Archive Manager 4.8. Planning and Installation Guide for Exchange



Similar documents
Spotlight on Messaging. Evaluator s Guide

formerly Help Desk Authority Upgrade Guide

8.7. Target Exchange 2010 Environment Preparation

Dell Recovery Manager for Active Directory 8.6. Quick Start Guide

About Recovery Manager for Active

Foglight. Foglight for Virtualization, Free Edition Installation and Configuration Guide

4.0. Offline Folder Wizard. User Guide

Enterprise Vault Installing and Configuring

2.0. Quick Start Guide

Archive Manager 4.8 Administration Guide

Dell Statistica Statistica Enterprise Installation Instructions

Dell MessageStats for Lync and the MessageStats Report Pack for Lync & OCS 7.3. User Guide

Archive Manager 4.4. Administration Guide

Dell Enterprise Reporter 2.5. Configuration Manager User Guide

Dell Statistica Document Management System (SDMS) Installation Instructions

Active Directory Change Notifier Quick Start Guide

Archive Manager 4.6. Administration Guide

8.7. Resource Kit User Guide

Dell Spotlight on Active Directory Deployment Guide

Dell Recovery Manager for Active Directory 8.6.0

Dell One Identity Cloud Access Manager Installation Guide

Dell Directory Analyzer Installation Guide

Dell InTrust Preparing for Auditing and Monitoring Microsoft IIS

Dell InTrust Preparing for Auditing Microsoft SQL Server

Security Explorer 9.5. About Security Explorer 9.5. New features. June 2014

Quick Install Guide. Lumension Endpoint Management and Security Suite 7.1

Dell Archive Manager Administration Guide

6.7. Quick Start Guide

Dell Recovery Manager for Active Directory 8.6.3

Interworks. Interworks Cloud Platform Installation Guide

Quest vworkspace. System Requirements. Version 7.2 MR1

FOR WINDOWS FILE SERVERS

Quest Collaboration Services How it Works Guide

Defender Delegated Administration. User Guide

Enterprise Reporter Report Library

Quest Collaboration Services 3.5. How it Works Guide

Quest ChangeAuditor 4.8

Getting Started Guide

ChangeAuditor 5.6. For Windows File Servers Event Reference Guide

Dell Client Profile Updating Utility 5.5.6

formerly Help Desk Authority HDAccess Administrator Guide

Quest ChangeAuditor 5.1 FOR ACTIVE DIRECTORY. User Guide

Archive Attender Version 3.5

ChangeAuditor 6.0 For Windows File Servers. Event Reference Guide

Web Portal Installation Guide 5.0

Archive Manager 5.0. How to Diagnose & Troubleshoot. Spencer Pelley Technical Team Lead May 2014

Mail Attender Version

WhatsUp Gold v16.2 Installation and Configuration Guide

Dell One Identity Cloud Access Manager How to Configure for High Availability

Lepide Exchange Recovery Manager

NETWRIX ACCOUNT LOCKOUT EXAMINER

Quick Connect Express for Active Directory

Dell One Identity Cloud Access Manager How to Configure Microsoft Office 365

Symantec Backup Exec TM 11d for Windows Servers. Quick Installation Guide

Spotlight Management Pack for SCOM

Installation Guide for Pulse on Windows Server 2012

Security Explorer 9.5. User Guide

Symantec Mail Security for Microsoft Exchange

Dell Recovery Manager for Active Directory 8.6. Deployment Guide

VERITAS Backup Exec 9.1 for Windows Servers Quick Installation Guide

Backup Exec 15. Quick Installation Guide

GFI Product Manual. Administrator Guide

Version 3.8. Installation Guide

Dell Spotlight on Active Directory Server Health Wizard Configuration Guide

Installation Guide for Pulse on Windows Server 2008R2

Dell Statistica. Statistica Document Management System (SDMS) Requirements

Digipass Plug-In for IAS. IAS Plug-In IAS. Microsoft's Internet Authentication Service. Installation Guide

GFI Product Manual. Getting Started Guide

Veeam Backup Enterprise Manager. Version 7.0

File Auditor for NAS, Net App Edition

Core Protection for Virtual Machines 1

Spotlight on Active Directory Quick Start Guide

Foglight Managing SQL Server Database Systems Getting Started Guide. for SQL Server

Foglight Cartridge for Active Directory Installation Guide

Xcalibur Global Version 1.2 Installation Guide Document Version 3.0

Preparing Your Server for an MDsuite Installation

System Administration Training Guide. S100 Installation and Site Management

Veritas Cluster Server Database Agent for Microsoft SQL Configuration Guide

System Requirements and Platform Support Guide

New Features and Enhancements

Lepide Software. LepideAuditor for File Server [CONFIGURATION GUIDE] This guide informs How to configure settings for first time usage of the software

Microsoft Dynamics GP SQL Server Reporting Services Guide

VERITAS Backup Exec TM 10.0 for Windows Servers

Password Reset Server Installation Guide Windows 8 / 8.1 Windows Server 2012 / R2

NETWRIX EVENT LOG MANAGER

System Requirements for Microsoft Dynamics NAV 2013 R2

GFI Product Guide. Administrator Guide

Defender 5.7. Remote Access User Guide

Quest SQL Optimizer 6.5. for SQL Server. Installation Guide

Preparing Your Network for an MDsuite Installation

NETWRIX WINDOWS SERVER CHANGE REPORTER

Metalogix SharePoint Backup. Advanced Installation Guide. Publication Date: August 24, 2015

WebSpy Vantage Ultimate 2.2 Web Module Administrators Guide

Symantec Backup Exec 2010 R2. Quick Installation Guide

For Active Directory Installation Guide

Enterprise Vault. For Microsoft Exchange Server. Installing and Configuring Version 5.0

Companion for MS Analysis Server, v4

Exchange Mailbox Protection Whitepaper

Transcription:

Archive Manager 4.8 Planning and Installation Guide for Exchange

Quest Archive Manager Archive Manager Planning and Installation Guide for Exchange Updated - June 2013 (Doc ID 162) Software Version - 4.8 2013 Quest Software, Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser s personal use without the written permission of Quest Software, Inc. If you have any questions regarding your potential use of this material, contact: Quest Software World Headquarters LEGAL Dept 5 Polaris Way Aliso Viejo, CA 92656 USA www.quest.com email: legal@quest.com Refer to our Web site for regional and international office information. TRADEMARKS Quest, Quest Software, and the Quest Software logo are trademarks and registered trademarks of Quest Software, Inc. in the United States of America and other countries. For a complete list of Quest Software s trademarks, please see http://www.quest.com/legal/trademark-information.aspx. Other trademarks and registered trademarks are property of their respective owners. DISCLAIMER The information in this document is provided in connection with Quest products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest products. EXCEPT AS SET FORTH IN QUEST'S TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest does not make any commitment to update the information contained in this document.

ABOUT THIS GUIDE This Planning and Installation Guide for Exchange was developed to help you plan and prepare for the installation of Quest Archive Manager. It is intended for network administrators, consultants, analysts, and any other IT professionals who may participate in the planning or installation of the product. CONTENTS CHAPTER 1 DEPLOYMENT CONSIDERATIONS FOR MICROSOFT EXCHANGE...... 7 DEPLOYMENT MODELS............................ 8 SINGLE-SITE MODEL.......................... 8 MULTI-SITE MODEL.......................... 9 DISTRIBUTED MODEL..........................10 MIXED MODEL..............................11 MICROSOFT EXCHANGE JOURNALING...................12 CHAPTER 2 SYSTEM REQUIREMENTS.............................13 EXCHANGE MESSAGING SYSTEM......................14 SQL SERVER.................................14 ACTIVE DIRECTORY SERVICES.......................15 ARCHIVE MANAGER SERVER OPERATING SYSTEM............16 PREREQUISITES FOR SERVERS RUNNING ARCHIVE MANAGER SERVICES...................................16 ADDITIONAL PREREQUISITES FOR ALL SERVERS RUNNING ARCHIVE MANAGER WEBSITES....................17 ADDITIONAL PREREQUISITES FOR ALL SERVERS RUNNING THE EXCHANGE STORE MANAGER SERVICE.............18 ATTACHMENT STORE TYPES.........................19 CLIENT WORKSTATION............................19 BROWSER VERSIONS.............................21 MOBILE DEVICE BROWSING OF THE ARCHIVE MANAGER WEBSITE..21 ARCHIVE MANAGER RIGHTS AND PERMISSIONS.............22 iii

Quest Archive Manager CHAPTER 3 HARDWARE RECOMMENDATIONS........................25 ARCHIVE MANAGER SERVICES SERVER..................26 ARCHIVE MANAGER SQL DATABASE SERVER..............26 ARCHIVE MANAGER HARDWARE RECOMMENDATIONS..........27 SQL SERVER..............................27 ARCHIVE MANAGER SERVER......................28 DEDICATED IIS SERVER........................29 SIZING THE MICROSOFT SQL DATABASE AND ARCHIVE MANAGER ATTACHMENT STORE.............................30 CHAPTER 4 PRE-INSTALLATION PREPARATIONS......................31 CONFIGURE THE ARCHIVE MANAGER SERVICES SERVER........32 CONFIGURE THE ARCHIVE MANAGER DATABASE SERVER........33 CREATE ACCOUNTS AND GRANT PERMISSIONS..............34 GRANT PERMISSIONS TO THE EXCHANGE ADMIN GROUP.....35 CONFIGURE THE EXCHANGE SERVER...................39 TO CONFIGURE EXCHANGE 2010..................40 TO CONFIGURE EXCHANGE 2007..................41 TO CONFIGURE EXCHANGE 2003..................43 CHAPTER 5 INSTALLING ARCHIVE MANAGER WITH EXCHANGE............45 PERMISSIONS REQUIRED FOR INSTALLATION...............46 INSTALLATION INSTRUCTIONS........................46 EMC CENTERA.............................54 BRIDGEHEAD...............................54 IBM DR550..............................55 NETAPP SNAPLOCK...........................56 CHAPTER 6 REINSTALLING/UPGRADING ARCHIVE MANAGER.............57 UPGRADING ARCHIVE MANAGER......................58 VERIFY THE SUCCESS OF THE UPGRADE..............60 REINSTALLING ARCHIVE MANAGER.....................60 POST INSTALLATION NOTES.........................61 iv

CHAPTER 7 POST-INSTALLATION TASKS...........................63 CONFIGURING ARCHIVE MANAGER.....................64 CONFIGURE THE ACTIVE DIRECTORY CONNECTOR (ADC).......64 SCENARIOS FOR ADC.CONFIG FILE DEPLOYMENT.........64 THE ADC.CONFIG FILE........................65 DEPLOYMENT WITH MULTIPLE ACTIVE DIRECTORY DOMAINS..66 DEPLOYMENT WITH A PARENT/CHILD DOMAIN...........67 DEPLOYMENT WITH AN EXCHANGE RESOURCE FOREST (ONE-WAY TRUST)...........................67 DEPLOYMENT WITH A TRUSTED FOREST..............69 LIMITING USER SCOPE TO SPECIFIC ORGANIZATIONAL UNITS.70 SPECIAL FILTERING REQUIREMENTS.................70 CONFIGURE ADC IMPORT BEHAVIOR................71 CONFIGURE AND DEPLOY THE OFFLINE CLIENT (OPTIONAL)......72 DEPLOYING THE OUTLOOK FORM......................72 DEPLOYING THE OUTLOOK FORM TO PUBLIC FOLDERS USING THE ARCHIVE MANAGER INSTALLER.................72 DEPLOYING THE OUTLOOK FORM TO PUBLIC FOLDERS MANUALLY................................73 DEPLOYING THE OUTLOOK FORM USING THE ARCHIVE MANAGER OUTLOOK COMPONENTS TOOL........73 PREREQUISITES.............................73 INSTALLING THE OUTLOOK ADD-IN USING A GROUP POLICY..74 RELOCATE FTI TEMP LOCATION (IF NECESSARY)............75 ADD MAPI DATA LOADERS FOR EXCHANGE JOURNAL MAILBOXES..75 APPENDIX A ATTACHMENT STORE TYPES...........................77 ATTACHMENT STORE TYPES OVERVIEW..................78 NTFS/WINDOWS FILE SYSTEM...................79 NETAPP SNAPLOCK...........................79 EMC CENTERA.............................81 BRIDGEHEAD HDR...........................82 IBM DR550..............................83 COMMON SCENARIOS FOR EDITING THE CONFIGURATION.......83 USING A NAS BOX...........................83 DELETING ATTACHMENTS FROM A SNAPLOCK VOLUME......84 v

Quest Archive Manager APPENDIX B PROCESS OVERVIEW CHECKLIST........................85 PRE-INSTALLATION CHECKLIST.......................86 INSTALL ARCHIVE MANAGER FOR EXCHANGE...............86 POST-INSTALLATION CHECKLIST......................87 ABOUT QUEST....................................89 ABOUT QUEST SOFTWARE..........................90 QUEST SUPPORT...............................90 SUPPORT LINKS................................91 VISITING OUR ARCHIVE MANAGER ONLINE COMMUNITY........92 OTHER QUEST COMMUNITIES........................92 vi

1 Deployment Considerations for Microsoft Exchange Deployment Models Single-Site Model Multi-Site Model Distributed Model Mixed Model Microsoft Exchange Journaling

Quest Archive Manager Deployment Models Several different deployment options are available for Archive Manager, depending on organization size and type. The following information can be used to determine a basic specification for an Archive Manager solution, although each organization must be assessed for its own unique qualities and needs. When estimating a configuration for a site, it is important to know: The number of sites and the number of users at each site The number of mail servers The bandwidth between each site Single-Site Model The single-site model is suitable for single-site organizations as well as for organizations with high-speed and low-use WAN connections. Sample single-site model of Archive Manager Hardware sizing can be roughly estimated from the number of users. For detailed recommendations, see the Hardware Recommendations chapter of this guide. 8

Deployment Considerations for Microsoft Exchange Sizing is also affected by the Archive Manager message policies applied to Exchange after Archive Manager is implemented. Specifically, hardware requirements will increase if messages are kept on the mail server for only short periods (for example, <15 days), since users will access the Archive Manager system far more extensively than if messages are kept 30 or 60 days. Large organizations and sites with comprehensive disaster recovery (DR) requirements need to consider clustering Microsoft SQL Server and Internet Information Services (IIS) if the archived information is deemed critical to the organization. The information within Archive Manager is a copy of current information and possibly all email information outside of the configured retention policy period; this may affect the requirements. Multi-Site Model The multi-site model can be used in organizations where WAN links are high speed and low utilization and the remote connected sites have 100 or fewer users. Sample multi-site model of Archive Manager To lower the bandwidth requirements even further from the default installation, Archive Manager can be configured to Dataload email messages from the remote sites at preset times of the day. 9

Quest Archive Manager If the remote sites already have email servers, the servers should be set up to journal locally in order to minimize bandwidth usage of the journaling process. In these cases, the Archive Manager Dataloader can be configured to retrieve the journaled messages from those sites overnight, thereby spreading network traffic over 24 hours instead of eight working hours. Archive Manager provides the option of installing the Organizational form for Stubbed messages. By not installing the form for Microsoft Outlook, the bandwidth requirements of Archive Manager are reduced further as email is not retrieved from the Archive Manager database when browsed via Microsoft Outlook; the email is retrieved only when a link in the message is selected. Distributed Model The Archive Manager distributed model is best used when an organization has connected sites with more than 100 users at each, or low bandwidth connections with potentially fewer users. To estimate the requirements of different site configurations, see the Hardware Recommendations chapter of this guide. 10

Deployment Considerations for Microsoft Exchange Sample distributed model configuration of Archive Manager Mixed Model Archive Manager can also be run as a combination of the preceding models. This is useful, for example, when the distributed model is not applicable, as with a satellite site of 50 users with no email server, which does not require a dedicated Archive Manager server. Archive Manager can be considered a "thin client" solution because it uses a Web browser for access. By choosing not to use the installable Microsoft Exchange organizational form, the bandwidth requirements for Archive Manager s "clientless" stubbing of message content can also be reduced considerably over the default installation, making Archive Manager highly effective in low-bandwidth environments. 11

Quest Archive Manager Microsoft Exchange Journaling Microsoft Exchange 2007 includes optional journaling features that can help an organization meet compliance standards, but that are not installed by default. The Pre-Installation Preparations chapter in this Guide suggests that you enable Exchange Journaling, and you can refer to Microsoft s documentation for installation and configuration information. For more information about Microsoft Journaling, refer to this Microsoft article. Archive Manager lets you configure MAPI data loaders to offload messages from Exchange Journal mailboxes into Archive Manager. The installation procedures in this Guide include steps to configure MAPI data loaders for use with Exchange Journal folders, or you can later refer to the Data Loaders chapter of the Archive Manager Administration Guide for the procedure. 12

2 System Requirements Exchange Messaging System SQL Server Active Directory Services Archive Manager Server Operating System Prerequisites for Servers Running Archive Manager Services Attachment Store Types Client Workstation Browser Versions Mobile Device Browsing of the Archive Manager Website Archive Manager Rights and Permissions

Quest Archive Manager Exchange Messaging System Microsoft Exchange, any of: Office 365 On-Premises via Exchange Journaling Version 2013 CU1 Version 2013 Version 2010 SP3 Version 2010 SP2 Version 2010 SP1 Version 2007 SP3 Version 2003 SP2 Note also for the MAPI Journal Data Loader: The data loader service user account must have Receive As and View Information Store Status permissions to the mail store that contains the journal mailbox. SQL Server Enterprise or Standard edition, any of: Microsoft SQL Server, either 32- or 64-bit version 2012 SP1 2012 2008 R2 SP2 2008 R2 SP1 2008 R2 2008 SP3 2008 SP2 2005 SP4 2005 SP3 14

System Requirements Notes: Two Archive Manager databases should not be installed to the same SQL server instance. It is fine to install two Archive Manager databases to the same machine if the machine has two or more SQL Server instances running, and each will host a single Archive Manager database. The Full-Text search feature requires that the SQL bulk insert directory (the FullText share) reside on the same machine as the Archive Manager SQL server. If you are moving from one SQL server to another SQL server, the collation settings of the Aftermail_temp database and the Archive Manager database itself must match what existed when the Archive Manager database was first created. As long as the two settings are maintained as specified for Archive Manager, the SQL server that houses the Archive Manager database may have a different collation setting that may be needed for other purposes on that machine. The supported collation setting is: SQL_Latin1_General_CP1_CI_AS Use of the "sa" account for operational credentials during installation is not supported. Active Directory Services Windows Server 2012 Windows Server 2008 R2 Windows Server 2008 Windows Server 2003 Windows Server 2003 interim Windows Server 2000 native Windows Server 2000 mixed (the default in Windows Server 2003) 15

Quest Archive Manager Archive Manager Server Operating System Either: Microsoft Windows 2012, 64-bit version. Windows Server 2008 R2 SP1 or RTM; 64-bit version Windows Server 2008 SP2; 64-bit version Windows Server 2003 R2 SP2; 32-bit version Windows Server 2003 SP2 or SP1; 32-bit version Please verify that your mail system requirements are supported on the desired operating system. Prerequisites for Servers Running Archive Manager Services Requires: Supported Archive Manager Server Operating System version. Please verify that your mail system requirements are supported on the desired operating system. Microsoft.NET Framework 4.0 and 3.5 SP1. Note: Reliability Update 2 for the.net Framework 4 is required and can be found at: http://support.microsoft.com/kb/2600217 Microsoft Visual C++ 2008 SP1 Runtime (VCRedist 2008 SP1): vcredist_x86.exe. SQL Native Client (sqlncli.msi). SQL Native Client 2005 is required. SQL Native Client 2008 is not supported. You can pre-install.net Framework 4.0 (with Reliability Update 2 for the.net Framework 4) and 3.5 SP1, the SQL 2005 Native Client, and vcredist_x86 (versopm 2008 SP1) from the AutoRun program folder in your Archive Manager zip file. If you are installing Archive Manager to a different system than the one running the installer, then.net 4.0 (with Reliability Update 2 for the.net Framework 4) and 3.5 SP1 must be pre-installed (before running the installer). If running in an SBS (Small Business Server) environment, Archive Manager must reside on an SBS-member server that meets the specifications for an Archive Manager server. 16

System Requirements To enable text-string searches and indexing of file attachments: You must install IFilters for the file types you want to search and index: Microsoft offers a free pack of IFilters for its Office 2007 file types at http://www.microsoft.com/downloads/details.aspx?familyid=60c92 A37-719C-4077-B5C6-CAC34F4227CC&displaylang=en (link current as of this release). This Filter Pack includes IFilters for the following formats:.docx,.docm,.pptx,.pptm,.xlsx,.xlsm,.xlsb,.zip,.one,.vdx,.vsd,.vss,.vst,.vdx,.vsx, and.vtx. IFilters for earlier-version Office file extensions (.doc,.rtf,.xls,.ppt, etc.), and for.txt,.htm and.html files, are installed with Microsoft Windows, and so should already reside on the Archive Manager server. You can verify their installation, and track and manage your IFilters generally, with a third-party IFilter browser; several are available at little or no cost from independent vendors. Adobe bundles a copy of its PDF IFilter version 9 with its free Adobe Reader 9 software, and offers a free IFilter 9 for 64-bit platforms separately. Quest recommends you use Adobe version 9 PDF IFilters, or FoxIt IFilters. Installing Adobe Reader X uninstalls PDF ifilters, which then need to be reinstalled. For additional information, see www.adobe.com. Additional Prerequisites for All Servers Running Archive Manager Websites Microsoft Internet Information Services (IIS) version 8.0, 7.5, 7.0, or 6.0. The Archive Manager installer will detect whether IIS 8.0, 7.5, 7.0, or 6.0 is installed, and will set up classic or integrated application pools accordingly. For IIS 7.0 or later, certain role services are required to be manually selected and installed on the web server in order for the Archive Manager Website to run correctly. These roles include: Common HTTP Features; Static Content ; ASP.net; ASP; Basic Authentication; Windows Authentication; IIS Management Tools and Scripts; and IIS Management Console. Microsoft ASP.NET (component of Windows, any supported Windows version). The API web service endpoint can be configured to use Windows Authentication or Anonymous Authentication. When using Anonymous Authentication, the web service application performs security checks and authenticates the client using Basic Authentication (plain text user password authentication). When using Windows Authentication, IIS handles the authentication and provides the web service application with a confirmation of the authentication attempt. 17

Quest Archive Manager Additional Prerequisites for All Servers Running the Exchange Store Manager Service Supported Exchange version MAPI Support, one (either) of: Microsoft Exchange System Manager 2003 (Exchange 2003). Microsoft Exchange Server MAPI/CDO 1.2.1: o Exchange 2013 CU1 or RTM; Exchange 2010 SP3: 6.5.8320.0 o Exchange 2010 SP2 or SP1; Exchange 2007: 6.5.8244.0 o Exchange 2003: 6.5.8211.0 Note also for the Exchange Store Manager (ESM) and Remote ESM: MAPI CDO and SQL Native Client are required for any ESM installation. The service user account must have Receive As and View Information Store Status permissions to the mail store from which the ESM will export mailboxes. All files named mapisvc.inf on the machine where Archive Manager is installed must have the FullAccess privilege set for the Archive Manager service users group. For the Remote ESM, the user that the Remote ESM is running as must have the "Log on as a service" right. MAPI Journal Data Loader: The data loader service user account must have Receive As and View Information Store Status permissions to the mail store that contains the journal mailbox. Additional Notes: In a parent/child domain configuration, if you are installing Archive Manager in the child domain, you must create two accounts: an Exchange Store Manager account in the child domain for the Archive Manager installation, and another Exchange Store Manager account in the parent domain. 18

System Requirements Attachment Store Types Some attachment store types are deprecated in Archive Manager for new installations. Existing customers on deprecated file storage types are fully supported and will continue to be supported until a migration plan is in place and a migration tool is available to move to a new storage type. EXTERNAL STORAGE TYPE File System NetApp SnapLock7.2.4 EMC Centera 4.2.1, 4.2, 4.1, 4.0, 3.1.4, or EMC Atmos 2.0 BridgeHead HT FileStore with HDR 2.2-20, Build 23007 IBM DR-550 version 5.4.1 (Version 5, Release 4, Level 1) ARCHIVE MANAGER VERSION FOR DEPRECATION Supported. Supported. Supported. Deprecated. Only upgrades supported. Deprecated. Only upgrades supported. Performance Tip: A full or nearly full attachment store can dramatically slow loading of the Archive Manager website due to disk-read bottlenecks. Quest recommends a minimum buffer of 300MB free space on all attachment store volumes to preempt such performance issues. Client Workstation Stripped message reconstruction using the Outlook Form requires the following: 19 Microsoft Outlook 2013 (RTM), 64-bit or 32-bit, running on Windows 8, 7, or Vista, all 64-bit or 32-bit, or Microsoft Outlook 2010 (RTM), 64-bit or 32-bit, running on Windows 8, 7, or Vista, all 64-bit or 32-bit, or Microsoft Outlook 2007 (SP3, SP2, or SP1), 32-bit, running on Windows 8, 7, Vista (SP2, SP1, or RTM) or Windows XP (SP3 or SP2), or Microsoft Outlook 2003 32-bit, running on Windows XP (SP3 or SP2) The Offline Client requires the following: Microsoft Outlook 2013 (RTM), 64-bit or 32-bit, running on Windows 8, 7, or Vista, all 64-bit or 32-bit, or

Quest Archive Manager Microsoft Outlook 2010 (RTM), 64-bit or 32-bit, running on Windows 8, 7, or Vista, all 64-bit or 32-bit, or Microsoft Outlook 2007 (SP3, SP2, or SP1), 32-bit, running on Windows 8, 7, Vista (SP2, SP1, or RTM) or Windows XP (SP3 or SP2) and Windows Installer 3.1 or later (only for installation). Microsoft.NET Framework Version 4.0 and 3.5 SP1. Note: Reliability Update 2 for the.net Framework 4 is required and can be found at: http://support.microsoft.com/kb/2600217 Microsoft SQL Server Compact 4.0 Visual Studio 2010 Tools for Office Runtime MSXML 6.0 SP1 The PST Import Wizard requires the following: Microsoft Outlook 2013 (RTM), 64-bit or 32-bit, running on Windows 8, 7, or Vista, 32-bit, or Microsoft Outlook 2010 (RTM), 32-bit, running on Windows 8, 7, or Vista, all 64-bit or 32-bit, or Microsoft Outlook 2007 (SP3, SP2, or SP1), or 2003 (SP3), 32-bit, running on Windows 8, 7, Vista (SP2, SP1, or RTM) or Windows XP (SP3 or SP2) and Windows Installer 3.1 or later (only for installation). Microsoft.NET Framework Version 4.0 and 3.5 SP1. Note: Reliability Update 2 for the.net Framework 4 is required and can be found at: http://support.microsoft.com/kb/2600217 Microsoft Visual C++ 2008 SP1 Runtime (VCRedist 2008 SP1) The Search Exporter requires the following: Microsoft Outlook 2013 (RTM), 32-bit, running on Windows 8, 7, or Vista, all 64-bit or 32-bit, or Microsoft Outlook 2010 (RTM), 32-bit, running on Windows 8, 7, or Vista, all 64-bit or 32-bit, or Microsoft Outlook 2007 (SP3, SP2, or SP1), or 2003 (SP3), 32-bit only, running on Windows 8, 7, Vista (SP2, SP1, or RTM) or Windows XP (SP3 or SP2) and Windows Installer 3.1 or later (only for installation). Microsoft.NET Framework Version 4.0 and 3.5 SP1. 20

System Requirements Browser Versions Any of: Microsoft Internet Explorer 10, 9, 8, or 7. When using enhanced security on any server-based operating system, the Archive Manager Website must be added to the list of trusted sites to work correctly. Microsoft Internet Explorer 6, if installed with the latest version of Google Chrome Frame. For Internet Explorer installed with Google Chrome Frame, make sure the Enable third-party browser extensions setting is checked in Tools->Internet Options-> Advanced->Settings->Browsing. After applying this setting, restart Internet Explorer. Firefox 19, 20, 21 or later running on Windows or Macintosh. Chrome 24, 25, 26 or later running on Windows or Macintosh. Safari 5.x, 6.x or later running on Macintosh. Mobile Device Browsing of the Archive Manager Website All devices self-identified as mobile will be automatically redirected to the mobile version of the Archive Manager website. The features are limited and optimized for browsing. Required: Microsoft Windows Mobile 5.0. BlackBerry Enterprise Server (BES) 5.0 (32-bit version), or 4.1.X. BES 5.0, 4.1.4a, and 4.1.6 have been explicitly tested. BES 5.0 has been tested on a 64-bit OS with 32-bit software. A 32-bit OS is also supported. The server OS must be 32-bit for BES 4.1.X. 21

Quest Archive Manager Archive Manager Rights and Permissions 22 Administrator Account: The account you are logged in with when you run the Archive Manager Install program. Should not be confused with the Installation Account (although they may be the same). The user who runs the installer must be an administrator over all the computers involved, as well as on the SQL Server and the Exchange Server. The account you specify during the installation must have the same permissions. Installation Account: Specified when running the installer. Used to run the "Remote Installer" service on machines nominated during the install. Account is used by installer to deploy a "Remote Installer" service to each machine to install Archive Manager components. This user must also be a domain user and not a local computer user. As such, it should have local admin access on the Application and Web Server machines. This user must also have RunAs Service rights; all remote machines must have Administrator shares turned on. This account is typically a Domain Administrator. Service Account (default account name is ArchiveMgr_Service): Specified after the Database Install/Upgrade in the installer. Used by the Directory Connector, Alert Service, Full-Text Index, Full-Text Search and Message Retention Services. If no Journal dataloader is created at install time, then this account will be used for the Data Load Service too. Account is granted full access to the Archive Manager and AfterMail_TEMP databases by the installer. Requires read access to AD, and to the Exchange Organization so it can determine Storage Group information. Must be in the Users group on the local machine, and a member of the local IIS_WPG group on the Web Servers. This is typically done by the installer. Is a member of ArchiveManagerServiceUsers group. You may want to add the service account to the Domain Administrators group. This will ensure that the Active Directory Connector has access to deleted user accounts for the purpose of disabling the accounts in Archive Manager. Or, Microsoft provides a program that grants Administrator rights on a per user basis. The utility is available at http://support.microsoft.com/kb/892806. Journal Account (default account name is ArchiveMgr_Journal): Specified after the Database Install/Upgrade in the installer. Used by the Dataloader. This is configured for use by the DataLoader only if a Journal DataLoader is configured. If Journaling is not present, then the ArchiveMgr_Service user is used.

System Requirements Account requires "Receive-As" rights to any account nominated as a Journal Mailbox Account. This user must also be an Exchange View-Only Administrator. Should be a Domain User; does not need to be an Administrator. Is a member of ArchiveManagerServiceUsers group. ESM Account (default account name is ArchiveMgr_ESM): Specified after the Database Install/Upgrade in the installer. Used by the Exchange Store Manager Service. Account needs access to all mailboxes; however this permission is granted to the group Archive Manager Exchange Admins, rather than to the account itself. Should be a domain user; does not need to be an Administrator. Is a member of ArchiveManagerServiceUsers group. ArchiveManagerServiceUsers Group: A Domain Group containing the Service, Journal and ESM accounts. Group is used by installer to apply permissions to file-system locations used by Archive Manager. Archive Manager Exchange Admins Group: A Domain Group containing the ESM Account. Note that this group is not created by the Quest installer, so must be created manually. Quest recommends this account be created before Archive Manager is installed. Group must contain the ArchiveMgr_Service and ArchiveMgr_ESM users. If journaling is enabled on the Exchange Server and a MAPI DataLoader is required, then the ArchiveMgr_Journal user must also be added to this group. This group must be granted Exchange "Receive-As" permission on all mailboxes. Should also be a member of the Exchange View-Only Administrators group. If a new Exchange mailbox store is added after Archive Manager is installed, the permissions for this group must be set again. Otherwise, an error may occur when the ESM processes mailboxes in the new mailbox store. 23

Quest Archive Manager 24

3 Hardware Recommendations Archive Manager Services Server Archive Manager SQL Database Server Archive Manager Hardware Recommendations Sizing the Microsoft SQL Database and Archive Manager Attachment Store

Quest Archive Manager Archive Manager Services Server The services listed below are installed on the Archive Manager Services Server. These services can also be spread among other server hardware. Active Directory Connector (ADC): The ADC synchronizes Archive Manager with users and security maintained in your existing Active Directory store. Exchange Store Manager (ESM): The ESM synchronizes Archive Manager with the current state of the enterprise s Exchange mail server. Data Loader: The Data Loader populates Archive Manager with email messages from the enterprise mail server and/or other data sources. Search Service: The Search Service consists of two separate services: the Full Text Index Service (FTI) and the Full Text Search Service (FTS). The Full Text Index Service indexes the full text of messages within the Archive Manager store, storing security context as well, for high-speed full-text searches. The Full Text Search Service performs full-text searches against the Archive Manager Full Text Index, providing results to the Archive Manager core search engine. Message Retention Policy Service: The Retention Policy Service deletes email messages from the archive according to the retention rules and policies defined in the Retention Policy Editor. Alert Service: The Alert Service runs SQL queries on the Archive Manager database, and WMI queries on your server and sends Alert emails. Website: The Archive Manager website allows you to search your archive and administer various components of Archive Manager. The installer can place the Archive Manager website on a different server than the services server. Archive Manager SQL Database Server The Archive Manager SQL database server performs the following function listed below. The Archive Manager SQL database server hosts your the Archive Manager database, which contains all message and user data, except for attachments. 26

Hardware Recommendations Archive Manager Hardware Recommendations This following section shows the estimated hardware recommendations for Archive Manager Services server and SQL Database server. These are minimum recommendations and are subject to change based upon your messaging environment. For operating systems and other software requirements, see the System Requirements earlier in this Guide. SQL Server Memory*: The total amount of required operating memory may be lower during initial archiving. As more data is archived and indexed, the memory footprint will increase. AM Database Data**: Database read/write speeds are key to Archive Manager performance. The faster the data can be read from the database, the faster a request is returned to the user. 27

Quest Archive Manager Archive Manager Server CPU (Total Cores)*: The total amount of required CPU cores increases as the number of active threads increases. The store management service will export a single mailbox in a single thread. More active threads allow a faster ingestion rate. Full Text Index also has the ability to run multiple processing threads. The administrator needs to find the appropriate balance. Memory**: The total amount of required operating memory may be lower during initial archiving. As more data is archived and indexed, the memory footprint will increase. Index Disk(s)***: The performance of the index disk will greatly impact the general performance of the product. For best results, use dedicated attached storage. New indexing technology allows the ability to span the index across multiple disk for both performance and fault tolerance. Attachment Disk****: The performance of the attachment disk has less impact on the general performance of the product, but for the fastest retrivals, a faster disk is recommended. When running the 64-bit Archive Manager Full Text Search Service, a minimum of 8 GB RAM is recommended. The total amount of memory recommended can be calculated by determining the disk space used by the indexes (messages + attachments) in GB, dividing that number by 100, and adding it to the 8 GB RAM minimum. For example, if the total space used for your indexes is 400 GB, then you should have (8 + 400/100) or 12 GB of RAM installed on your Archive Manager system. 28

Hardware Recommendations Dedicated IIS Server Dedicated IIS Server*: The IIS Server can host multiple instances of the Archive Manager website. The website also supports Network Load Balancing (NLB) with IP-based affinity. Multiple web servers can be configured to host muliple Archive Manager website instances. CPU (Total Cores)**: Total cores required will vary based on message policies. If stubbing is used, consider your environment moderate access or heavy access and plan accordingly. OS Disk***: The OS disk will store attachments temporarly while users are downloading them. Disk speeds are typically not a bottleneck. 29

Quest Archive Manager Sizing the Microsoft SQL Database and Archive Manager Attachment Store Archive Manager s storage recommendations must be considered when planning storage, whether the data is to be stored on the same hardware as the software or stored on a separate high-speed disk. Specifically, there needs be either capacity for growth of archive data when Archive Manager is installed or the ability to increase capacity as the archive grows, or both. Archive Manager can easily be backed up and restored to different hardware to increase performance or capacity; even the stubbed messages within Microsoft Exchange are seamlessly re-associated with the Archive Manager archive. The Archive Manager database must always be stored on high performance disks, such as a local SCSI RAID 5 disk (with as many physical spindles as possible), or a fast high-speed attached disk. The Archive Manager attachment store may be stored on a slower disk to reduce cost, as archived attachment retrieval is not as speed-sensitive as a database. NUMBER OF USERS NUMBER OF MESSAGES (MILLIONS) SQL SERVER DATABASE (GB) FULL TEXT INDEX ATTACHMENT STORE (GB) 100 1 4 1.6 40 1,000 10 40 16 400 5,000 50 200 80 2,000 10,000 100 400 160 4,000 Important: For best performance, Quest recommends that the full-text index files not reside on the same physical disk as other Archive Manager data repositories neither the SQL database nor an attachment store. 30

4 Pre-Installation Preparations Configure the Archive Manager Services Server Configure the Archive Manager Database Server Configure The Exchange Server

Quest Archive Manager Before installing Archive Manager, complete the following pre-installation steps: Install the required prerequisites and configure the Archive Manager Services server Set up and configure the Archive Manager Database server. Create the accounts required for Archive Manager and grant permissions. Configure your Exchange server for journaling, if necessary. You can install Archive Manager Services and the Archive Manager Database on the same computer Each of these steps is explained in detail in the sections below. Configure the Archive Manager Services Server Complete the following steps to ensure that the Archive Manager Services server is properly installed and configured. See the System Requirements chapter for required versions of the components cited below. STEP DESCRIPTION 1. Update the Server Install the latest supported service pack levels for use with Archive Manager. 2. Configure Antivirus Software Configure your antivirus software as follows: Disable real-time scanning. Prevent your antivirus software from scanning the Data Load directory and the Microsoft SQL Server database files. Remove Antivirus scanning from the %temp% directory. 32

Pre-Installation Preparations STEP DESCRIPTION 3. Configure Your Firewall Configure your firewall as follows: 1. If you are installing Archive Manager from a remote computer, open port 8686 for the Installation Wizard. The port should be opened during the installation session only. 2. If you are planning to install web services and the Full-Text search service on separate computers, open port 8687 for the Archive Manager search service. Note that this is not the common configuration, but it is available if needed. If an application-level firewall is installed, the Archive Manager Full-Text Search Service must be allowed to listen on port 8687. 4. Install IFilters (optional): Install third-party IFilters to enable searching attachment file formats. Searching and indexing of all attachment file types is enabled by the installation of particular IFilters for particular file types. See the System Requirements chapter of this guide for more information about obtaining the IFilters you need. 5. Create a DNS Entry (optional): Create a DNS entry for "ArchiveManager" that points to the Archive Manager web server. If necessary, refer to Microsoft s KnowledgeBase article #814591 (link current as of this document release) for more information. Configure the Archive Manager Database Server STEP DESCRIPTION 1. Install Microsoft SQL Server. Ensure the folder containing the database files is not compressed. 2. Configure the SQL Agent Service Make sure the SQL Agent service is started and that its startup method is set to Automatic. 33

Quest Archive Manager Create Accounts and Grant Permissions Archive Manager requires the creation of several accounts and one group in Active Directory Users and Computers: When creating the accounts, remember to clear the User must change password at next logon checkbox and mark Password never expires. ACCOUNT OR GROUP Exchange Storage Manager account (ArchiveMgr_ESM) Archive Manager Service account (ArchiveMgr_Service) Journaling account (ArchiveMgr_Journal) Global security group (ArchiveManagerServiceUsers) Archive Manager Exchange Admins Group PURPOSE This account will be used to run the Exchange Store Manager Service. If you have a parent/child domain setup and are installing Archive Manager in the child domain, you need to create two accounts. An Exchange Store Manager account must be created in the child domain for the Archive Manager installation, and another Exchange Store Manager account must be created in the parent domain. Remember to make the account mailbox-enabled. This account will be used to run other Archive Manager services, the Web site, and any other processes that do not require specific access to Exchange. This account will be used to access the journal mailbox. Remember to make the account mailbox-enabled. This group will include the Exchange Storage Manager account and the Journaling account. A Domain Group containing the ESM Account. Note that this group is not created by the Quest installer, so must be created manually. This account should be created before Archive Manager is installed. Group must contain the ArchiveMgr_Service and Archive- Mgr_ESM users. If journaling is enabled on the Exchange Server and a MAPI DataLoader is required, then the ArchiveMgr_Journal user must also be added to this group. This group must be granted Exchange "Receive-As" permission on all mailboxes. Should also be a member of the Exchange View-Only Adminstrators group. 34

Pre-Installation Preparations Grant Permissions to the Exchange Admin Group Microsoft Exchange security needs to be configured in order to run the Archive Manager Exchange Store Manager Service and to export email from the current Exchange store into Archive Manager. We recommend that you create the Archive Manager Exchange Admin group and grant permissions to the group; however, you can instead just grant the permissions to a user. The advantage to adding the permissions to a group is that you don t have to modify Exchange if you want to change the user; you can just add a user to or remove a user from the group. Permissions can be granted at various levels within Exchange: at a site level, across multiple servers, on an individual server, or for a single mailbox. To grant permissions in Exchange 2010 1. Add <your Archive Manager user or group> to the "View-Only Organization Management" role group. 2. Run this PowerShell command: get-mailboxdatabase add-adpermission -extendedright receive-as -user <your Archive Manager user or group>. These permission changes may take quite some time to propagate. To speed the process, it may be worth restarting the Exchange Information Store service or rebooting the Exchange server. Confirming Permission Configuration To test your changes, go to a PC that has Microsoft Outlook installed and sign in as the user or a user in the group to which you granted permission. Try to add the new mailboxes that have been created to that user's profile. If the user is able to access those mailboxes, the security has been configured successfully. To grant permissions in Exchange 2007 1. Add <your Archive Manager user or group> to the "Exchange View Only Administrators" group. 2. Run this PowerShell command: get-mailboxdatabase add-adpermission -extendedright receive-as -user <your Archive Manager user or group>. These permission changes may take quite some time to propagate. To speed the process, it may be worth restarting the Exchange Information Store service or rebooting the Exchange server. 35

Quest Archive Manager Confirming Permission Configuration To test your changes, go to a PC that has Microsoft Outlook installed and sign in as the user or a user in the group to which you granted permission. Try to add the new mailboxes that have been created to that user's profile. If the user is able to access those mailboxes, the security has been configured successfully. To grant permissions in Exchange 2003 1. In Exchange System Manager, right-click the desired administrative group and select Properties from the shortcut menu. If administrative groups are not displayed: 1. Right-click your Exchange organization node and select Properties from the shortcut menu. 2. In the organization Properties dialog, select the Display administrative groups check box. Click OK. 2. In the admin group Properties dialog, go to the Security tab. If the tab is not displayed, follow these steps: a) Close the administrative group s Properties dialog and then close Exchange System Manager. b) Start the Registry Editor (regedit). c) Navigate to the following key: HKEY_CURRENT_USER\Software\Microsoft\Exchange\ExAdmin d) On the Edit menu, click Add Value, and then add the following registry value: Value Name: ShowSecurityPage Data Type: REG_DWORD Value: 1 e) Close the Registry Editor. f) Repeat steps 1 and 2. 3. On the Security tab, select a group from the list or add a new one. 4. Make sure that all permissions are allowed for the group account, including Receive As. 5. Make sure that no permissions are denied for the group. 6. Click OK. Testing the Permissions: To test the changes you have made, go to a computer with Microsoft Outlook installed and sign in either as the user to which you granted permissions or as a user in the group to which you granted permissions. Try adding the new mailboxes that have been created to that user's profile. If the user is able to access those mailboxes, the permissions have been configured correctly. 36

Pre-Installation Preparations Grant Permissions to the Archive Manager Service Account This section explains how to grant the required permissions to the Archive Manager Service account. Granting Permissions in a Windows 2003 Domain 1. Run Active Directory Users and Computers. 2. Right-click the root Active Directory domain and select Delegate Control from the shortcut menu. 3. On the Welcome screen, click Next. 4. On the Users or Groups screen, click the Add button and specify the ArchiveMgr_Service account. Click OK and then Next. 5. On the Tasks to Delegate screen, select the Read all user information check box and click Next. If the Read all user information task is not listed, it means that the account already has all required permissions, and you do not need to take any further actions. Click Cancel to exit. 6. Click Next and then Finish to apply your changes and exit the wizard. Grant Permissions in a Windows 2000 Domain To ensure that the Archive Manager Service user has Read access to Active Directory: 1. Run Active Directory Users and Computers. 2. Right-click the root Active Directory domain and select Delegate Control from the shortcut menu. 3. On the Welcome screen, click Next. 4. On the Users or Groups screen, click the Add button and specify the ArchiveMgr_Service account. Click OK and then Next. 5. On the Tasks to Delegate screen, select the Create a Custom Task to Delegate option, and click Next. 6. On the Active Directory Object Type screen, select the This folder, existing objects in this folder, and creation of new objects in this folder option, and click Next. 7. On the Permissions screen, select the General and Property-specific check boxes. 37

Quest Archive Manager 8. Select the Read checkbox from the Permissions list. 9. Click Next and then Finish to apply your changes and exit the wizard. For the AD Connector to pick up the storage groups and mailstores, the "view-only" (or greater) controls must be delegated to the service user on the relevant administrative group in Exchange System Manager (required for Exchange 2003). For Exchange 2003, complete the following steps: 1. Run Exchange System Manager. 2. Right-click the Exchange Organization name and select Delegate Control from the shortcut menu. 3. On the Welcome screen on the Exchange Administration Delegation of Control Wizard click Next. 4. On the Users or Groups screen, click the Add button. 5. On the Delegate Control screen click Browse and specify the ArchiveMgr_Service account. 38

Pre-Installation Preparations 6. Select Exchange View Only Administrator (or higher) role from the Role drop-down list and click OK. 7. Click Next and then Finish to apply your changes and exit the wizard. Configure The Exchange Server Journaling is not required for store management. If you intend to install Archive Manager with journaling, to capture messages to meet a legal standard of compliance, you can enable envelope journaling with Archive Manager. In that case, you must first turn on envelope journaling and then enable journaling for each mailbox store you want to journal. Instructions to configure an Exchange 2007 or 2003 server follow the Exchange 2010 instructions. 39

Quest Archive Manager To Configure Exchange 2010 1. Open the Exchange Management Shell. 2. Add your Archive Manager Service user account (ArchiveMgr_Service) to the "View-Only Organization Management" security role. Sample syntax: >Add-RoleGroupMember "View-Only Organization Management" -Member <youruseraccount> Create a Journal Mailbox in Exchange 2010 1. Create a new mailbox on the Exchange Server for Archive Manager. For example, name the mailbox ArchiveMgr_Journal. 2. Create a recipient object in the Microsoft Exchange Management Console. The recipient should be an Exchange 2010 mailbox set up specifically for journaling. To Implement Journaling Rules for Exchange 2010 1. Open the Exchange Management Console to begin setting up journaling rules. 2. Under the Organization Configuration node, select Hub Transport. 3. In the Hub Transport page, select the Journal Rules tab. 4. In the Actions pane, select New Journal Rule. 5. In the Rule name box, enter a name for the journal rule you are about to create. 6. In the Send Journal reports to email address box, enter the name of the mailbox you created for journaling on the Exchange Server for Archive Manager. This refers to the ArchiveMgr_Journal mailbox created in the Create a Journal Mailbox section. 7. In the Scope field, select Global all messages. 8. Leave the Journal messages for recipient checkbox unselected. 9. Select the Enable Rule checkbox to activate this journaling rule for the Exchange Server. 10. Click New to save your changes. 11. Click Finish to exit the New Journal Rule wizard. 40

Pre-Installation Preparations To Configure the Hub Transport for Exchange 2010 To allow the Archive Manager Website to send email using SMTP through Exchange 2007, you must configure the Hub Transport Receive Connector to accept anonymous connections. To configure the Hub Transport, use the Exchange Management Console (EMC): 1. Select the Server Configuration Hub Transport node. 2. Double-click the default connector for the Exchange server that you will use as your SMTP server for the Archive Manager Website. 3. Click on the Permission Groups tab. 4. Click the Anonymous users checkbox. 5. Click Apply. To Configure Exchange 2007 1. Open the Exchange Management Console. 2. Right-click the Organization Configuration node. 3. Select Add Exchange Administrator. 4. On the Add Exchange Administrator screen, click the Browse button that is next to the Select the user or group to add as an Exchange administrator text field. 5. On the Select User or Group to Delegate screen, select the ArchiveMgr_Service user. 6. Click OK. 7. In the Select the role and scope of this Exchange administrator option list, select the Exchange View-Only Administrator role option. 8. If you have multiple servers, add all servers that Archive Manager will archive to the Select the server(s) to which this role has access list box. 9. Click Add. 10. Click Finished. Create a Journal Mailbox in Exchange 2007 1. Create a new mailbox on the Exchange Server for Archive Manager. For example, name the mailbox ArchiveMgr_Journal. 2. Create a recipient object in the Microsoft Exchange Management Console. 41

Quest Archive Manager The recipient should be an Exchange 2007 mailbox set up specifically for journaling. To Implement Journaling Rules for Exchange 2007 1. Open the Exchange Management Console to begin setting up journaling rules. 2. Under the Organization Configuration node, select Hub Transport. 3. In the Hub Transport page, select the Journaling tab. 4. In the Actions pane, select New Journal Rule. 5. In the Rule name box, enter a name for the journal rule you are about to create. 6. In the Send Journal reports to email address box, enter the name of the mailbox you created for journaling on the Exchange Server for Archive Manager. This refers to the ArchiveMgr_Journal mailbox created in the Create a Journal Mailbox section. 7. In the Scope field, select Global all messages. 8. Leave the Journal messages for recipient checkbox unselected. 9. Select the Enable Rule checkbox to activate this journaling rule for the Exchange Server. 10. Click New to save your changes. 11. Click Finish to exit the New Journal Rule wizard. To Configure the Hub Transport for Exchange 2007 To allow the Archive Manager Website to send email using SMTP through Exchange 2007, you must configure the Hub Transport Receive Connector to accept anonymous connections. To configure the Hub Transport, use the Exchange Management Console (EMC): 1. Select the Server Configuration Hub Transport node. 2. Double-click the default connector for the Exchange server that you will use as your SMTP server for the Archive Manager Website. 3. Click on the Permission Groups tab. 4. Click the Anonymous users checkbox. 5. Click Apply. 42

Pre-Installation Preparations To Configure Exchange 2003 1. Turn on Envelope Journaling: Use the Email Journaling Advanced Configuration tool, exejcfg.exe. You can run the tool from any server with access to Active Directory, but we recommend you run it from the domain controller. You can download the tool from the Microsoft Web site. For instructions on downloading the tool, please follow this link: http://support.microsoft.com/?id=834634 Once you have downloaded the archive and extracted the exejcfg.exe tool: a) Open a command prompt. b) Go to the directory that contains exejcfg.exe. c) Run the command exejcfg -e to turn on envelope journaling. 2. Enable journaling for a mailbox store. Repeat these steps a, b and c for each mailbox store for which you want to enable journaling: a) In Exchange System Manager, right-click the mailbox store, and then click Properties. b) On the General tab, select the Archive all messages sent or received by mailboxes on this store checkbox, and then click Browse to select a mailbox-enabled account (ArchiveMgr_Journal) for the archived messages. c) Click OK. To learn more about journaling, please refer to the Microsoft document Journaling with Exchange Server 2003, available at http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/jour naling.mspx. If you want to learn about alternative ways of enabling the feature, please refer to article 843105 in the Microsoft Knowledge Base. Since Archive Manager archives messages from the Inbox folder of journaling mailboxes, avoid configuring rules and Mailbox Management for the journaling mailboxes. 43

Quest Archive Manager 44

5 Installing Archive Manager with Exchange Permissions Required for Installation Installation Instructions

Quest Archive Manager Permissions Required for Installation The user who runs the installer must be an administrator over all the computers involved, as well as on the SQL Server and the Exchange Server. The account you specify during the installation must have the same permissions. For the installation, you can simply use an account that is a member of the Domain Admins group. Installation Instructions To Access the Installer for Archive Manager 1. From the Archive Manager installation CD, run the AutoRun program. 2. Click the Install tab. 3. Under Product, click the Archive Manager link to run setup. The installer can be started automatically from setup, or by going to...program Files\Quest Software\Archive Manager\Installer after running setup. In addition to providing a link to the Archive Manager installer, the AutoRun program provides other useful information about Archive Manger including: a link to distribute the Outlook Form, prerequisites and redistributables, integrations, documentation, information on the Archive Manger Online Community, and contact information. Please refer to the System Requirements chapter of this guide prior to installing Archive Manager. To Install Archive Manager 46 1. On the Welcome screen, click Next. 2. On the Archive Manager End User License screen, read the license agreement and then select the I have read and agree to the license terms checkbox. 3. Click Next. 4. On the License Key Details screen, specify the name of your company and the license key (both are case-sensitive). 5. Click Next.

Installing Archive Manager with Exchange 47 6. On the Archive Manager Installation Targets screen, select Install (or re-install) an Archive Manager instance. If you are upgrading Archive Manager to the current version, select the Upgrade option instead. Then complete the upgrade procedure described in the chapter Reinstalling/Upgrading Archive Manager. If uninstalling, select the Uninstall option. Note that uninstalling removes Archive Manager services and the website. It does NOT remove the database or attachment store. 7. In the Target Email Server drop-down list, select your email server type from the list. 8. Click Next. 9. On the Administrator Credentials screen, specify credentials for the account that will be used by the installation wizard. Note that this account must be a domain administrator, and must be specified in the format DOMAIN\Username. 10. Click Next. 11. On the SQL Server Database Information screen, specify the following: a) The name of the SQL Server you plan to use. b) In the Installation Credentials area, select an authentication mode and specify credentials, if required. The authentication mode you specify will be used to install the Archive Manager database. c) In the Operational Credentials box, select an authentication mode and specify credentials, if required. The authentication mode you specify will be used to manage the Archive Manager database. Windows Integrated Authentication is recommended. Note that Archive Manager does not support the use of the "sa" account if SQL authentication is used. 12. Click Next. 13. On the Database Installation or Upgrade screen, select either to install a new Archive Manager database and specify a database name (the default name is ArchiveManager), or to upgrade an existing Archive Manager database and select the database from the list. 14. Click Next. 15. The Database Installation Progress screen is displayed. When the database installation has completed, the following options are available: If warnings or errors have been encountered, a Summary button is displayed. Click the Summary button to view the warnings and/or errors.

Quest Archive Manager Click the View Log button to view the Installation log. If you encounter errors and then correct them, you can perform the installation again without exiting the installer by clicking the Previous button. This takes you back to the Summary screen. Click Next to run the installation again. 16. Click Next. 17. On the Software Improvement Program screen, select the country in which you are installing Archive Manager. Quest Software Improvement Program provides teams with generalized metrics on how customers use the product. These metrics, along with direct customer feedback through support and communities help us ensure that we are able to meet your current and future needs. For additional information on participating in the Software Improvement Program, click the Help button on the screen. Based upon the country in which you reside, you will either be automatically enrolled, or asked to select Yes or No to participating the program. If you are automatically enrolled and do not wish to participate, you can opt out by going to the Archive Manager Configuration Editor and changing the value of the Phone Home Enabled setting to False. 18. Click Next. 19. On the Service User Credentials screen, specify the following: a) Credentials for the Archive Manager Service account (ArchiveMgr_Service) b) Credentials for the journaling account (ArchiveMgr_Journal) c) Credentials for the Exchange Storage Manager account (ArchiveMgr_ESM) d) Name of the Archive Manager service group (ArchiveManagerServiceUsers) 20. Select the Managed password checkbox to let Archive Manager manage passwords for the accounts, if desired. It is recommended that you leave this box unchecked. 21. Click Next. 22. On the Archive Manager Service Setup screen, specify the following information: a) Archive Manager Services Server name: The computer that will host Archive Manager services. b) Base Data Directory: The directory for the Quest Archive Manager data. This directory will contain archived data only, not including the full-text index or the attachment store. 48

Installing Archive Manager with Exchange 49 c) Start services after installation: If marked, Archive Manager services will be started immediately following installation. If the Installer starts Archive Manager services immediately after installation, before you have had a chance to define a default policy or user policy, then all mail will be exported as soon as Archive Manager launches. If you do not want to export all mail, be sure to unmark this checkbox. d) The Reset directory permissions checkbox determines whether Archive Manager will keep or overwrite any existing folder permissions. Note: Unmark this checkbox if you want to prevent Archive Manager from overwriting existing folder permissions e.g., in an upgrade or reinstallation. e) The Install Outlook form into Exchange checkbox is checked by default. Uncheck this box if you do not want Archive Manager to generate shortcut messages. If you wish to install the Outlook form into Exchange, available forms include the following: English - Outlook icons English - Archive Manager icons German - Outlook iconsgerman - Archive Manager icons Italian - Outlook iconsitalian - Archive Manager icons The default form is English with Outlook icons. To select one of the other available forms, click the Browse button to open the Find Outlook Form drop-down list. The Outlook form can be installed automatically if public folders are enabled and you have selected the Install Outlook form into Exchange checkbox during Archive Manager installation. If public folders are not enabled, the Outlook Form can be installed via the Archive Manager Outlook Components tool. See the Deploying the Outlook Form Using the Archive Manager Outlook Components Tool section. If the form is not installed, a user can easily access an archived message via a shortcut displayed in the body text of the stub. The Outlook Form for Exchange 2013 cannot be installed through the Achive Manager Installer. It must be installed by group policy using the Archive Manager Outlook Components Tool, or manually using the Exchange Utility. 23. Click Next. 24. On the Archive Manager Mail Server Setup screen, specify the name of your SMTP server. If you want Archive Manager to use SMTP authentication, provide the SMTP login and password. 25. Click Next. 26. On the Web Site Setup screen, specify the following:

Quest Archive Manager Server Name: Server on which to install the Archive Manager Web Site. Quest recommends installing the Archive Manager Website and SQL Server Reporting Services for SQL 2008 (optional) on separate machines. Alternately, if the same machine is used, the Virtual Directory name and host header values for the SQL Server Reporting Services should be changed to non-conflicting values. This is typically configured using the Reporting Services Configuration Manager. (SQL 2008 Reporting Services are not required by Archive Manager or SQL Server.) Web Site Name: Name for the Archive Manager site. Host Header: Name of the server without the protocol prefix (without "http://" or "https://"). IP address (optional entry): IP address of the web server. Port: Port number (default=80) for the Archive Manager web server. Local Administrator Password: Password for the Archive Manager administrator. You cannot leave the password blank. Note that the Archive Administrator s login name is Admin, and this cannot be changed at the time of installation. 27. Click Next. 28. On the Attachment Store Type screen, select a type for the attachment storage. Details on each storage type can be found in Appendix A, Attachment Store Types. The following types are available: TYPE FILE SYSTEM EMC Centera BridgeHead HDR IBM DR550 NetApp SnapLock DESCRIPTION The most commonly used storage type. If you are unsure, it is recommended that you select this type. Content-addressed storage solution from EMC. HyperTape Data Repository from BridgeHead. IBM System Storage DR550 SnapLock provides fast WORM (Write Once Read Many) storage on magnetic disk. An end user must have the TSM client installed on the machine hosting Archive Manager before choosing IBM DR550. The TSM client can be downloaded from the IBM web site, but if it is not installed, Archive Manager cannot communicate with the IBM DR550. 50

Installing Archive Manager with Exchange The IBM DR550 client requires administrator rights on the local computer. To grant admin rights for the data loader service, add the ArchiveMgr_Journal user to the local computer s Administrators group. The Full-Text Index service and Archive Manager Web site also require admin rights on the local computer to access the IBM DR550 client. To grant rights, add the ArchiveMgr_Serviceuser to the local computer s Administrators group. 29. Click Next. 30. Depending upon the storage choice entered on the previous screen, one of the following screens is displayed: a) If you selected the File System storage type on the previous screen, the File System Store Setup screen is displayed. Proceed to the next step. b) If you selected the EMC Centera storage type on the previous screen, the EMC Centera Store Setup screen is displayed. See the EMC Centera section. c) If you selected the BridgeHead HDR storage type on the previous screen, the BridgeHead HDR Store Setup screen is displayed. See the Bridgehead section. d) If you selected the IBM DR550 storage type on the previous screen, the IBM DR550 screen is displayed. See the IBM DR550 section. e) If you selected the NetApp Snaplock storage type on the previous screen, the NetApp Snaplock screen is displayed. See the NetApp Snaplock section. 31. On the File System Store Setup screen, you are prompted for the following information about the attachment storage: Server Name: Name of computer to host attachment store. Share Name: Name of attachment store share. Directory Name: Location of attachment store on hard drive. In addition, select the Store Message data for compliance checkbox if you want to keep a copy of your message archive outside of the message database. Specify the location for the compliance archive. 32. The Compress the File Store checkbox is selected by default. De-select it if you do not want the attachment store compressed. 33. Click Next. 51

Quest Archive Manager 52 34. On the Full Text Index Setup screen, select Default Configuration if you would like your Full Text Index to be partitioned into default sections. The default configuration is recommended. If you have a complex environment that requires custom partitioning of the Full Text Index, it can be configured through the Archive Manager Website with the assistance of Quest support. Mapped drives network drives are not displayed on this screen because indexing over SMB protocol is not recommended. 35. Select one or more drives that will be used for partitioning the Full Text Index. 36. Click Next. 37. If you have selected Default Configuration, the Full Text Index Summary screen is displayed. Read the information on the screen. 38. Click Next. 39. If you did not select Default Configuration on the Full Text Index Setup screen, the Full Text Index Summary screen is displayed with a message that the Full Text Index settings must be configured in the Archive Manager Administration website. Read the information on the screen. 40. Click Next. 41. On the Server Log Path screen, select the disk drive and location for an Archive Manager log folder on each server listed. Each drive has a default path of: <drive>:\quest Software\ArchiveManager\Logs. You can edit the default path and click Appy to save the changes. Click Reset to revert back to the default path. 42. Click Next. 43. On the Installation Summary screen, review your setup settings. 44. Click Next to start the installation. 45. The Installation Progress screen is displayed. The following options are available after the installation has completed. If warnings or errors have been encountered, a Summary button is displayed. Click the Summary button to view the warnings and/or errors. Click the View Log button to view the Installation log. If you encounter errors and then correct them, you can perform the installation again without exiting the installer by clicking the Previous button. This takes you back to the Summary screen. Click Next to run the installation again.

Installing Archive Manager with Exchange 46. Click Next when you have completed viewing the information. 47. On the Journaling Configuration screen, review your journaling configuration: a) Select the Create a data loader checkbox, if desired. The Archive Manager Installer may not be able to set up Data Loaders for complex environments. Users should instead create a proper configuration file (domains.xml) and set these attributes manually. b) Select the servers you want to configure. If the server name or names are incorrectly listed as Administrative Groups it means the installer incorrectly identified the host name for the server(s). Please skip the Journal Data Loader configuration and continue with the installation. You can manually create the Journal Data Loader(s) from the Archive Manager Website after the installation. c) Verify that the journal accounts are correct. d) Check and Save: Click this button to select a journal user name. The Journaling Configuration and Default Policy Configuration steps are optional and are available only for Microsoft Exchange 2000, 2003, and 2007. For Exchange 2007, the Journaling Configuration screen will not display journal mailboxes that have been configured on the Hub Transport. 48. Click Next. 49. On the Default Policy Configuration screen, select the Create policies on servers defined below checkbox if you want to archive all messages on the servers. Select the checkboxes next to the servers you want to apply the policy to. The Archive Manager Installer may not be able to set up message policies for complex environments. Users should instead create a proper configuration file (domains.xml) and set these attributes manually. 50. Click Next. 51. The Post-Installation Progress screen displays the progress of the remaining installation processes. If warnings or errors have been encountered, a Summary button is displayed. Click the Summary button to view the warnings and/or errors. Click the View Log button to view the Installation log. 53

Quest Archive Manager If you encounter errors and then correct them, you can perform the installation again without exiting the installer by clicking the Previous button. This takes you back to the Summary screen. Click Next to run the installation again. 52. Click Next. 53. The Archive Manager Installation is Complete screen displays information and instructions for your Archive Manager installation. Review the information. 54. Click Finish to exit the installation wizard. After you complete the installation wizard, proceed to the post-installation actions described in the Post-Installation Tasks chapter. EMC Centera On the EMC Centera Store Setup screen, specify the EMC Centera connection string. Select the Store Message data for compliance checkbox to keep a copy of your message archive outside of the message database, if desired. After you have completed entering information on the EMC Centera Store Setup screen, click Next to proceed to the Full Text Index Setup screen, as described in the Archive Manager installation steps above. Bridgehead On the BridgeHead HDR Store Setup screen, specify: 54 Bridgehead HDRHOME location: Location of the HT data repository, usually stored in the HDRHOME environment variable. Bridgehead Library path: Use the following path, not the path listed on the BridgeHead HDR Store Setup screen: C:\Program Files\ArchiveManager\Bridgehead\HDRDataStream.dll Repository ID: HT repository ID. This value must be a number. Application Name: The HT data application name. This is usually AfterMail or ArchiveManager. Select the Store Message data for compliance checkbox to keep a copy of your message archive outside of the message database. After you have completed entering information on the BridgeHead HDR Store Setup screen, click Next to proceed to the Full Text Index Setup screen, as described in the Archive Manager installation steps above.

Installing Archive Manager with Exchange IBM DR550 If you selected the IBM DR550, specify the following information on the IBM DR550 Store Setup screen, This information entered will be used by the TSM Client to connect to the hardware. If an advanced configuration is required, complete the following fields: Copy the generated file to %Program Files%\Archive Manager\Tivoli\dsm.opt. Host: Provide a host to connect to. Node: Enter a Node name. Port: Provide a port to connect to. If this field is left blank, the default port number of 1500 is used. Username: Specify the user name to use to sign in to the IBM DR550. Password: Specify the password that will be used to sign in to IBM DR550. If this field is left blank, the value from the IBM DR550 Client Registry will be used. For example: HKLM\SOFTWARE\IBM\ADSM\CurrentVersion\Nodes\<NodeName>\ <Nodename>_SERVER1\Password, type of REG_BINARY This registry entry is created by the IBM DR550 configuration utility during the Client installation, or later on. Open storage in Backup Mode/Archive Mode: The IBM DR550 can operate in two modes: Backup and Archive. Backup mode is optimized for faster retrieval. Archive mode is optimized for better space utilization. This is a mandatory parameter. The default setting is Backup Mode. File Space for Attachments/File Path for Attachments: Specify the File Space and File Path where attachments will go. It is recommended that you use the default settings. Store Message Data for Compliance: Like other storage types, users can choose to save copies of all of the emails to be stored in external storage. This checkbox controls the behavior. File Space for Messages/File Path for Messages: Specify the File Space and File Path where messages stored for compliance will go. It is recommended that you use the default settings. Test button: Before proceeding with the installation of Archive Manager, the Installer needs to make sure that the user input is valid, and the IBM DR550 storage can be reached. The Test button performs user input validation. The multi-line box next to it shows the verification results. For additional information on the IBM DR550 storage parameters, see the IBM DR550 documentation on the IBM Web site. 55

Quest Archive Manager After you have completed entering information on the IBM DR550 Store Setup screen, click Next to proceed to the Full Text Index Setup screen, as described in the Archive Manager installation steps above. NetApp Snaplock If you selected NetApp SnapLock, specify the following information on the NetApp SnapLock Configuration screen. Login: The account name used to connect to the SnapLock volume. Hostname: The name of the SnapLock volume. Retention Mode: Select either SnapLock Default or Archive Manager Default. If you select SnapLock Default, Archive Manager uses SnapLock s default time to store messages. If you are running SnapLock Compliance, there is a minimum of 0 days and a maximum of 30 years. The default is the maximum of 30 years. If you are running SnapLock Enterprise, the default is the minimum of 0 days. Password: The password for the account used to connect to the SnapLock volume. Share Name: The path to the volume. The format is \\computer name or IP address\volume name. Store Message data for compliance: Check this box to take the XML files that are exported from the mail system and store them in the NetApp device. Launch SnapLock Setup Wizard: Click this button to launch the NetApp SnapLock Setup Wizard. For information on the SnapLock Setup Wizard, see the Running the NetApp SnapLock Setup Wizard section of Appendix A, Attachment Store Types. After you have completed entering information on the NetApp SnapLock Configuration screen, click Next to proceed to the Full Text Index Setup screen, as described in the Archive Manager installation steps above. 56

6 Reinstalling/Upgrading Archive Manager Upgrading Archive Manager Reinstalling Archive Manager Post Installation Notes

Quest Archive Manager Upgrading Archive Manager Please refer to the release notes for information on supported upgrade versions. When upgrading Archive Manager over the same existing version of Archive Manager by selecting the Upgrade option in the installer, the following conditions apply: 58 Configuration files that have been modified by the Archive Manager Administrator (.config or.xml) are preserved during the upgrade process. Configuration files from the upgrade kit are placed in the same directory as modified configuration files. A notice is added to installation logs with Info level indicating when a modified configuration file has been used and the configuration file from the upgrade kit was set aside in the same directory. Configuration files from the upgrade kit that are set aside are named file-yyyymmddhhmmss.ext, keeping the file name as the prefix and the original extension. The date portion represents the current installation date and time. If no modifications have been made to the configuration files by the Archive Manager Administrator, then the configuration files from the upgrade kit replace the existing configuration files. This upgrade procedure applies only to systems serving an Exchange (only) messaging environment. For assistance to deply a dual GroupWise/Exchange environment, please contact Quest Support. The upgrade process does not recognize prior installations of the PST Import Wizard, Search Exporter or Retention Editor. You must manually uninstall these components before performing an upgrade. To upgrade Archive Manager: 1. Uninstall the PST Importer, Search Exporter, and Retention Policy Editor. 2. Verify that the web server and Archive Manager Services server (usually, but not always the same machine) both conform to the prerequisites listed in the System Requirements chapter of this Guide. See in that chapter Prerequisites for Servers Running Archive Manager Services for a complete checklist. 3. Stop all Archive Manager services. 4. Run the Archive Manager Installer (ArchiveSetup.exe). 5. On the Welcome screen, click Next. 6. In the Archive Manager End User License screen: Review the license agreement and select the I have read and agree... checkbox. 7. Click Next.

Reinstalling/Upgrading Archive Manager 8. On the License Key Details screen, specify the name of the organization and the license key. The organization and license key are case sensitive. 9. Click Next. 10. On the Archive Manager Installation Targets screen, select Upgrade an existing Archive Manager instance. 11. Click Next. 12. On the Administrator Credentials screen, specify the credentials for the account that will be used by the installation wizard. (Credentials must be specified in the format DOMAIN\Username.) 13. Click Next. 14. On the Database Installation Progress window: The installer checks the version and configuration of the existing Archive Manager database, performs any necessary updates, and reports its progress at each step. The following options are available after the installation has completed. If warnings or errors have been encountered, a Summary button is displayed. Click the Summary button to view the warnings and/or errors. Click the View Log button to view the Installation log. If you encounter errors and then correct them, you can perform the installation again without exiting the installer by clicking the Previous button. This takes you back to the Summary screen. Click Next to run the installation again. 15. Click Next. 16. On the Full Text Index Setup screen, select Default Configuration if you would like your Full Text Index to be partitioned into default sections. The default configuration is recommended. If you have a complex environment that requires custom partitioning of the Full Text Index, it can be configured through the Archive Manager Website with the assistance of Quest support. 17. Select one or more drives that will be used for partitioning the Full Text Index. 18. Click Next. 19. If you have selected Default Configuration, the Full Text Index Summary screen is displayed. Read the information on the screen. 20. Click Next. 59

Quest Archive Manager 21. If you did not select Default Configuration on the Full Text Index Setup screen, the Full Text Index Summary screen is displayed with a message that the Full Text Index settings must be configured in the Archive Manager Administration website. Read the information on the screen. 22. Click Next. 23. On the Installation Summary screen, review your setup settings. 24. Click Next to start the installation. 25. The Installation Progress screen is displayed. The following options are available after the installation has completed. If warnings or errors have been encountered, a Summary button is displayed. Click the Summary button to view the warnings and/or errors. Click the View Log button to view the Installation log. If you encounter errors and then correct them, you can perform the installation again without exiting the installer by clicking the Previous button. This takes you back to the Summary screen. Click Next to run the installation again. 26. Click Next when you have completed viewing the information. 27. The Archive Manager Installation is Complete screen displays information and instructions for your Archive Manager installation. Review the information. 28. Click Finish to exit the installation wizard. Verify the Success of the Upgrade To confirm the success of the Upgrade: 1. Verify that the installer has started the services. 2. Open the web-based interface and verify that the correct version number appears in the top-left corner. Reinstalling Archive Manager When installing or reinstalling Archive Manager, please refer to the release notes for information on supported upgrade versions. When installing or reinstalling Archive Manager over the same existing version of Archive Manager by selecting the Install option in the installer, the following conditions apply: 60

Reinstalling/Upgrading Archive Manager Configuration files (.config or.xml extensions) that have been modified by the Archive Manager Administrator are set aside as.bak files by the installer. Archive Manager will use the default configuration files contained in the installation kit. If no modifications have been made to the configuration files by the Archive Manager Administrator, then the configuration files from the installation kit replace the existing configuration files. Post Installation Notes If you have previously used the Archive Manager installer, you can rerun it at any time by running Start All Programs Quest Software Archive Manager Installer It is strongly recommended that you add the ArchiveMgr_Service, ArchiveMgr_Journal, and ArchiveMgr_ESM accounts to the Performance Log Users and Performance Monitor Users groups on the Archive Manager server after completing an installation. 61

Quest Archive Manager 62

7 Post-Installation Tasks Configure the Active Directory Connector (ADC) Configure and Deploy the Offline Client (Optional) Relocate FTI Temp Location (If Necessary) Add MAPI Data Loaders for Exchange Journal Mailboxes

Quest Archive Manager Configuring Archive Manager After you install Archive Manager, you must perform certain configuration tasks before you can begin to use the product. Most of these necessary post-installation tasks are explained in the contents of this chapter: Configure the Active Directory Connector (ADC) Configure and Deploy the Offline Client (Optional) Relocate FTI Temp Location (If Necessary) Add MAPI Data Loaders for Exchange Journal Mailboxes In addition to the above-listed tasks, you must also set up at least one Message Policy, and apply a Policy to a mail server or mailboxes. Detailed instructions can be found in the Archive Manager Administration Guide. To begin the initial configuration, sign in to the Quest Archive Manager web site. The default administrator account is admin, and the password was specified during installation. Use the domain DEFAULT. Once you have signed in, click the Administration icon (top-right corner of the window) to go to the administrative section of the Archive Manager web site. Configure the Active Directory Connector (ADC) An ADC.config file is used to provide information for all of the domains that you need to import into Archive Manager. You specify the path of the Active Directory Connector configuration file in the Archive Manager Configuration Editor, using the setting ADC Config File. Scenarios for ADC.config File Deployment There are some common scenarios when you should deploy an ADC.config file. Multiple Active Directory Domains: If you have more than one Active Directory Domain that contains users you wish to process with Archive Manager in an environment, you need the ADC.config file to prevent users from getting stamped with the local Archive Manager domain for their login domain and Archive Manager is installed in that domain, causing them to be unable to login. 64

Post-Installation Tasks Parent/Child Domain: An ADC.config file is needed if Archive Manager users are in both the Parent domain and the Child domain. If all Archive Manager users are in a single domain and Archive Manager is installed in that domain, an ADC.config file is not needed. Exchange Resource Forest (one-way trust): In a Resource Forest and User Forest, the instance(s) of Archive Manager will likely be located in the resource domain. You will need to use the ADC.config file to make Archive Manager aware of the security accounts in the user domain. Trusted Forest: In a two-way trust, the ADC.config file is needed to find all mailboxes, users, and groups in each forest. Special filtering requirements: You only want certain users, groups, or mailboxes to populate the Archive Manager database. You can specify additional LDAP filters to limit the objects that are exported by the ADC. The ADC.config File ADC.config consists of a main block named ArrayOfAfterMailInstance. This can contain a number of blocks called AfterMailInstance. Each block of AfterMailInstance defines the settings for one domain. The settings are: Name (deprecated): The name of this instance. Note: This setting is not used. It is retained in the documentation because it was needed in earlier configurations and is still implemented at some sites. ConnectionString (deprecated): This is the connection to the Archive Manager database. It contains the database server name and the database name. Copy the connection string from the Configuration Editor into this file as that will be correctly formatted for your installation. If the connection string is empty or missing, the connection string from the Archive Manager Configuration Editor will automatically be used. Note: You do not need to set the connection string. This setting is retained in the documentation because it was needed in earlier configurations and is still implemented at some sites. Server: The Fully Qualified Domain Name (FQDN) of the domain controller, or the global catalog. For example: server.domain.com UserNamingContext (LDAPPath): LDAP distinguished name of the domain. For example: 65

Quest Archive Manager dc=domain,dc=com NetBIOSName: This setting allows you to specify a domain to override the current domain for the machine. Note: This setting is no longer used. This setting is retained in the documentation because it was needed in earlier configurations and is still implemented at some sites. ResourceURL (Previously called ExternalLDAPPath): LDAP or GC url that specifies the location of the domain controller or global catalog for the Exchange resource forest. You only need this setting if you have a user/resource forest configuration in your environment. For example: GC://server/dc=resource,dc=domain,dc=com or LDAP://server/dc=resource,dc=domain,dc=com Note: For this setting to be used by the Active Directory Connector Service, you must set the UseResourceURL setting to True. UseResourceURL (Previously called UseSecServer): This setting is a boolean that enables the use of ExternalLDAPPath. The default for this setting is False. Deployment With Multiple Active Directory Domains If you have multiple domains in your environment, to import users into your Archive Manager instance with the correct login domain you will need to set up your ADC.config to reflect your domain layout. You need to have an AfterMailInstance entry for each domain that you want the Active Directory Connector to import. When editing the ADC.config file, it can be easy to miss a tag. For every opening tag <tag>, there must be a matching closing tag </tag>. All tags are case-sensitive, e.g., using UseResourceURL is not the same as UseResourceUrl. Opening the ADC.config file with Internet Explorer can help you find tag errors. The following example contains two domains, example.com and mydomain.net. <?xml version="1.0"?> <ArrayOfAfterMailInstance> <AfterMailInstance> <Server>server.example.com</Server> <UserNamingContext>DC=example,DC=com</UserNamingContext> </AfterMailInstance> 66

Post-Installation Tasks <AfterMailInstance> <Server>server.mydomain.net</Server> <UserNamingContext>DC=mydomain,DC=net</UserNamingContext> </AfterMailInstance> </ArrayOfAfterMailInstance> Deployment with a Parent/Child Domain After installing Archive Manager, you need to configure the ADC.config file to reflect your domain layout. For illustrative purposes, we'll assume you have a parent domain named QUESTLOCAL and a child domain named QUESTCHILD. The domain controller for QUESTLOCAL is named server.parent.questlocal.com, and the domain controller for the QUESTCHILD domain is named server.child.questchild.com. When editing the ADC.conifg file, it can be easy to miss a tag. For every opening tag (<tag>), there must be a matching closing tag (</tag>). All tags are case sensitive, e.g., using UseResourceURL is not the same as USEResourceURL. Open the ADC.config file in an Internet browser to show any tag errors. Below is an example of a completed ADC.config file for the Parent/Child domain of QUESTLOCAL and QUESTCHILD. <?xml version="1.0"?> <ArrayOfAfterMailInstance> <AfterMailInstance> <Server>server.parent.questlocal.com</Server> <UserNamingContext>DC=PARENT,DC=QUESTLOCAL,DC=COM</UserNa mingcontext> </AfterMailInstance> <AfterMailInstance> <Server>server.child.questchild.com</Server> <UserNamingContext>DC=CHILD,DC=QUESTCHILD,DC=COM</UserNam ingcontext> </AfterMailInstance> </ArrayOfAfterMailInstance> Deployment With an Exchange Resource Forest (One-Way Trust) If you are deploying in an Exchange Resource Forest, then the instance of Archive Manager or instances should be located in the resource domain. In this case, you will need to use the ADC.config file to make Archive Manager aware of the security objects in the account domain. 67

Quest Archive Manager When editing the ADC.config file, it can be easy to miss a tag. For every opening tag (<tag>), there must be a matching closing tag (</tag>). All tags are case sensitive, e.g., using UseResourceURL is not the same as USEResourceURL. Open the ADC.config file in an Internet browser to show any tag errors. The following scenario assumes that there is a one-way trust between the Account and Resource domains. If that is not the case, then there is not a Resource Forest setup. 1. Create three Archive Manager accounts in the user domain, typically named ArchiveMgr_Journal, ArchiveMgr_ESM, and ArchiveMgr_Service. 2. Create a Group called Archive Manager Exchange Admins in the resource domain, add the ArchiveMgr_ESM account from the account domain to it. Use that for permissions on all Exchange Servers. 3. Create the journal accounts in the Resource Domain. The ArchiveMgr_Journal account from the account domain must have the full mailbox access and read permissions to all the journal accounts in the resource domain. When creating the MAPI data loader(s) in the Administration interface, use the FQDN of the resource exchange server as the Server Name, and the LegacyExchangeDN as the name for the data load record. This will allow the Exchange Account to be disabled as is typical in this scenario. 4. The Active Directory Connector must run as the Archive Manager service account. Below is a sample ADC.config file that shows how a Resource Domain would be specified: <?xml version="1.0"> <ArrayOfAfterMailInstance> <AfterMailInstance> <ConnectionString> 68

Post-Installation Tasks server=questsql1;trusted_connection=yes,database=archivem anager </ConnectionString> <Server> UserForestDC.quest.local</Server> <LDAPPath>DC=quest,DC=local<LDAPPath> <UseResourceURL>1</UseResourceURL> <ResourceURL>GC://ResourceForestDC/dc=user,dc=local</Reso urceurl> </AfterMailInstance> </ArrayOfAfterMailInstance> In order to limit the number of users that will be exported by the ADC, the ADC.config file can be configured to use filters specific to the objects that you want to limit. Deployment With a Trusted Forest If you have multiple forests in your environment in order to import users into your Archive Manager instance with the correct login domain, you will need to set up your ADC.config file to reflect your domain layout. You need to have an AfterMailInstance entry for each domain that you want the Active Directory Connector to import. When editing the ADC.config file, it can be easy to miss a tag. For every opening tag <tag>, there must be a matching closing tag </tag>. All tags are case-sensitive, e.g., using UseResourceURL is not the same as UseResourceUrl. Opening the ADC.config file with Internet Explorer can help you find tag errors. The following example contains two domains, example.com and mydomain.net. <?xml version="1.0"?> <ArrayOfAfterMailInstance> <AfterMailInstance> <Server>server.example.com</Server> <UserNamingContext>DC=example,DC=com</UserNamingContext> </AfterMailInstance> <AfterMailInstance> <Server>server.mydomain.net</Server> <UserNamingContext>DC=mydomain,DC=net</UserNamingContext> </AfterMailInstance> </ArrayOfAfterMailInstance> 69

Quest Archive Manager Limiting User Scope to Specific Organizational Units To limit users to specific organizational units, use the following command in the ADC.config file, with semicolons ad a delimiter between the organizational units that you want to use. In the following example, two organizational units are used, separated by a semicolon. <OUList>OU=NorthAmericaUsers;OU=SouthAmericaUsers</OUList > Special Filtering Requirements There are optional filters that may be specified in the ADC.config file. These filters may be used to limit the scope and reduce the number of objects returned. For example, a filter could be added to only include users whose names start with the letter "A". The filters are LDAP search style strings and are logically "and-ed" to the built-in search filters. FindDeletedUsersFilter FindGroupsFilter FindUsersFilter FindMailStoresFilter FindStorageGroupsFilter FindUserForestMailBoxFilter FindResourceForestMailBoxFilter If you have a requirement to add to your Archive Manager database only users, groups, mail stores, or storage groups that meet special search criteria, you can use the extra filter definitions defined in the Filters section. In order to use the filter, you will need to create an ADC.config file and add the <Server> and <UserNamingContext> sections. You can now add any of the configurable filters, the filter configuration is logically "ANDed" with the base filter. As you define your filter you can verify that it is working by using LDIFDE (http://support.microsoft.com/kb/237677) and your filter definition along with the ADC's base definition. You can logically AND two filter definitions using parentheses and the ampersand as follows (more LDAP syntax help can be found at http://technet.microsoft.com/en-us/library/aa996205(exchg.65).aspx): (& (FILTER1) (FILTER2) ) 70

Post-Installation Tasks When editing the ADC.config file, it can be easy to miss a tag. For every opening tag <tag>, there must be a matching closing tag </tag>. All tags are case-sensitive, e.g., using UseResourceURL is not the same as UseResourceUrl. Opening the ADC.config file with Internet Explorer can help you find tag errors. <?xml version="1.0"?> <ArrayOfAfterMailInstance> <AfterMailInstance> <Server>server.example.com</Server> <UserNamingContext>DC=example,DC=com</UserNamingContext> <!-- Only export users with surnames that start with A --> <FindUsersFilter>(sn=A*)</FindUsersFilter> </AfterMailInstance> </ArrayOfAfterMailInstance> Configure ADC Import Behavior Two program parameters that control ADC import behavior are set in the Archive Manager Configuration Editor: Directory Connector Import Mailbox Permissions: Determines whether group and user permissions are imported into Archive Manager. (This feature applies to customer-defined groups, not the pre-built ones.) Set this parameter to True if you want to import group and user permissions, and each user having full mailbox access permissions in Active Directory will be assigned the corresponding mailbox in Archive Manager. Note that an account with an unresolved SID in its ACL will not be imported by ADC, nor will the log identify the account that contains the unresolved SID. Set the value to False to disable this feature. Directory Connector Import Users Without Mailboxes: Determines whether ADC will import users without corresponding mailboxes. Set the parameter value to True to enable this feature, or False to disable it. 71

Quest Archive Manager Configure and Deploy the Offline Client (Optional) If you are using the Offline Client, the Administrator configures offline access and typically deploys the client through group policies. For information on configuring an deploying the offline client, see the Download Tools chapter of the Administration Guide. Performance Tip: If the volume of users will make the Offline Client load heavy, you can improve performance by deploying a separate dedicated IIS server for web services. That is, deploy a second, duplicate IIS Archive Manager server, then point users' Offline Clients to the web services component of the second, but leave the primary website URL set to the first, original server. Deploying the Outlook Form There are several methods for deploying the Outook Form. These methods include: Deploy the Outook Form to public folders using the Archive Manager Installer. Deploy the Outlook Form to public folders manually. Deploy the Outlook Form by installing the Outlook Add-in via group policy. Deploy the Outlook Form by installing the Outlook Add-in manually. Deploying the Outlook Form to Public Folders Using the Archive Manager Installer The Outlook Form is automatically deployed by the Archive Manager installer when public folders are enabled on the specified Exchange server, and the Install Outlook form into Exchange checkbox was selected during installation. See the next section to deploy the Outlook Form when public folders are not enabled. 72

Post-Installation Tasks Deploying the Outlook Form to Public Folders Manually The Outlook Form can be deployed to public folders manually using the Archive Manager Exchange Utility. Please see the Exchange Utility chapter in the Archive Manager Administration Guide for instructions. Deploying the Outlook Form Using the Archive Manager Outlook Components Tool The Archive Manager Outlook Components is an add-in that installs the Outlook Form on users' computers when public folders are not enabled on the specified Exchange server. This tool installs an Outlook Add-in on local computers that will automatically install a copy of the form when a user launches Outlook. Therefore, it is only necessary to run this tool once per computer. It can be managed by Group Policy. Prerequisites The Archive Manager Outlook Components tool can only be installed with supported versions of Archive Manager. Microsoft.NET Framework Version 4.0 and 3.5 SP1. Note: Reliability Update 2 for the.net Framework 4 is required and can be found at: http://support.microsoft.com/kb/2600217 64-bit versions of Outlook require the Archive Manager Outlook Components x64.msi. All other versions of Outlook require the Archive Manager Outlook Components.msi. Microsoft Outlook 2013 (RTM), 64-bit or 32-bit, running on Windows 8, 7, or Vista, all 64-bit or 32-bit, or Microsoft Outlook 2010 (RTM), 64-bit or 32-bit, running on Windows 8, 7, or Vista, all 64-bit or 32-bit, or Microsoft Outlook 2007 (SP1 or SP2), 32-bit, running on Windows 8, 7 or Vista (SP2), all 64-bit or 32-bit or Windows XP (SP2 or SP3), Windows 2012 64-bit, Windows 2008 64-bit, Windows 2003 32-bit, or Microsoft Outlook 2003 32-bit, running on Windows XP (SP2 or SP3) Windows Installer 3.1 or later (only for installation). 73

Quest Archive Manager Installing the Outlook Add-in Using a Group Policy To install the Outlook Add-in on computers that are running Windows XP Professional, Windows Server 2003, or Windows 2000, please see the Assign a Package section of the following Microsoft support article: http://support.microsoft.com/kb/816102 The Outlook Add-in will be installed at the first reboot of the computer after the group policy has been applied. The Outlook Form will be installed automatically the next time a user logs in to Outlook after the Outlook Add-in has been installed. By default, the Outlook Form is installed with standard mail icons. If you wish to install the Outlook Form with Archive Manager icons, see the additional instructions below. A reboot may be required after to install the Outlook Form after installation of the Archive Manager Outlook Components tool with older versions of Outlook, or if the form has been manually removed from Outlook prior to reinstalling the tool. If you are reinstalling this tool on a client computer that is running Outlook 2003, you must delete the following file in order for the Outlook Form to be installed again: C:\Program Files\Quest Software\Archive Manager\Outlook Components\OutlookAddIn.default.config Installing the Outlook Add-in to Deploy the Form With Archive Manager Icons Using a Group Policy 1. When installing the Archive Manager Outlook Components tool, on the Deploy Software screen, click Advanced, then OK. 2. Under the Modifications tab, click Add. 3. Select UseAMIcons.mst. Installing the Outlook Add-in Manually 1. Log in to a computer with Administrator credentials. 2. Launch Archive Manager Outlook Components.msi. 3. Follow the prompts in the Windows installer. The Outlook Form will be installed automatically the next time a user logs in to Outlook after the Outlook Add-in has been installed. By default, the Outlook Form is installed with standard mail icons. If you wish to install the Outlook Form with Archive Manager icons, see the additional instructions below. 74

Post-Installation Tasks Installing the Outlook Add-in Manually to Deploy the Form With Archive Manager Icons 1. Log in to a computer with Administrator credentials. 2. From a command prompt, navigate to the directory where you have placed the Archive Manager Outlook Components.msi file. 3. Use the following command to install the package with Archive Manager icons: "Archive Manager Outlook Components.msi" FORMAMICONS="1" 4. Follow the prompts in the Windows installer. Installation Options For manual installation, the Archive Manager Outlook Components.msi package can be run in a "silent" mode. In silent mode, no user interface is displayed. To install with silent mode enabled, run the following command at a command prompt: "Archive Manager Outlook Components.msi" /quiet Relocate FTI Temp Location (If Necessary) If the Archive Manager services are on a separate workstation from the SQL Server: Move the Full-Text Index temp location from the Archive Manager server to the SQL Server. Add MAPI Data Loaders for Exchange Journal Mailboxes Microsoft Exchange 2007 includes optional journaling features that can help an organization meet compliance standards, but that are not installed by default. Archive Manager lets you configure MAPI data loaders to offload messages from Exchange Journal mailbox(es) into Archive Manager. The Pre-Installation Preparations chapter in this Guide suggests that you enable Exchange Journaling, and the installation procedures include steps to configure MAPI data loaders to offload messages from Exchange Journal mailbox(es) into Archive Manager. 75

Quest Archive Manager If you did not enable Exchange Journaling during installation, you can refer to your Microsoft documentation to install and configure it now. If you did not configure MAPI data loaders in the original installation, you can refer to the Data Loaders chapter of the Archive Manager Administration Guide for the procedure. 76

A Appendix A: Attachment Store Types Attachment Store Types Overview Common Scenarios for Editing the Configuration

Quest Archive Manager Attachment Store Types Overview Archive Manager supports four different storage types for storing attachments and compliance messages. Details on using each of the storage types are provided below. The storage types supported by Archive Manager include: NTFS / Windows File System: This is the default option, and stores files on standard disk. NetApp SnapLock: SnapLock provides fast WORM (Write Once Read Many) storage on magnetic disk. It uses non-rewritable, non-erasable disk storage protects data until a specified retention date. EMC Centera: This option uses an external EMC Centera server or cluster to store the attachments. Bridgehead HDR: This option uses an external Bridgehead HDR server to store attachments. IBM DR550: This option uses an IBM DR550 running IBM System Storage Archive Manager (SSAM) to store attachments. Archive Manager allows more than one type of storage to be used on a running system. However, only one storage location can be considered the default storage location at a time. When installing Archive Manager, you set the attachment store type on the Attachment Store Type screen. Once the product is installed, additional attachment stores can be added. This process is described below in the section Common Scenarios for Editing the Configuration. In all cases, Archive Manager stores each unique attachment as a single file or the equivalent unit. Archive Manager performs no compression or encryption. This is left to the underlying storage system. Some attachment store types are deprecated in Archive Manager for new installations. Existing customers on deprecated file storage types are fully supported and will continue to be supported until a migration plan is in place and migration tool is available to move to a new storage type EXTERNAL STORAGE TYPE File System NetApp SnapLock 7.2.4 ARCHIVE MANAGER VERSION FOR DEPRECATION Supported. Supported. 78

Appendix A: Attachment Store Types EXTERNAL STORAGE TYPE EMC Centera 4.2.1, 4.2, 4.1, 4.0, 3.1.4, or EMC Atmos 2.0 BridgeHead HT FileStore with HDR 2.2-20, build 23007 IBM DR-550 version 5.4.1 (Version 5, Release 4, Level 1) ARCHIVE MANAGER VERSION FOR DEPRECATION Supported. Deprecated. Only upgrades supported. Deprecated. Only upgrades supported. NTFS/Windows File System The file system is the default storage mechanism for Archive Manager. This is a directory structure, usually in C:\ArchiveManager\Data, with each file stored represented by its database id and file type. For example: 34.gif These files are stored in blocks of 1000 files per directory. Each database ID has up to twelve 0 s added to the front. For example, 34 becomes 000 000 000 034, and this is converted in a directory name: c:\archivemanager\data\000\000\000\000\34.gif By default, the entire tree, from c:\archivemanager\data down, is set to be compressed using NTFS compression. These files will not be rewritten, so any backup scheme can be used. Quest recommends an incremental backup. NetApp SnapLock The NetApp SnapLock Setup Wizard allows you to create volumes or WORMS on which Archive Manager can put attachment stores. The volumes containing attachment stores are an effective tool for compliance. 79

Quest Archive Manager The NetApp SnapLock Wizard is run from the Archive Manager Installer. Run the installer during the installation process, unless you already have all the necessary volumes created. Prerequisites If a CIFS share is already in place, you can upgrade from a Windows file system attachment store to NetApp SnapLock by these two steps: 1. Copy the filesystem data folder (containing the archived attachments) to the NetApp CIFS share. 2. In the Archive Manager SQL database, StorageLocation Table: Change the connection string (originally in the form "DATA=\\archivemanagerserver\filesystemlocation") to point to the new CIFS share location (for example, "DATA=\\NetApp\data"). Install all of the necessary licenses for the NetApp Data ONTAP operating system. In DataONTAP, run the CIFS (Common Internet File System) setup. The CIFS shows the volume to the Windows system as a drive. Running the NetApp SnapLock Setup Wizard The NetApp SnapLock Setup Wizard is run from the Archive Manager Installer. The NetApp SnapLock Configuration screen contains a Launch SnapLock Setup Wizard button. When you launch the wizard, fill in the information on the following screens: Login Page Create New SnapLock Volume: Select this option to create a new volume. Change Retention Times: Select this option to change the default retention times. The settings here apply only if you select SnapLock Default as the retention mode in the Archive Manager Installer. Filer Address: IP name or address of the machine running Data ONTAP. User Name: Account name you want to use to access the machine running Data ONTAP. This account must be an Administrator account, preferably root. Password: Password for the account used to access the machine running Data ONTAP. 80

Appendix A: Attachment Store Types Volume Name: Name of the volume you want to create on the machine running Data ONTAP. Or the name of the volume for which you want to change retention times. This name is case sensitive. Volume Properties New Volume Name: Enter the name of the volume you wish to create. Number of Disks to Use: Enter the number of disks to use on the volume. Because it is a RAID configuration, this must be an even number. Create Data Loader User: Select this box if you are not using Active Directory and need to set up a Journal User for the data loader. Data Loader Log-In User Name: Enter the name for the Journal User that you are creating. Data Loader Log-In User Password: Enter the password you want to create for the Journal User. Verify Password: Retype the password. Click Next to create the volume If this is a new setup, the volume will be created instantly. If this is an existing setup, the wizard will take some time to prepare the volume for use. Retention Time Current Retention Times: Shows the current settings for the minimum time, default time, and maximum time. Set Retention Time: Enter a number for the minimum time, default time, and maximum time. Select days, months, or years from the drop-down list. EMC Centera The EMC Centera is supported for the storage of attachments and compliance messages. The native Centera API is used to store attachments in the Centera cluster. Archive Manager considers the Centera to be an "always-online blind storage system." Archive Manager presents an attachment, and then receives a ticket. To get the attachment back, Archive Manager presents the ticket and gets the attachment. Archive Manager does not set any retention policies on the Centera. This is left to the Centera administrator. 81

Quest Archive Manager Archive Manager supports any centera settings which can be set on the Centera connection string or in a PEA file. Using a PEA File When utilizing a PEA file with a Centera Configuration, it is important that the PEA file is accessible by each component that requires access to it. The Archive Manager components that will access the Centera, and therefore require access to the PEA file, are: Archive Data Load Service Archive Full-Text Index Service Website As a result, the group ArchiveManagerServiceUsers should have permissions to access the PEA file location. The PEA file should also be present on all servers with the above Archive Manager components. (This is important if you have NLB WebServers, and/or a clustered Archive Manager installation). If the machines are separate, then the PEA file must be either configured with a UNC path, or placed in the same local path as all machines that use the PEA file. Bridgehead HDR The Bridgehead HDR system is supported for the storage of attachments and compliance messages. The native HDR API s are used to store attachments in a HDR system. Archive Manager considers the HDR to be a "usually-online blind storage system." Archive Manager presents an attachment, and then receives a ticket. To get the attachment back, Archive Manager presents the ticket and gets the attachment. If the HDR tells Archive Manager that the attachment is to be retrieved from slow storage (tape, DVD etc.), Archive Manager presents this to the user or handles it in the appropriate way. Note that performing a full text index or reindex can cause the Bridgehead system to become overloaded with restore requests. Please consult with Quest before performing this action. Using BridgeHead configured with transform methods is not supported. It causes Dataloader exceptions when processing messages. 82

Appendix A: Attachment Store Types IBM DR550 The IBM DR550 is supported for the storage of attachments and compliance messages. The native TSM API is used to store attachments in the system. Archive Manager considers the IBM DR550 to be a usually-online blind storage system; we present an attachment, and receive a ticket. To get the attachment back, we present the ticket and get the attachment. If the IBM DR550 tells us the attachment is to be retrieved from slow storage (tape, DVD etc.), we present this to the user or handle it in an appropriate way. Note that performing a full text index reindex can overload the IBM DR550 with restore requests. Please consult Quest before doing this. Common Scenarios for Editing the Configuration Using a NAS Box Archive Manager s installer does not support storing attachments on a NAS box, as software is installed on the box, which is most likely not running windows. If you want to store attachments on a NAS box, use the following workaround: 1. When installing Archive Manager, set the services to NOT start after installation. Install using a normal filesystem storage location. 2. Once Archive Manager is installed, edit the StorageLocation table and change the default storage location to point to the UNC of the NAS box. For example: DATA=\\nasbox\archivemanagerstore 3. You must ensure that all Archive Manager users, ArchiveMgr_Service, ArchiveMgr_ESM, ArchiveMgr_Journal, have full access to that folder. 4. Start the services. They will now load and retrieve attachments from the NAS box. 83

Quest Archive Manager Deleting Attachments from a SnapLock Volume The Archive Manager Retention Engine cannot delete attachments from a Data ONTAP device unless the retention settings in SnapLock contain a retention time that precedes or is the same as the one set in the Retention Engine. The Retention Engine generates errors when the retention settings in SnapLock for attachments on a Data ONTAP device are set at a later time than the Archive Manager retention delete policy. 84

B Appendix B: Process Overview Checklist Pre-Installation Checklist Install Archive Manager for Exchange Post-Installation Checklist

Quest Archive Manager Pre-Installation Checklist For details, see: Pre-Installation Preparations. CHECK 1. Review your system requirements. 2. Configure your Archive Manager Services Server. 1. Install the required software. 2. Configure your antivirus software. 3. Create a DNS entry. (optional) 4. Install Filters (optional) 3. Configure the Archive Manager Database Server. 1. Check your system requirements. 2. Check the database folder. 3. Configure the SQL Agent Service. 4. Configure the SQL Server Data and Log Directories (optional). 4. Create Accounts and Grant Permissions. 1. Create the Archive Manager accounts and group. 2. Grant permissions to the Exchange Admin Group. 3. Grant permissions to the Archive Manager Service Account. 4. Grant Permissions in a Windows 2000 domain. 5. Configure Journaling on Your Exchange Server (Optional) 1. Turn on Envelope Journaling. 2. Enable Journaling for a Mailbox Store. This checklist provides a high-level overview of the process for installing Archive Manager for Exchange. Full details for these steps are documented in earlier chapters of this Guide, as cited below. Install Archive Manager for Exchange Install Archive Manager using the instructions provided in the Installing Archive Manager with Exchange chapter of this guide. 86

Appendix B: Process Overview Checklist Post-Installation Checklist For details, see: Post-Installation Tasks. CHECK 1. Install the Archive Manager Offline Client. (Optional) 1. Install using Group Policy, or 2. Install at Next User Logon 2. Perform an application functionality check for Login and Display. 3. Perform an application functionality check for Searching. 4. Perform an application functionality check for Messages. 5. Perform an application functionality check for Attachments. 5. Perform an application functionality check for Online Help. 6. Perform an application functionality check for Mailboxes. 7. Perform an application functionality check for Administrator Features. 87

Quest Archive Manager 88

About Quest About Quest About Quest Software Quest Support Support Links Visiting Our Archive Manager Online Community Other Quest Communities 89

Quest Archive Manager About Quest Software Established in 1987, Quest Software (Nasdaq: QSFT) provides simple and innovative IT management solutions that enable more than 100,000 global customers to save time and money across physical and virtual environments. Quest products solve complex IT challenges ranging from database management, data protection, identity and access management, monitoring, user workspace management to Windows management. For more information, visit www.quest.com. Quest Support Quest Support is available to customers who have a trial version of a Quest product or who have purchased a Quest product and have a valid maintenance contract. Quest Support provides unlimited 24x7 access to our Support Portal at www.quest.com/support. From our Support Portal, you can do the following: Retrieve thousands of solutions from our Knowledge Base Download the latest releases and service packs Create, update and review Support cases View the Global Support Guide for a detailed explanation of support programs, online services, contact information, policies and procedures. The guide is available at: www.quest.com/support. 90

About Quest Support Links The Knowledge Base Articles link takes you to the Archive Manager section of the Knowledge Base tab on the Support site. It provides information on topics of interest outside the scope of the Archive Manager documentation set. You can search for a particular topic, hotfixes, and even video tutorials and other relevant information. Enter text for a keyword search of the entire Archive Manager database, or search by a particular Archive Manager release. https://support.quest.com/searchknowledgebase.aspx?pr=268442731 The Recommended Content link takes you to the Support by Product/ Recommended tab on the Archive Manager Support site. It provides a list of articles and videos that have been determined to be helpful information for using Archive Manager. https://support.quest.com/productinformation.aspx?pr=268442731 The Software Downloads/Hotfixes link takes you to the Software Downloads tab on the Archive Manager Support site. From here you can download the latest Archive Manager releases and service packs. https://support.quest.com/softwaredownloads.aspx?pr=268442731 The How-To Videos link takes you to the Knowledge Base tab on the Archive Manager Support site. It provides a list of video tutorials on a range of Archive Manager topics. https://support.quest.com/searchknowledgebase.aspx?pr=268442731&k=vide o 91

Quest Archive Manager Visiting Our Archive Manager Online Community The Quest Archive Manager community is an interactive community dedicated to issues related to email data management, including storage, compliance, and knowledge management. The community is designed to foster collaboration between Quest Archive Manager experts and users. This community is a place where you can: Learn about product releases and betas before anyone else. Get access to Quest product leaders and subject matter experts related to archiving. Gain additional knowledge from discussion forums and get common questions answered. Ask questions. Share knowledge. Exchange ideas regarding your use of archiving products, as well as on general archiving topics. You can browse around the forums and the library, but to take full advantage of the community, post new threads, respond to messages from others, rate our documents and downloads, you need to become a registered member. And if you already have a Quest account or are a member of another Quest community, simply log in. Join the community at Quest Archive Manager Community. Other Quest Communities Quest.com has a large and growing number of communities dedicated to specific products and technologies. Visit these communities to get access to the expertise at Quest Software and take part in product development through discussion forums, polls, and product betas. Also find the latest product news and announcements, and browse a knowledge base of general documentation, tips and tricks, product videos and tutorials. http://www.quest.com/communities/ 92