note This setting applies to Outlook 2007, not to Outlook Controls whether shortcut messages are restored when users copy them. The user can set this value to 1 (True) by selecting the Restore On Copy checkbox in the EMC SourceOne tab. Also refer to the corresponding setting in Group Policy and HKCU\Software\Policies\EMC\OfflineAccess \1.0. RestoreOnMove DWORD Valid values: 0 (False) 1 (True) Default: 0 Note This setting applies to Outlook 2007, not to Outlook Controls whether shortcut messages are restored when users move them. The user can set this value to 1 (True) by selecting the Restore On Move checkbox in the EMC SourceOne tab. Also refer to the corresponding setting in Group Policy and HKCU\Software\Policies\EMC\OfflineAccess \1.0. ResyncFrequency_Mins DWORD Default: 1440 (minutes; equals once every 24 hours) RetrievalRetryBailWait DWORD Range: (minutes) Default: 60 (minutes) RetrievalRetryMaxInterval DWORD Range: 5-60 (seconds) Default: 15 (seconds) RetrievalRetryNumber DWORD Range: 0-50 Default: 8 ServerVersion_enum DWORD Valid value: 1 (EMC SourceOne) How often to synchronize the cache with the mailbox. The user can change this value in the Update frequency (minutes) field in the Cache Settings dialog box. For EMC SourceOne environments. The wait (in minutes) before performing another synchronization, if a synchronization fails after exceeding the specified number of retries on a single message. Use with RetrievalRetryMaxInterval and RetrievalRetryNumber. For EMC SourceOne environments. The maximum interval (in seconds) to wait between retrieval attempts. The Offline Access Agent uses randomly calculated intervals between 0 and this value. Use with RetrievalRetryBailWait and RetrievalRetryNumber. For EMC SourceOne environments. The number of consecutive attempts to retrieve a message if the EMC SourceOne Document Management service is busy. Use with RetrievalRetryBailWait and RetrievalRetryMaxInterval. The type of server. The value, by default, is set to 1 (EMC SourceOne). ShowTrayIcon DWORD Valid values: Determines whether the EMC SourceOne Offline Access status icon displays in the system tray. 74 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

75 Table 18 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description 0 (Hide icon) 1 (Show icon) Default: 1 The user can set this value to 0 by selecting the Hide This Icon option from the icon s right-click menu, or by clearing the Show tool tray icon checkbox on the EMC SourceOne tab in the Outlook Options dialog box. The user can reset this value to 1 by selecting the Show tool tray icon checkbox on the EMC SourceOne tab in the Outlook Options dialog box. ShutdownDuringSync DWORD Default: 0 If Outlook is closed while a synchronization is occurring, this value is set to 1. When Outlook is restarted, if this value is one, then synchronization will resume. SizeLogFiles_MB DWORD Range: (MB Default: 20 (MB) StatusCheckInterval DWORD Range: (seconds) Default: 120 (seconds) Corresponds to the Maximum size of each log file in MB field in the Log file settings policy. Maximum size of log files to create. The value is applied to each component (agent and extension). Use with NumberLogFiles. The Offline Access Agent performs status checks. The first status check is performed 30 seconds after the Offline Access Agent starts. This Registry entry specifies the interval (in seconds) between status checks performed by the Offline Access Agent. The Offline Access icon in the system tool tray displays the status. A lower value updates the status more frequently, but may cause more network traffic. If you specify an invalid value, then at the next status check, the value is reset to the extreme value nearest the invalid value. For example, a value of 10 is reset to 30. The reset action is logged. Changes to this value are applied after the next status check occurs. StoreID REG_SZ The Offline Access Extension sets this value to the StoreID of the Exchange mailbox associated with the cache. SyncState DWORD Valid values: Indicates whether an Update (synchronization) is in progress. 0 = Update is not in progress (Update, Rebuild, and Compact options are enabled). 1 = Update is in progress (Update, Rebuild, and Compact options are disabled). 6 = An error occurred; synchronization failed (Update, Rebuild, and HKEY_CURRENT_USER Registry entries 75

76 Table 18 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description Compact options are enabled). TCPServerPortPrimary REG_SZ The fully qualified name of the EMC SourceOne server hosting the Document Management Service, and the TCP/IP port used to retrieve messages, specified in: Outlook > Tools > Options > EMC SourceOne tab > Server Settings dialog box > Real-time message retrieval server:port field. TCPServerPortSecondary REG_SZ The fully qualified name of the secondary EMC SourceOne server hosting the Document Management Service, and the TCP/IP port used to backfill the cache, specified in: Outlook > Tools > Options > EMC SourceOne tab > Server Settings dialog box > Synchronization (backfill) server:port field. UsingAddin Indicates which Offline Access component is installed: 0 = The Offline Access extension for Outlook 2007 is installed. 1 = The Offline Access add-in for Outlook 2010 is installed. HKCU\Software\EMC\SourceOne\TraceLogs HKCU\Software\Policies\EMC\OfflineAccess\1.0 This Registry key contains several subkeys, one for each Offline Access component. The values in a subkey controls trace logging for that component. Do not edit trace log Registry settings unless directed by EMC Support personnel. To specify logging settings, refer to Configuring log files on page 57. This key contains most of the properties of the user s cache. These entries are created and modified when you edit settings in the Offline Access Group Policy. By default, all policies are set to Not Configured (Disabled). Policy settings take precedence over the user settings in the following: HKCU\ Software\EMC\SourceOne\OfflineAccess\Config Tools > Options > EMC SourceOne When you enable a policy setting, the user cannot edit the corresponding setting in the Tools > Options > EMC SourceOne option in Outlook. Table 19 HKCU\Software\Policies\EMC\OfflineAccess\1.0 Value name Type Valid/Default values Description BeginCacheItems OlderThan_Days DWORD Default when enabled: 30 (days) Corresponds to the Cache messages older than policy. The age of messages to cache, in days. 76 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

77 Table 19 HKCU\Software\Policies\EMC\OfflineAccess\1.0 (continued) Value name Type Valid/Default values Description If this policy is disabled or not configured, then the user can change this value in the Cache messages that are older than field in the Cache Settings dialog box. The minimum value is 0. CacheEnabled DWORD When enabled: 1 Corresponds to the Enable Offline Access policy. If this policy is disabled or not configured, then the user can select the Enable Cache option from the tool tray icon s right-click menu or the Enable Cache checkbox on the EMC SourceOne tab in Outlook Options dialog box. When the Enable Offline Access policy is enabled: EMC SourceOne Offline Access cache is enabled, allowing content that was shortcut on the Exchange server to be cached locally. The local cache then resolves the shortcut links in the . EMC SourceOne Offline Access is always loaded with Outlook, but this key must be 1 (True) for Outlook to use its functionality. The user can use the Update menu option or the Rebuild option on the cache. When the Enable Offline Access policy is not configured or disabled: The local caching done by EMC SourceOne Offline Access is disabled and Outlook sees what it gets from Exchange. In an EMC SourceOne environment with the Mobile service installed, if the mailbox has been shortcut, the messages display with links that can be resolved. CacheLocation REG_SZ Default when enabled: blank Corresponds to the Cache database location policy. The path to the current user s cache on the local drive. If this policy is disabled or not configured, then the user can change this value in the Cache Settings dialog box. If the user uses the Rebuild option, then all the files and folders at this location are deleted. CacheMessagesOf Type_enum DWORD Valid values: 0 (All messages) 1 (Have attachments) 2 (Don t cache any messages) Default when enabled: 0 Corresponds to the Cache message types policy. Determines whether or not messages are cached, and if so, which messages: all messages or only those messages that have attachments. If this policy is disabled or not configured, then the user can change this value in the Cache messages field in the Cache Settings dialog box. CachePeriod_Days DWORD Default when enabled: 0xffffffff (No Limit) Corresponds to the Don t cache messages older than policy. How long to keep items in the cache, in days. HKEY_CURRENT_USER Registry entries 77

78 Table 19 HKCU\Software\Policies\EMC\OfflineAccess\1.0 (continued) Value name Type Valid/Default values Description If this policy is disabled or not configured, then the user can specify a cache period by selecting a value in the Don t cache messages older than field in the EMC SourceOne tab of the Outlook Options dialog box. Values shown in the Don t cache messages older than field as months or years are represented as days in the Registry. CancelDialogDelay_Secs DWORD Default when enabled: 5 (seconds) Corresponds to the Cancel dialog delay policy. The time delay before the Wait (Cancel) dialog box appears when retrieving contents. If this policy is disabled or not configured, then the user can change this value in the When retrieving messages, show Cancel dialog after _ seconds field in the Notifications dialog box. HttpURLPrimary REG_SZ This setting is no longer used. HttpURLSecondary REG_SZ This setting is no longer used. NumberLogFiles DWORD Range: 1-20 Default: 5 PercentDiskSpace DWORD Default when enabled: 20% ResyncFrequency_Mins DWORD Default when enabled: 1440 (minutes; equals once every 24 hours) ShowTrayIcon DWORD Valid values: 0 (Hide icon) 1 (Show icon) SizeLogFiles_MB DWORD Range: (MB) Default: 20 (MB) Corresponds to the Number of log files per component field in the Log file settings policy. Maximum number of log files to create for each Offline Access component (agent and extension). The value is applied to each component. Use with SizeLogFiles_MB. Corresponds to the % of free disk space for cache setting in the Maximum cache size policy. The % of free disk space to use for the cache when MaxCacheSize_MB is set to 0 (Not Set). Corresponds to the Cache re-sync frequency policy. How often to synchronize the cache with the mailbox. If this policy is disabled or not configured, then the user can change this value in the Update frequency (minutes) field in the Cache Settings dialog box. Corresponds to the Show icon in system tray policy. Determines whether the EMC SourceOne Offline Access status icon displays in the system tray. If this policy is disabled or not configured, then the user can set this value to 0 by selecting the Hide This Icon option from the icon s right-click menu, or by clearing the Show tool tray icon checkbox on the EMC SourceOne tab in the Outlook Options dialog box. The user can reset this value to 1 by selecting the Show tool tray icon checkbox on the EMC SourceOne tab in the Outlook Options dialog box. Corresponds to the Maximum size of each log file in MB field in the Log file settings policy. 78 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

79 Table 19 HKCU\Software\Policies\EMC\OfflineAccess\1.0 (continued) Value name Type Valid/Default values Description Maximum size of log files to create. The value is applied to each component (agent and extension). Use with NumberLogFiles. TCPServerPortPrimary REG_SZ Default: blank Corresponds to the Real-time message retrieval server:port setting in the TCP server settings policy. For EMC SourceOne environments. The TCP/IP port of the EMC SourceOne server hosting the Document Management Service used for retrieving messages. If this policy is disabled or not configured, then the user can change this value in the Real-time message retrieval server:port field in the Server Settings dialog box. TCPServerPortSecondary REG_SZ Default: blank Corresponds to the Synchronization (backfill) server:port setting in the TCP server settings policy. For EMC SourceOne environments. The TCP/IP port of the EMC SourceOne server hosting the Document Management Service used for backfilling the cache. If this policy is disabled or not configured, then the user can change this value in the Synchronization (backfill) server:port field in the Server Settings dialog box. HKEY_LOCAL_MACHINE Registry entries HKLM\Software\EMC\SourceOne The following sections describe the Registry keys created in HKEY_LOCAL_MACHINE for Offline Access. This Registry key contains two values and several subkeys. Table 20 HKLM\Software\EMC\SourceOne Value name Type Valid/Default values Description InstallDir REG_SZ Default: C:\Program Files\EMC SourceOne Parent directory in which EMC SourceOne executables are installed. LogDir REG_SZ Not used by Offline Access. Refer to Configuring log files on page 57 for the location of Offline Access log files. HKEY_LOCAL_MACHINE Registry entries 79

80 HKLM\Software\EMC\SourceOne\OfflineAccess This Registry key contains one value. Table 21 HKLM\Software\EMC\SourceOne\OfflineAccess Value name Type Valid/Default values Description InstallDir REG_SZ Default: C:\Program Files\EMC SourceOne Directory in which Offline Access executables are installed. Specified on the Destination Folder screen or Change Destination Folder screen during installation. HKLM\Software\EMC\SourceOne\Security This Registry key contains one value that stores the encrypted security key for EMC SourceOne. Table 22 HKLM\Software\EMC\SourceOne\Security Value name Type Valid/Default values Description ExDpKey REG_SZ Encrypted security key. HKLM\Software\EMC\SourceOne\Versions This Registry key contains one value that stores the version number for Offline Access. Table 23 HKLM\Software\EMC\SourceOne\Versions Value name Type Valid/Default values Description OfflineAccess REG_SZ Current version number of Offline Access. The current version number of Offline Access. Enabling Kerberos authentication To enable Kerberos authentication for use with EMC SourceOne Offline Access, refer to the following sections. Overview of using Kerberos authentication with Offline Access EMC SourceOne Offline Access by default uses Microsoft Windows NT LAN Manager (NTLM) authentication. Sometimes, you may want to change the authentication protocol used by Offline Access to be Kerberos authentication instead of NTLM. For example, you may want to use Kerberos with Offline Access when using Offline Access on an Internet Protocol version 6 (IPV6) network, or when using software that allow smart cards for authentication. 80 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

81 Enabling Kerberos authentication To enable Kerberos authentication for Offline Access and verify that it is working, you must perform tasks on both the Offline Access clients and on the EMC SourceOne Web servers as described in the following sections. You enable Kerberos authentication on the EMC SourceOne Web server by doing the following. Procedure 1. Modify the configuration files on the EMC SourceOne Web servers to enable Kerberos authentication. 2. Set the Service Principal Name (SPN) used for Kerberos authentication. 3. Stop and then restart the needed services on the EMC SourceOne Web server. 4. Verify that Kerberos authentication is being used. Modifying configuration files to enable Kerberos To enable Kerberos authentication, you must modify the two files used to configure the one or more EMC SourceOne Web servers on each computer where the EMC SourceOne Document Management Service is installed. Modify the following two files for each server that is running the EMC SourceOne Document Management Service. Modifying the DocManageSvcHost.exe.config file DocManageSvcHost.exe.config The DocManageSvcHost.exe.config file is used to configure the EMC SourceOne Document Management Service (DocManageSvcHost.exe). The Document Management Service is installed as part of the EMC SourceOne Web Services component of EMC SourceOne Management. DocManageSvcOAHost.exe.config The DocManageSvcOAHost.exe.config file is used to configure the Document Management Offline Access Service (DocManageSvcOAHost.exe). This file is installed as part of EMC SourceOne Offline Access. Perform the following steps to modify the DocManageSvcHost.exe.config file. Procedure 1. Edit the DocManageSvcHost.exe.config file and find the following section: <system.servicemodel>... <endpoint > <!-- <identity> <serviceprincipalname value="docmanagesvc/server:8001"/> </identity> --> </endpoint> </system.servicemodel> 2. Perform the following edits: Enabling Kerberos authentication 81

82 a. Remove the comment around <identity></identify> block. b. Replace the word Server with either of the following: The fully qualified domain name of the server on which the Document Management Service runs. The load balancer for the server on which the Document Management Service runs For example, the following example shows the comment removed and the word Server replaced by the fully qualified domain name for the server Example1, where the Document Management Service runs at this site: <system.servicemodel>... <endpoint > <identity> <serviceprincipalname value="docmanagesvc/example1.corp.com:8001"/> </identity> </endpoint> </system.servicemodel> 3. Save the file. Modifying the DocManageSvcOAHost.exe.config file Perform the following steps to modify the DocManageSvcOAHost.exe.config file. Procedure 1. Edit the DocManageSvcOAHost.exe.config file and find the following section: <system.servicemodel>... <endpoint > <!-- <identity> <serviceprincipalname value="docmanagesvc/server:8002"/> </identity> --> </endpoint> </system.servicemodel> 2. Perform the following edits: a. Remove the comment around the <identity></identity> block. b. Replace the word Server with either of the following: The fully qualified domain name of the server on which the Document Management Service and the Offline Access Service run. The load balancer for the server on which the Document Management Service and the Offline Access Service run. 82 EMC SourceOne Offline Access 7.2 Installation and Administration Guide

83 For example, the following shows the comment removed and the word Server replaced by the fully qualified domain name of the server Example1, where the Document Management Service and the Offline Access service run at this site: <system.servicemodel>... <endpoint > <!-- <identity> <serviceprincipalname value="docmanagesvc/example1.corp.com:8002"/> </identity> --> </endpoint> </system.servicemodel> 3. Save the file. Set the Service Principal Names to be used To use Kerberos authentication with Offline Access, you must configure a service principal name (SPN) to be used for the authentication. Understanding and using an SPN with Offline Access A service principal name (SPN) is the name by which a Kerberos client uniquely identifies an instance of a service for a particular Kerberos target computer. For additional background information on the SetSPN utility, including usage and installation, refer to the following: The configuration of Kerberos authentication for use with Offline Access differs from that used for single sign-on configurations. For more information about using Kerberos in a single sign-on configuration, refer to the EMC SourceOne Management Installation Guide appendix Single Sign-on Support Example (Windows). Registering the SPNs for use with Offline Access You register the service principal names to be used by Offline Access using the Microsoft SetSPN utility. To register the service principal names, perform the following on the domain controller used by Offline Access, using the service account used by the EMC SourceOne Web Services. Procedure 1. List the registered SPNs by issuing the SetSPN command with the -L option as in the following example: setspn -L domain\e5admin 2. Register the Document Management Service (DocManageScv) as an SPN for both the 8001 and 8002 ports that are used by Offline Access, by using either of the following: The fully qualified domain name of the one or more EMC SourceOne Web Services servers (or the load balancer for the servers). Enabling Kerberos authentication 83

84 The fully qualified domain name of the one or more load balancer for the servers). In the following example, the fully qualified name of the Discovery Manager Web Services host computers are Example1.domain.com and Example2.domain.com. setspn -A DocManageSvc/Example1.domain.com:8001 domain\e5admin setspn -A DocManageSvc/Example1.domain.com:8002 domain\e5admin setspn -A DocManageSvc/Example2.domain.com:8001 domain\e5admin setspn -A DocManageSvc/Example2.domain.com:8002 domain\e5admin Note The fully qualified names used with the SetSPN utility are the same names specified in the modified DocManageSvcOAHost.exe.config and DocManageSvcHost.exe.config files. 3. List the registered SPNs again to verify that the previous registration was successful. For example: setspn -L domain\e5admin 4. Log out of the EMC SourceOne Web Services service account. Restart the services after changing the configuration After you have changed the configuration files and registered the service principal names, you need to stop and restart two services on the EMC SourceOne Web server. Document Management Service (DocManageSvcHost.exe) Offline Access Service (DocManageSvcOAHost.exe) Enabling Kerberos on Offline Access clients You enable Kerberos authentication on the Offline Access clients in the organization by doing the following. On installation, using the install option. Using group policies to update the Offline Access clients. Note Enabling Kerberos using an installation option When installing or updating Offline Access clients, ensure that when you specify server settings you use the same fully qualified domain name used in the configuration files. To enable Kerberos authentication when performing a silent install of the Offline Access client, specify the following option and value. USEKERBEROS=1 Alternatively, if the Offline Access client is already installed, you can enable Kerberos authentication for that client by doing the following on the computer on which the Offline Access client is installed. Procedure 1. Change the Registry value of EnableKerberosAuth to a value of EMC SourceOne Offline Access 7.2 Installation and Administration Guide

85 Enabling Kerberos using group policies 2. Stop and then restart Microsoft Outlook. Refer to the EMC SourceOne Offline Access Installation and Administration Guide for more information about installing (or modifying the installation of) the Offline Access client. You can enable Kerberos authentication using the Microsoft Group Policy Editor and the EMC Offline Access administrative template (Offline Access Group Policy.adm for Outlook 2007 and Offline Access Group Policy.admx for Outlook 2010) to manage user settings. Perform the following to enable Kerberos authentication through the Group Policy Editor user interface. Procedure 1. In the EMC Offline Access policies, select the Enable Kerberos Authentication setting. 2. In the Enable Kerberos Authentication Properties dialog: a. Select Enabled. b. Click OK. This figure illustrates using the Group Policy Editor to enable Kerberos authentication. Figure 27 Using Group Policy Editor to enable Kerberos authentication This key that can be used with the templates that allow you to specify whether to use NTLM or Kerberos as the authentication protocol. By default, NTLM authentication is specified by the following key and values: EnableKerberosAuth Dword 0 Enabling Kerberos on Offline Access clients 85

86 To use Kerberos authentication, use the following key values: EnableKerberosAuth Dword 1 Verifying Kerberos authentication on the server and client Once you have completed the process of enabling Kerberos authentication on the servers and clients, verify Kerberos authentication. You can verify that it is functioning correctly by using the Offline Access client to restore a shortcut message and then perform the following procedure. Procedure 1. Use the Offline Access client to restore a shortcut message. 2. Reviewing the resulting event log message. This figure shows the properties for an event log message that indicate that Kerberos authentication was used. Figure 28 Example of Kerberos authentication used with Offline Access Similarly, this figure shows the properties for an event log message that indicates that NTLM authentication was used. 86 EMC SourceOne Offline Access 7.2 Installation and Administration Guide