6 Access control and auditing : 6.3 Configuring mailbox folder structure retrieval
6.3
Configuring mailbox folder structure retrieval
Mailbox folder structure retrieval enables you to synchronize the mailbox folder structure in Microsoft Exchange with GFI MailArchiver.
User mailbox synchronization must be set up to:
•
View the mailboxes set up by default or by users in Microsoft Exchange through the GFI MailArchiver user interface.
•
Use GFI MailArchiver Outlook Connector that synchronizes email in Microsoft Outlook and GFI MailArchiver.
NOTE: For more information about the GFI MailArchiver Outlook Connector, refer to the Outlook Connector section starting on page 1 in this manual.
How does mailbox folder structure retrieval work?
Figure 3 - User mailbox structure retrieval
User mailbox structure retrieval enables users to view the folder structure set up for each individual user set up in Microsoft Exchange. Its main functions are to:
•
Retrieve mailbox folder  structure for all users.
•
Save retrieved mailbox folder structure  within the GFI MailArchiver archive store.
•
On request, GFI MailArchiver retrieves the mailbox folder structure from archive store  and displays email conversations within the retrieved archive stores  to users.
6.3.1
Microsoft Exchange 2000/2003
1. Log in as Administrator or using an account with administrative privileges.
2. Create a new user in Active directory.
NOTE: New user does not require a mailbox to be attached.
•
Microsoft Windows Server 2000/2003
o
Click Start ► Settings ► Control Panel ► Administrative Tools ► Active Directory Users and Computers.
o
Expand <Domain Name> ► Users node and right click Users ► New ► User.
o
Key in ‘First name’, ‘Last name’, ‘Full name’ and ‘User logon name’ and click Next.
o
Key in ‘Password’ and ‘Confirm password’ values, unselect User must change password at next logon option, select User cannot change password and select Password never expires. Click Next to continue setup.
o
Unselect Create an Exchange mailbox option and click Next.
o
Review new user details and click Finish to create new user.
•
Microsoft Windows Server 2008
o
Click Start ► Run and key in cmd, and OK.
o
Key in:
dsadd user <UserDN> -pwd <Password> -disabled no
Where:
Parameter
Description
<UserDN>
Specifies the distinguished name of the user object to be added.
-pwd
Sets <Password> value.
<Password>
Specifies the password to be used for the user account. If this parameter is set to *, you are prompted for a user password.
•
Example: dsadd user CN=masynch,CN=Users,DC=master-domain,DC=Com -pwd Password1 -disabled no
 
Screenshot 149 – Exchange System Manager
3. From the Microsoft Exchange System Manager, expand Server node from the appropriate administrative group. Right click the server and click Properties.
4. Access the Security tab.
5. If the user that is allowed to access all user mailboxes is added in Group or user names box, then go to step 6. If the user that is allowed to access all user mailboxes is NOT added in Group or user names box, click Add… to add the user.
Screenshot 150 – Allow full control to user who has full control on all user mailboxes
6. In the permissions list, click Allow next to Full Control to grant full control permissions to the user just created.
7. Navigate to Control Panel ► Administrative Tools and select:
•
Domain Controller Security Policy if GFI MailArchiver is installed on the domain controller
•
Local Security Policy if GFI MailArchiver is not installed on the domain controller.
8. Expand Local Policies and click User Rights Assignment
9. From the right pane, double click Allow log on locally
10. Click Add User or Group and key in the user configured in the GFI MailArchiver Mailbox Synchronization configuration.
11. If GFI MailArchiver is installed on the domain controller, load Microsoft Windows command prompt, and key in gpupdate /force to refresh the local and Active Directory-based Group Policy settings.
12. From the GFI MailArchiver management console, expand Configuration node and click Mailbox folder structure retrieval.
Screenshot 151 – Mailbox folder structure retrieval settings
13. Select Mailbox folder structure retrieval checkbox.
14. Select the connection method to Microsoft Exchange:
•
Traditional Message Application Programming Interface (MAPI): Use this option if you are using Microsoft Exchange Server 2000/2003/2007.
•
Exchange Web Services: Use this option if you are using Microsoft Exchange 2007 SP1 and later only.
15. Key in a Login Name and Password of the user that you created in ‘Preparing Microsoft Exchange Server for use with the GFI MailArchiver Outlook Connector’ section in this chapter.
16. Key in the credentials for the user with access to all the mailboxes.
NOTE: Specify login name in domain\username format.
17. Click Test access to mailboxes button to text access to mailboxes. If test fails, check credentials and retest.
18. <Optional> Click Add New Policy to create a policy that excludes specific folders from being replicated.
•
Key in policy name and click Next.
•
Add folders to exclude and click Next.
•
To apply new policy to selected users only, select Apply for selected users only option and key in the users to which this folder applies.
•
Click Next and Finish to finalize new policy setup.
19. Click Save Settings to complete setup.
6.3.2
Microsoft Exchange 2007 (not SP1)
1. Click Start ► Run and key in cmd, and OK.
2. Key in: dsadd user <UserDN> -pwd <Password> -disabled no
Where:
Parameter
Description
<UserDN>
Specifies the distinguished name of the user object to be added.
-pwd
Sets <Password> value.
<Password>
Specifies the password to be used for the user account. If this parameter is set to *, you are prompted for a user password.
•
Example: dsadd user CN=masynch,CN=Users,DC=master-domain,DC=Com -pwd Password1 -disabled no
3. Open the Exchange Management Shell.
4. Run the following Windows PowerShell commandlet
Add-ADPermission -identity “Mailbox Store” -User “Trusted User” -AccessRights GenericAll
•
Example: Add-ADPermission –Identity “Mailbox Database” -User “master-domain\masynch” –AccessRights GenericAll
Repeat the procedure described above for each mailbox store database required.
5. Navigate to Control Panel ► Administrative Tools and select:
•
Domain Controller Security Policy if GFI MailArchiver is installed on the domain controller
•
Local Security Policy if GFI MailArchiver is not installed on the domain controller.
6. Expand Local Policies and click User Rights Assignment
7. From the right pane, double click Allow log on locally
8. Click Add User or Group and key in the user configured in the GFI MailArchiver Mailbox Synchronization configuration.
9. If GFI MailArchiver is installed on the domain controller, load Microsoft Windows command prompt, and key in gpupdate /force to refresh the local and Active Directory-based Group Policy settings.
10. From the GFI MailArchiver Management Console, expand Configuration node and click Mailbox folder structure retrieval.
Screenshot 152 – Mailbox folder structure retrieval settings
11. Check the Enable mailbox folder structure retrieval checkbox.
12. Select the connection method to Microsoft Exchange:
•
Traditional Message Application Programming Interface (MAPI): Use this option if you are using Microsoft Exchange Server 2000/2003/2007.
•
Exchange Web Services: Use this option if you are using Microsoft Exchange 2007 SP1 and later only.
13. Key in a Login Name and Password of the user that you created in ‘Preparing Microsoft Exchange Server for use with the GFI MailArchiver Outlook Connector’ section in this chapter of this manual.
14. Key in the credentials for the user with access to all the mailboxes.
NOTE: Specify login name in domain\username format.
15. Click Test access to mailboxes button to text access to mailboxes. If test fails, check credentials and retest.
16. <Optional> Click Add New Policy to create a policy that excludes specific folders from being replicated.
•
Key in policy name and click Next.
•
Add folders to exclude and click Next.
•
To apply new policy to selected users only, select Apply for selected users only option and key the users the users to which this folder applies.
•
Click Next and Finish to finalize new policy setup.
17. Click Save Settings to complete setup.
6.3.3
Microsoft Exchange 2007 SP1
1. Click Start ► Run and key in cmd, and OK.
2. Key in: dsadd user <UserDN> -pwd <Password> -disabled no
Where:
Parameter
Description
<UserDN>
Specifies the distinguished name of the user object to be added.
-pwd
Sets <Password> value.
<Password>
Specifies the password to be used for the user account. If this parameter is set to *, you are prompted for a user password.
•
Example: dsadd user CN=masynch,CN=Users,DC=master-domain,DC=Com -pwd Password1 -disabled no
3. Open the Exchange Management Shell.
4. Run the following Windows PowerShell commandlet:
foreach ($exchangeServer in Get-ExchangeServer)
{
if ($exchangeServer.ServerRole -match 'ClientAccess')
{
Add-ADPermission -Identity $exchangeServer.DistinguishedName -User 'domain\user' -ExtendedRights ms-Exch-EPI-Impersonation
}
}
•
Example:
foreach ($exchangeServer in Get-ExchangeServer)
{
if ($exchangeServer.ServerRole -match 'ClientAccess')
{
Add-ADPermission -Identity $exchangeServer.DistinguishedName -User 'master-domain\masynch' -ExtendedRights ms-Exch-EPI-Impersonation
}
}
Repeat the procedure described above for each mailbox store database required.
5. Navigate to Control Panel ► Administrative Tools and select:
•
Domain Controller Security Policy if GFI MailArchiver is installed on the domain controller
•
Local Security Policy if GFI MailArchiver is not installed on the domain controller.
6. Expand Local Policies and click User Rights Assignment
7. From the right pane, double click Allow log on locally
8. Click Add User or Group and key in the user configured in the GFI MailArchiver Mailbox Synchronization configuration.
9. If GFI MailArchiver is installed on the domain controller, load Microsoft Windows command prompt, and key in gpupdate /force to refresh the local and Active Directory-based Group Policy settings.
10. From the GFI MailArchiver Management Console, expand Configuration node and click Mailbox folder structure retrieval.
Screenshot 153 – Mailbox folder structure retrieval settings
11. Check the Enable mailbox folder structure retrieval checkbox.
12. Select the connection method to Microsoft Exchange:
•
Traditional Message Application Programming Interface (MAPI): Use this option if you are using Microsoft Exchange Server 2000/2003/2007.
•
Exchange Web Services: Use this option if you are using Microsoft Exchange 2007 SP1 and later only.
13. Key in a Login Name and Password of the user that you created in ‘Preparing Microsoft Exchange Server for use with the GFI MailArchiver Outlook Connector’ section in this chapter of this manual.
14. Key in the credentials for the user with access to all the mailboxes.
NOTE: Specify login name in domain\username format.
15. Click Test access to mailboxes button to text access to mailboxes. If test fails, check credentials and retest.
16 <Optional> Click Add New Policy to create a policy that excludes specific folders from being replicated.
•
Key in policy name and click Next.
•
Add folders to exclude and click Next.
•
To apply new policy to selected users only, select Apply for selected users only option and key the users the users to which this folder applies.
•
Click Next and Finish to finalize new policy setup.
17. Click Save Settings to complete setup.
6.3.4
Upgrade old Archive Stores to enable Mailbox Folder Structure Retrieval
Archive Stores from GFI MailArchiver versions 4 or 5 can be upgraded to support Mailbox Folder Structure Retrieval using the Email Hash Generator wizard included with GFI MailArchiver.
NOTE 1: Ensure that the database schema of the Archive Stores are upgraded using the Bulk Schema Upgrader as described in Upgrading the database schema chapter on page 1 of this manual.
NOTE 2: Email messages must be stored in the Microsoft Exchange Mailbox Store for the Email Hash Generator to be effective.
To upgrade old archive stores using the Email Hash Generator wizard:
1. From the GFI MailArchiver machine, navigate to <GFI MailArchiver installation path>\EmailHashGenerator and run HashGenerator.exe.
2. Click Next.
3. Select the type of database used and click Next.
Screenshot 154 – Email Hash Generator Wizard – SQL Server
4. Enter the details of the database selected in the previous step:
•
Microsoft SQL Server database – Specify the name or IP address of the server where the Microsoft SQL Server database is hosted and define the authentication credentials.
•
GFI MailArchiver database and file system – Click Browse to select the path of the GFI MailArchiver Firebird database.
4. Click Next to start updating the database.