Loading...

Prerequisites - Exchange Compliance Archiver Agent

Table of Contents

Microsoft Outlook Requirements

  • Microsoft Outlook 2007, 2010, or 2013.
  • Either of the following:
    • For Microsoft Outlook 32-bit installation, install the 32-bit version of the agent.
    • For Microsoft Outlook 64-bit installation, install the 64-bit version of the agent.

      Notes:

      • Use only the traditional Windows Installer-based (MSI) method to install Microsoft Office. Other methods, such as Click-to-Run, are not supported.
      • If you archive PST files, you must install the 64-bit version of the agent.

If you install the agent on an off-host proxy computer, do the following:

  • Make sure that the proxy computer is added to the same domain where the Exchange server is located.
  • Install Microsoft Outlook 2007, 2010, or 2013 on the off-host proxy computer so that the software drivers that are required for the agent to function in an off-host proxy configuration are installed.

Note: If you use Exchange 2016, you must install Microsoft Outlook 2013 SP1 or later service packs.

Assigning Full Access to Service Accounts

Applies to: Exchange 2007 and later

The service account must have full access rights to all mailboxes on the server.

The service account must be a member of:
  • The Organization Management group (Exchange 2010 or later) or the Exchange Organization Administrators group (Exchange 2007).
  • The Local Administrator Group on the proxy servers.

    If the agent is installed on an off-host proxy computer, the service account must be in the Local Administrator Group on the proxy computer.

Disclaimer: This procedure is performed using the Microsoft ADSI Edit snap-in. The snap-in is subject to change without notice. Consult the Microsoft documentation before you perform this procedure.

Procedure

  1. From the ADSIEDIT snap-in, connect to the domain controller.
  2. In Connection Settings, click Select a well known Naming Context and select Configuration from the list.
  3. Expand Services > Microsoft Exchange.
  4. Right-click the appropriate organization name, and then click Properties.

    The Properties dialog box appears.

  5. Click the Security tab.
  6. Under Permissions, verify that all the permissions for the Organization Management group (Exchange 2010 or later) or the Organization Administrators group (Exchange 2007) are set to Allow.

    Tip: Selecting the Allow for Full Control check box selects Allow for all the permissions. The Deny check box for all permissions must be cleared.

  7. Click OK, and then wait for replication.
  8. To grant Receive As permissions to the service account, open Exchange PowerShell, and then type the following cmdlet:

    Get-MailboxDatabase | Add-ADPermission -user "<service account>" -ExtendedRights Receive-As

    You must include the Receive As permissions to protect archive mailboxes.

    Note: Run the Get-MailboxDatabase cmdlet each time you add a new database.

Exchange Server Requirements

Exchange Server 2013 or Later

  1. Before you run backups, verify that Outlook is running on the client computer and that it is configured to use the same user that is specified in the mailbox agent properties.
  2. On each Exchange server with a Client Access Server (CAS) role:
    1. In PowerShell, run the following command:

      Set-OutlookAnywhere –identity "<Exchange Client Access Server name>\rpc (Default Web Site)" -InternalClientAuthenticationMethod ntlm

    2. In Windows, open the Command Prompt window, and then run IISRESET.
  3. To manage the performance of your Exchange environment and to enforce connection bandwidth limits, set the following throttling policy:
    1. In Windows, on the taskbar, click Start, and then click All Programs > Microsoft Exchange Server version_number.
    2. Click Exchange Management Shell.
    3. Run the following commands:

      New-ThrottlingPolicy CVThrottlingPolicy

      Set-ThrottlingPolicy CVThrottlingPolicy -RCAMaxConcurrency unlimited -RcaMaxBurst unlimited -RcaRechargeRate unlimited -RcaCutoffBalance unlimited –IsServiceAccount:$true

      Set-Mailbox <service account> -ThrottlingPolicy CVThrottlingPolicy

      Where:

      service account is the Exchange Administrator Service Account.

  4. For the throttling policy to take effect immediately, restart the Exchange RPC service.

    Note: If the Exchange Remote Procedure Call (RPC) service is not restarted, it might take the throttling policy up to two hours to take effect.

Exchange Server 2010

To manage the performance of your Exchange environment and enforce connection bandwidth limits, set the throttling policy.

Procedure

  1. On the Exchange Server, from the Windows Start menu, click All Programs > Microsoft Exchange Server 2010.
  2. Click Exchange Management Shell.
  3. Type the following commands:

    New-ThrottlingPolicy –name CVThrottlingPolicy

    Set-ThrottlingPolicy –identity CVThrottlingPolicy –RCAMaxConcurrency $null –RCAPercentTimeInAD $null –RCAPercentTimeInCAS $null –RCAPercentTimeInMailboxRPC $null

    Set-Mailbox –Identity <service account> –ThrottlingPolicy CVThrottlingPolicy

    Where:

    service account is the Exchange Administrator Service Account.

  4. For the throttling policy to take effect immediately, restart the Exchange Remote Procedure Call (RPC) service.

    Note: If the Exchange RPC service is not restarted, it might take the throttling policy up to two hours to take effect.

Considerations for Exchange 2016

If you use Exchange 2016, prepare the environment accordingly.

Selecting the Exchange Version for 2016

Wherever you are asked to specify an Exchange version in the SnapProtect software, use Exchange 2013.

Disabling MAPI Over HTTP

Applies to: Exchange 2013 or later

For Exchange 2013 or later, backups require RPC over HTTP. If you have MAPI over HTTP enabled, you must disable it before you configure accounts for Exchange 2013 or later.

Procedure

  1. Log on to the proxy client where you installed the agent.

    Use the credentials for the Windows account that you defined in the mailbox agent properties.

  2. In Windows on the client computer, click Start, and then type regedit in the Search programs and files box.
  3. Press Enter.

    The Registry Editor appears.

  4. Expand HKEY_CURRENT_USER > Software > Microsoft > Exchange.
  5. Right-click Exchange, and then click New > DWORD.

    A new DWORD entry appears in the right pane.

  6. Right-click the new DWORD entry, and then click Rename.
  7. Type MapiHttpDisabled.
  8. Right-click the MapiHttpDisabled entry, and then click Modify.

    The Edit DWORD Value dialog box appears.

  9. In the Value box, type 00000001, and then click OK.
  10. Close the Registry Editor.
  11. Verify that the protocol has been changed to RPC over HTTP.
    1. Restart Outlook.
    2. Press Ctrl and right-click the Outlook icon in the notification area at the far right of the task bar.
    3. Click Connection Status.

      The Microsoft Exchange Connection Status dialog box appears.

    4. Verify that the value in the Protocol column is RPC/HTTP.
    5. If the value is HTTP, delete the Outlook profile, and then recreate it.
  12. Note: Make sure to use the same Exchange service account name for the new profile and disable cache mode.