Before you install any software, you must:
• Work through the Sizing guide (see Section Sizing on page 22 in Chapter 3 Preparing for installation) to have worked out your disk requirements.
• Choose an Exchange server – the ArchiveOne Service connects to a single Exchange server, which would typically be the server hosting the mailboxes:
• This may be a single on-premises Exchange server
Page 30 of 157
• If you are using Exchange on a clustered environment, then for further information you should check the C2C Support Website at: http://support.c2c.com
• This may be mailboxes in Exchange Online, for which you will need a license which enables the Online Connector
• Choose whether ArchiveOne Service should run on the same Windows 2003 or later system as the Exchange server, or another system. This decision will be based on server loading and LAN bandwidth availability, but installing ArchiveOne Service on a different server is recommended for live running environments.
• If your ArchiveOne installation is going to be connecting to Exchange 2003 and you do not have Exchange System Manager installed on the server on which you are installing ArchiveOne, or it is going to be connecting to Exchange 2007 or later and you do not have Exchange Management Console installed, then you will be able to install but the installation will not be able to automatically create a user and group. In this case, before installation you should create a mailbox-enabled user in Active Directory (the recommended name is “ArchiveOneAdmin”) and a mail-enabled group (a Universal group if available, otherwise a Local group) in Active Directory (the recommended name is “ArchiveOneUsers”). The installation process will make all required configuration changes to this user and group.
• If you are using Exchange Online, you need to have created a mailbox-enabled user (the recommended name is “ArchiveOneAdmin”) and granted it at least ‘receive as’ rights on all Exchange mailboxes to which ArchiveOne will need to log into to process.
• Log into this server as a user that has all the following characteristics. With a default security configuration, a member of the ‘Domain Admins’ groups for all domains involved will have all these rights:
• Is a member of the machine ‘Administrators’ group of the machine on which the installation is taking place
• Is able to update local groups on the machine that is running Exchange (you will have this right if you are a member of the machine ‘Administrators’ group of the machine that is running Exchange)
• Has rights to create an Active Directory user and group
• Has rights to create an Exchange mailbox
• Has rights to set permissions on Exchange objects
If you have some but not all of these rights, you may still be able to install ArchiveOne – see Section Requirements for installation on page 32 in Chapter 4 Installation.
If you already have ArchiveOne already installed on this server, if it is version 5.8 or later you can run the new installation package and it will upgrade the previous installation.
During installation you may be prompted to download an addition component from Microsoft. This will happen if:
• You are using Exchange 2007 or later.
• You are using Exchange 2003 and do not have Exchange System Manager installed.
This component is called “Microsoft Exchange Server MAPI Client and Collaboration Data Objects 1.2.1”. If you prefer, or if the system onto which you are installing has no internet access, this can be downloaded and installed beforehand from:
http://www.microsoft.com/downloads/details.aspx?familyid=E17E7F31-079A-43A9-BFF2-0A110307611E&displaylang=en
Page 31 of 157
If you are connecting to Exchange 2010 this needs to be at least version 6.5.8190.0 and if connecting to Exchange 2013 or Exchange Online this needs to be at least version 6.5.8320.0.
ArchiveOne is distributed as two executables:
• ArchiveOnePreInstall.exe – the pre-installation process which can be run in advance of the main installation. It creates the required user and group and installs the database engine (unless you already have one installed)
• Archive One Setup Enterprise.XXX.exe or Archive One Setup Express.XXX.exe (where XXX represents the version number) – the main installation process which installs all components
These can be downloaded from the C2C Systems web site at:
http://www.c2c.com/
Run ArchiveOnePreInstall.exe – this will ask some questions about your configuration:
• Choose the Exchange server (or CAS array name) or Exchange Online. Some questions will follow.
• Some automated System Health tests will check the configuration of the server. If these report any problems, you should investigate and if necessary cancel the installation.
• Specify a server to be used to host the configuration – on your Exchange server (this option may not be available if you have named a CAS array as your Exchange server), on the local server or onto another server. If you select another server, it must already have a share called “add-ins”
which should be readable and writable by everyone (directories will be created within it with higher security).
• Specify a SQL Server instance for storing configuration data. You can choose to allow ArchiveOne Policy to create a SQL Server Express installation on the local machine, or give details of connection to an existing SQL Server or SQL Server Express instance. Various databases will be created on this instance. You can choose to proceed without specifying a database or allowing one to be installed, but some product functionality will not work.
• Specify a group to be created (the default name is ‘ArchiveOneUsers’) or the name of an existing group. Only members of this group will be allowed to run ArchiveOne administrative tools.
• Specify a user to be created (the default name is ‘ArchiveOneAdmin’) to use as the service account, or the name of an existing user. This account should be kept secure as it will be granted access to mailboxes.
• You may be asked about DCOM security, and you may need to make other configuration changes. See Section Managing DCOM and firewall security on page 44 in Chapter 4 Installation.
Once the installation has completed, you may be requested to restart the system. This will only happen if a file that needs to be installed is already in use.
Then run Archive One Setup Enterprise.XXX.exe or Archive One Setup Express.XXX.exe (where XXX represents the version number) – this will ask standard installation questions, such as where to install the software.
The installation will also ask you which components you wish to install:
• Select ‘ArchiveOne Service’.
Page 32 of 157
• If you have purchased a license for Advanced Discovery, choose the ‘Case Management Service’.
• Select ‘ArchiveOne Policy Admin’ – you can later install ArchiveOne Admin elsewhere as well, if you wish.
• Select ‘Search and Retrieval website’ if you want to install the Search and Retrieval Website on this machine – see Section Choosing a Search and Retrieval Website location on page 24 in Chapter 3 Preparing for installation.
• Select the ‘Quick Link Client installer’ or ‘Laptop Client installer’ if you wish to install packages which can be run on this or other PCs to integrate ArchiveOne into Outlook
• Select ‘PST Client’ if you wish to process PST files on this or other systems
It will also repeat some questions asked during preinstall. Once the installation has completed, you may be requested to restart the system. This will only happen if a file that needs to be installed is already in use.
The installation process will also install the “ArchiveOne Deployment Analyzer” which you can use to evaluate the current system for various ArchiveOne requirements. Running this, either after installation or in the future, may highlight issues in the environment which you will need to address.
Requirements for installation
If you are installing ArchiveOne into a different domain from the domain of the Exchange Server, then the installation process will cope with this as long as you have all the necessary rights (see below) and a two way trust between the domains. If your rights are limited or you have only a one way trust between the domains, you may need to contact C2C support for advice on installation – mail [email protected].
In order for service installation to work, at the very minimum you need the NT user running the installation to be able to be able to install a service on the machine being installed on to (ie a member of the “Domain Admins” group on the domain, or the “Administrators” group for the local machine).
If you cannot meet this condition, and you cannot change your configuration so you can meet these conditions, then you will not be able to install the ArchiveOne Service. These minimum rights also assume that a suitable account and mailbox have been created beforehand (see later). Even if you can meet these conditions, it does not imply that the currently logged in account will be able to run ArchiveOne Admin once you have installed it – see later for that list of conditions.
In order for setup to create the group and account, you need the NT account running the installation to be able to meet all the installation conditions above as well as meet all the conditions on the following list:
• Be able to create an NT global group in the account’s current domain (ie the current account must be a member of the “Domain Admins” group on the domain).
• Be able to create a mailbox-enabled account in the ‘Users’ container in the Active Directory of the domain the Exchange 2000 or later Server is in.
• Have “Administrator” rights on the Exchange Server machine
• Has rights to set permissions on Exchange objects
If you cannot meet all of these conditions will only be able to complete the installation if the group and user accounts have been created for you.
Page 33 of 157
If you do not choose to use an ArchiveOne Users group (this is an installation option), then users who are going to use ArchiveOne Admin (including the user who installed the ArchiveOne Service) need to be able to meet all the conditions on the following list:
• Be able to see the Exchange server’s ‘Add-ins’ share from the machine running ArchiveOne Admin (this share will be created by the ArchiveOne Service if it does not exist). Write permission on this share is required in order for a user to change an ArchiveOne Admin configuration item.
• Be able to see the ‘AOnePol’ directory, and files and subdirectories of it, in the Exchange server’s
‘Add-ins’ share (this will be created by the ArchiveOne Service if it does not exist). Write permission on this directory, and files and subdirectories of it, is required in order for a user to change an ArchiveOne Admin configuration item.
• Be able to log into the ArchiveOne Policy Primary Mailbox – this is the mailbox of the account identified in the installation process.
Group Selection
The ArchiveOne Users group is used to control which users are allowed to use ArchiveOne Admin.
This is optional – if you choose to use an ArchiveOne Users group, it makes configuration of security easier (secure access to all ArchiveOne related objects are controlled through membership if this group) but it means you need to have rights to create a group in the current domain, or you must have created one earlier. If you choose not to use a group, you must set various security settings manually.
This is a global or universal group, which must be in the domain of the account running the installation.
If you opt not to use an ArchiveOne Users group, then once you have completed the installation you must assign rights on the following objects for all users who are to use ArchiveOne Admin.
• The Exchange server’s ‘Add-ins’ share (this share will be created by the installation if it does not exist). Write permission on this share is required in order for a user to change an ArchiveOne Admin configuration.
• The ‘AOnePol’ directory, and files and subdirectories of it, in the Exchange server’s ‘Add-ins’
share (this will be created by the ArchiveOne Service if it does not exist). Write permission on this directory, and files and subdirectories of it, is required in order for a user to change an ArchiveOne Admin configuration.
• Be able to log into the ArchiveOne Policy Primary Mailbox – this is the mailbox of the account identified in the installation process.
Setup will display the default group name. You can choose to proceed using this name or you can enter a different one. If you do not have rights to create a group you must enter the name of the group that has been created for you. If you do not wish to use a group check the “Do not use a group” box.
Also displayed are the name of the domain controller on which the group will be created, and a list of all the domain controllers in the Active Directory site to which the group details will be replicated. If you want the group to be created on a different domain controller you can enter its fully qualified name. You should then click the “Verify” button to confirm that the controller can be contacted and to update the details. You can also deselect any of the controllers from the replication list to prevent Setup from waiting to ensure that the group details have replicated to that controller.
Page 34 of 157
Account Selection
The ArchiveOne Service Account is used by the ArchiveOne Service and ArchiveOne Admin to log into the Exchange server. There must be an ArchiveOne Service Account, created either by the installation or by you. This account must have a mailbox.
Setup will display the default account name. You can choose to proceed using this name or you can enter a different one. If you do not have rights to create an account and mailbox you must enter the name of the account that has been created for you. You must also enter and confirm the password for this account. If you entered the name of existing account, you must enter the current password for that account. If Setup is to create the account, it will be created with this password and the password will be set to never expire.
Also displayed are the name of the domain controller on which the account will be created, and a list of all the domain controllers in the Active Directory site to which the account details will be replicated.
If you want the account to be created on a different domain controller you can enter its fully qualified name. You should then click the “Verify” button to confirm that the controller can be contacted and to update the details. You can also deselect any of the controllers from the replication list to prevent Setup from waiting to ensure that the account details have replicated to that controller. Note that if you choose not to wait for account replication to the domain controller that the Exchange server is using, then the ArchiveOne Service may fail to start, or be unable to login to Exchange. If you choose not to wait for account replication you should deselect the “Start service” option on the Post-install steps screen.
Perform System Preparation
After you have selections for the group and account Set up will display the progress of the operations to create and replicate these objects, as well as the permissions changes necessary for the Archive Policy Service to run. Some of these operations may take a long time depending on the number of domain controllers in the site and the nature of the connection between them. You can, if you wish click the “Ignore” button to allow setup to continue without waiting for group or account replication to complete. If you do this, the option to start the service will be deselected on the Post-install steps page, and you should not attempt to start the service until you have confirmed that replication has completed. Similarly, you can choose to “Skip” the permission changes. If you do this, you will need to make these changes later.
Post-install steps
During the installation, if you chose not to use an ArchiveOne Users group or you chose not to use the Exchange Service Admin account as the account to run the ArchiveOne Service, then there are some permissions settings that you should check or put in place before trying to use ArchiveOne.
If you have chosen not to use an ArchiveOne Users group, you must assign rights on the following objects for all users who are to use ArchiveOne Admin.
• The Exchange server’s ‘Add-ins’ share (this share will be created by the installation if it does not exist). Write permission on this share is required in order for a user to change an ArchiveOne Admin configuration.
• The ‘AOnePol’ directory, and files and subdirectories of it, in the Exchange server’s ‘Add-ins’
share (this will be created by the ArchiveOne Service if it does not exist). Write permission on this directory, and files and subdirectories of it, is required in order for a user to change an ArchiveOne Admin configuration.
• Users who are going to use ArchiveOne Admin must be able to log into the ArchiveOne Policy Primary Mailbox account – this is the account identified in the installation process.
Page 35 of 157
If you have chosen to use an existing account as the ArchiveOne Policy Primary Mailbox account, then any user who is going to use ArchiveOne Admin needs to have rights to log into this mailbox. If you have opted to use an ArchiveOne Users group then you should grant the ArchiveOne Users group rights to log into the mailbox.
You will be asked at the end of the system preparation whether you want the ArchiveOne Service to be started for you. If you know the above rights are all correctly assigned, you can choose ‘yes’ to start the ArchiveOne Service. If you are in any doubt, you should choose ‘no’, finish the installation, check and correct the rights, then use ‘Services’ in Control Panel or Computer Manager to start the service called ‘ArchiveOne Service’.
If you are using any non-Microsoft-standard document formats, such as Adobe Acrobat PDF files, you may also wish to install filters to enable ArchiveOne to index words from these documents (to enable you to search for words in them). ArchiveOne uses the Microsoft IFilter interface (as used by Microsoft Indexing Service) so you should ask the producers of your non-standard files if they have an IFilter DLL.
Not all versions of Adobe PDF IFilter are installed on all versions of Window. See Section Supported versions of Adobe PDF IFilter on page 139 in Appendix A Supported Configurations for supported versions.
Windows natively has IFilters for old style Office documents such as ‘.DOC’ files, but not for new style Office documents such as ‘.DOCX’. In order to process these, you must install a filter pack such as the Microsoft Office 2010 Filter Pack – see the following webpage:
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=5CD4DCD7-D3E6-4970-875E-ABA93459FBEE
The ‘ArchiveOne Service’ should now be running – you can run Computer Management and then select Services to confirm this. If it is not running, check in the Event log for errors and try to re-start
The ‘ArchiveOne Service’ should now be running – you can run Computer Management and then select Services to confirm this. If it is not running, check in the Event log for errors and try to re-start