Setting up data collection from your Local Domain Exchange source requires the following steps:
1. Create an Admin Account* for Exchange Mailbox Discovery and Collection 2. Discover mailboxes using Active Directory Discovery and import custodians 3. Add the Local Domain Exchange source to your data map
4. Test an Exchange mailbox collection
Note: For the purposes of this setup, the domain user account is referred to as “Admin Account”.
Continue with the following steps:
• “Step 1: Create a New Domain Admin Account” on page 37
• “Step 2: Perform Active Directory Discovery and Import Custodians” on page 40
• “Step 3: Add Exchange Source to the Data Map” on page 41
• “Step 4: Test an Exchange Mailbox Collection” on page 42
Step 1: Create a New Domain Admin Account
To create a new domain account
1. In your Windows interface, open All Programs [or for newer versions: Control Panel] >
Administrative Tools > Active Directory Users and Computers.
2. Click to expand the domain, then right-click Users and select New > User.
3. Enter the name and logon information for the Clearwell Exchange Collection admin.
4. Click Next.
5. Enter a Password and select (only) the option Password Never Expires, then click Next.
6. Clear the option to create an Exchange mailbox. (An Exchange mailbox is not required), then click Finish to create the admin account.
Continue with next steps to set up your admin account permissions, depending on your mailbox setup.
1a: Set up Exchange Local Account Permissions
Collecting from mailboxes in a Local Exchange server requires setting up a domain account with appropriate Exchange security permissions.
The "Admin Account" MUST be:
• a Domain User for the enterprise domain
• a Local Administrator on the Clearwell appliance
• able to access and collect the target mailboxes (see below for access provisioning)
• able to write to the Preservation Destination
Choose one of three options depending on how you want to set up the Admin Account:
• Option 1: Give "Admin Account" Access to Individual Target Mailboxes
• Option 2: Give "Admin Account" Access to a Store of Mailboxes
• Option 3: Run a PowerShell Script to Automate Running Multiple Mailboxes Option 1: Give "Admin Account" Access to Individual Target Mailboxes
1. Open the Exchange Management Console on your Exchange Server, then select the target custodian mailbox(es) from the listed mailboxes.
2. Select the option to Manage Full Access Permission…
3. The Manage Full Access Permission window opens.
4. Click Add to the "Admin Account" and grant access.
Setting up Data Sources: Local Domain Exchange Setup PAGE: 39
5. Click Manage. A confirmation screen appears. Ensure that the following permissions are available to the "Admin Account":
– Open mail send queue – Execute
– Read metabase properties – Read permissions
– Read properties – Receive as
Option 2: Give "Admin Account" Access to a Store of Mailboxes
Exchange allows mailboxes to be grouped under Storage Groups and Stores. You can give the Clearwell "Admin Account" access to an entire Store or Storage Group, and Clearwell will be able to access all of the contained mailboxes.
In addition to the permissions listed for Managing Full Access, in Option 1, also give the "Admin Account" the following five permissions:
• List contents
• List objects
• Create name properties in the information store
• Administer information store
• View information store status
Note: Note: Ensure that any inherited permissions for this account do not take precedence and inadvertently deny these permissions.
Option 3: Run a PowerShell Script to Automate Provisioning Many Mailboxes
Follow the steps for Option 1, then repeat for multiple mailboxes by using a PowerShell script.
This script should mirror the syntax shown on the confirmation screen when using the Exchange Management Console to set permissions.
Exchange Management Shell Command Completed:
'DOMAIN\ADMINUSER' -AccessRights 'FullAccess'-InheritanceType all
Step 2: Perform Active Directory Discovery and Import Custodians
Given the domain(s), Clearwell will perform an Active Directory discovery for mailboxes and groups. The admin can provide credentials that this discovery will perform as, or Clearwell will default to using its Application Service credentials.
In addition to discovering mailboxes, Clearwell looks for specific patterns or attributes to determine on which servers these mailboxes reside.
Once Active Directory completes, you can import custodian data.
To perform Active Directory discovery
1. Log on to the Clearwell appliance using "Admin Account" (the Domain user).
2. In the Clearwell interface, in the All Cases view, click System > Email Servers.
3. From the drop-down menu, select Active Directory.
4. To add a new domain, click Add Domain then enter the domain name, and the administrator user name and password, and click Save.
5. When ready, click Start Discovery. This automatically detects the appropriate domain, and performs Active Directory discovery.
Technical Note: This function checks for domains which contain the Clearwell appliance.
Once the domain is detected, Clearwell used the logged in account ("Admin Account") to discover servers, mailboxes, and groups from Active Directory. Typically, this should automatically discover the same Active Directory domain used by BPOS Exchange (if applicable).
Troubleshooting: In rare cases, the desired domain may not be automatically discovered.
For example, if the enterprise has legacy domains that may have been consolidated or deleted. In this case, you can manually enter your enterprise domain and account credentials by clicking Add Domain on the System > Email Servers screen.
6. When the Active Directory discovery is complete, the System > Email Servers > Active Directory screen displays servers, users, and groups that have been discovered.
Setting up Data Sources: Local Domain Exchange Setup PAGE: 41
To import the Employee List from Active Directory 1. From the All Cases view, click Employee List.
2. From the Employee List, click Import and select Import All from Active Directory (imports all custodians at once).
Note: Selecting "Import from Active Directory" (not "All") displays only the first 100 custodians at a time. Use the Filter List menu to view by Custodian, User Name, or E-Mail Address and apply additional filter parameters.
For more details, refer to the section "Importing Custodians to Your Data Map" in the Identification and Collection Guide.
Step 3: Add Exchange Source to the Data Map
To add the Local Exchange source to your data map 1. In the All Collections module, click Sources.
2. On the Sources screen, click Add.
3. Enter a name for your Exchange source. Use the “Admin Account” you set up in “1a: Set up Exchange Local Account Permissions” on page 38.
Note: If you leave the Account field blank, Exchange collections will run using the ESAApplicationService account permissions.
4. When finished, click Save.
Step 4: Test an Exchange Mailbox Collection
To test the collection of a mailbox
1. In the All Collections module, click Collections. (In a selected case, Collections > Sources.) 2. Click Add to add a new collection.
3. On the Add Collection dialog, enter a name, destination, and click Save.
4. From the Collect screen, click Add to add a task to the selected collection.
5. On the Sources dialog, select the Exchange source type you just created and click Select.
6. In the Mailbox tab under Filtering, select a target mailbox you want to test, then click Save and Start.
For more information about adding collections and tasks, refer to the section "Creating and Managing Collections" in the Identification and Collection Guide.
Setting up Data Sources: BPOS Exchange/Office® 365 Setup PAGE: 43