2003 and Windows 2000
Read this chapter to find out:
• What you must do before installing Enterprise Vault on Windows Server 2003 or Windows 2000
Recommendation You are recommended to back up your system disk before installing Enterprise Vault.
Before installing Enterprise Vault you must:
• Create the Vault Service account for the Enterprise Vault site and give it permissions on the Microsoft Exchange Server computer. You must also create a SQL login for the Vault Service account. See Creating the Vault Service account on page 48.
• Create the Vault Site alias, as described in Creating the Vault Site alias on page 52.
Creating the Vault Service account
48 Preinstallation tasks on Windows Server 2003 and Windows 2000
Creating the Vault Service account
Note that, on Windows Server 2003 and Windows 2000, it may take some time for the Vault Service account to be registered in the Active Directory® for the computer that is going to run Enterprise Vault. The account cannot be used until the registration is complete. The length of the delay depends on how Exchange is set up to replicate recipient information.
To create the Vault Service account:
1. Click Start, Programs, Administrative Tools, Active Directory Users and Computers.
2. In the left-hand pane of Active Directory Users and Computers, double-click the Domain container.
3. Double-click the Users container.
4. On the Action menu, click New and then User. The New Object - User screen is displayed.
5. Complete the New Object - User screen and click Next. The next screen asks for password details.
6. Enter a password and confirm it. You must set a password; the Vault Service account password cannot be blank.
7. Select the Password never expires checkbox.
8. Leave the remaining checkboxes clear:
User must change password at logon User cannot change password Account is disabled
9. Click Next to move to the mailbox server screen.
10.Complete the details and click Next to move to the summary screen.
11.Click Finish to create the new user.
12.In the right-hand pane of the Active Directory Users and Computers screen, right-click the user you just
Creating the Vault Service account
Preinstallation tasks on Windows Server 2003 and Windows 2000 49 created and, on the shortcut menu, click Properties. The properties screen appears.
13.Click the Member Of tab.
14.Click Add.
15.Click Administrators and then click Add. 16.Click OK to close the Select Groups screen.
17.Click OK, to close the user properties screen.
Assigning Microsoft Exchange Server permissions
You must give the new Vault Service account Exchange FullAdministrator Microsoft Exchange Server
Permissions.
To do the following tasks, you must have Exchange administration privileges.
On Microsoft Exchange Server 2003:
1. Click Start, Programs, Microsoft Exchange, System Manager.
2. In the left hand pane, right click your Exchange Organization and select Properties.
3. Select Display Administrative Groups. Click OK and Administrative Groups are displayed in the left hand pane.
4. Expand Administrative Groups and then First Administrative Group.
5. Right click First Administrative Group and select Delegate Control Wizard.
Note: If you want to use the one Enterprise Vault Service account across multiple Exchange servers in your organization, you need to launch the Delegate
Creating the Vault Service account
50 Preinstallation tasks on Windows Server 2003 and Windows 2000
Control Wizard at Organization level, i.e. right click your Organization instead of First Administrative Group. 6. Click Next.
7. Click Add and click the Browse button to list users in Active Directory.
8. Find the new Vault Service account in the list of users and click OK.
9. In the drop down Role box select Exchange Full Administrator.
10.Click Next and then Finish.
If a dialogue appears reminding you to add the Enterprise Vault Service account into the Local Administrative Group, click OK.
The Vault Service account needs to be able to access mailboxes. On Windows Server 2003, this permission needs to be granted explicitly as follows:
1. Expand Administrative Groups, then First Administrative Group, then Servers. Select the Exchange server from the list.
2. Right click your Exchange server object and select Properties.
3. Select Security Tab.
4. From the list of users under the Name box find the Enterprise Vault Service account and select it.
5. Click Advanced to open the Advanced Security Settings for Exchange Server window.
6. Click the Permissions tab.
7. Click Add and select the Enterprise Vault Service account from the domain user list.
Click OK to add the account.
8. Permission Entry for Exchange Server window will open.
In the Allow column, select Receive As and Send as.
Creating a SQL login
Preinstallation tasks on Windows Server 2003 and Windows 2000 51 Click OK, to return back to Advanced Security Settings for Exchange Server window.
9. Click Apply and then OK to update these permissions for the Enterprise Vault Service account.
You return to the Exchange Properties window.
10.Click OK to close Properties window.
11.Close System Manager.
If you later add another Exchange server to the same Administrative Group, you need to repeat these steps on the new server to enable mailbox access for the Vault Service account.
On Microsoft Exchange 2000 Server:
1. Click Start, Programs, Microsoft Exchange, System Manager.
2. Expand the Servers container.
3. Right-click your Exchange Server and, on the shortcut menu, click Properties.
4. Click the Security tab.
5. Click Add.
6. Double-click the Vault Service account to add it to the list.
7. Click OK to go back to the Security tab. The Vault Service account has been added to the Name list.
8. In the Name list, click the Vault Service account.
9. In the Permissions list, make sure that all checkboxes in the Allow column are selected. Select any
checkboxes that are not already selected.
10.Click OK.
Creating a SQL login
You must use SQL Enterprise Manager to create a SQL login for the Vault Service account, as follows:
Creating the Vault Site alias
52 Preinstallation tasks on Windows Server 2003 and Windows 2000
1. Click Start, Programs, Microsoft SQL Server, Enterprise Manager.
2. Expand the SQL Server container.
3. Click Security.
4. Right-click Logins and, on the shortcut menu, click New Login.
5. Enter or select the name of the Vault Service Account.
For example, domain\vaultadministrator 6. Check that Windows Authentication is selected and
that the correct Domain for the account has been selected.
7. Under Security Access check that Grant access is selected.
8. On the Server Roles tab, select Database Creators. 9. Click OK.
Creating the Vault Site alias
To create a DNS alias, you need administration privileges to run DNS manager on your Primary DNS server. You must then assign a DNS alias to the IP address of the Vault Directory computer you are using to configure the new Enterprise Vault site. Give the alias a meaningful name so that you know to which Enterprise Vault site it relates.
What next?
Go to Installing Enterprise Vault on page 53.
53