How To Use Gree On A Windows 7.5 (Windows 7) Or 7.7 (Windows 8) (For A Non-Procedure) (Windows) (Or 7.1) (Ahemmer) (Powerpoint

29 

Loading....

Loading....

Loading....

Loading....

Loading....

Full text

(1)

Exchange

StorageCraft Copyright Declaration

StorageCraft ImageManager, StorageCraft ShadowProtect, StorageCraft Cloud, and StorageCraft Cloud Services, together with any associated logos, are trademarks of StorageCraft Technology Corporation in the United States and elsewhere. All other brands and product names are or may be trademarks or registered trademarks of their respective owners.

(2)

2

3

4

5

7

8

9 13

15

18 19

21

21 22 22 23 25 26 26 28

28

Table of Content

1 GRE System Requirements

2 Installing GRE

2.1 Licensing

3 Configuring GRE

4 Configuring Exchange Permissions

4.1 Exchange Service Account Setup

4.2 Alternate Exchange Service Account Setup

5 Understanding the GRE User Interface

5.1 GRE Settings 5.2 Search Operations

6 Recovery Operations

6.1 Mounting ShadowProtect Images 6.2 Restricted Mode

6.3 Selecting the Source 6.4 Selecting a Target 6.5 Target Management 6.6 Restore

6.7 Mailbox Migration 6.8 Export Operations

(3)

ShadowProtect Granular Recovery for Exchange

Welcome to Granular Recovery for Exchange (GRE). This product enables you to mount StorageCraft backup image files that contain Microsoft Exchange server database files. It provides a browser user interface (Windows Explorer-like) to search for, export (to a separate file), or restore (back to a live Exchange server) individual emails, email folders or entire mailboxes.

This document explains: How to install GRE How to configure GRE

How to understand the User Interface

How to perform Recovery operations

The document also includes:

Frequently asked questions

A dditional Resources:

The GRE ReadMe contains the most up to date list of enhancements, known issues and fixed bugs.

1 GRE System Requirements

System Requirements

GRE has the following mininum software and hardware requirements:

Component Requirement

Operating

System Windows 7 (64-bit) Windows 8 (64-bit)

Windows Server 2008 R2 (64-bit) Windows Server 2012 R2 (64-bit)

Note: GRE should not be installed on an Exchange server (this includes Small Business Server). This is not a supported

configuration.

RA M 2 GB Minimum, 4 GB recommended. Drive Space Program space:

You need at least 65 MB free to install GRE. Data space:

You need free space that totals at least 110% of the space used by your combined database files. Processor A ny processor that runs the compatible operating

systems. Multiple processors will improve performance.

Other Hardware

A mouse is required for some of the operations. For example:

To delete mailboxes or emails that you've restored you must use the mouse instead of the del key on the keyboard.

Virtual Machine

Virtual machines can be used if they meet the System Requirements listed above.

(4)

A pplication StorageCraft GRE requires the following files (which are not included with the GRE installation):

eseutil.exe ese.dll exchmem.dll

jcb.dll (for Microsoft Exchange 2003 or 2007 recovery)

exosal.dll (for Exchange 2003 recovery) Get these files from the Exchange server and copy them to the folder where GRE is installed.

See Configuring GRE for Exchange version specific details.

MA PI Install 32-bit or 64-bit Outlook (2007 SP3 or newer).

Note: GRE uses the MA PI components installed with Outlook (trial or licensed). Licensing See Licensing.

Important: StorageCraft GRE requires an active internet connection for initial license activation, and license validation each time you launch GRE.

Note: GRE can't run from the IT Edition USB key (on a Hyper-V guest machine)

because Microsoft Hyper-V doesn’t support USB pass through. Lack of USB pass through prevents ShadowProtect IT Edition license verification. Microsoft Exchange Sources: Exchange 2003, 2007, 2010, 2013 Targets/destinations:

PST files, Exchange 2003, 2007, 2010 and 2013, and can be exported to msg/txt files.

Rights You must have local admin rights to run GRE. The GRE Mount Wizard is installed with GRE to ensure that all users have the ability to mount (WRITA BLE) and dismount ShadowProtect images and access EDB files.

To restore items directly to an Exchange environment you must have the proper Exhange system/domain rights.

2 Installing GRE

To Install GRE

1. Open a browser.

2. Download the GRE installation file. 3. Run ShadowProtect_GRE_Setup.exe.

Not e: If you see an Unknow n Error message during inst allat ion, reboot t he comput er and rest art t he inst allat ion.

(5)

To Update GRE

To update GRE (install a newer version of GRE) simply run the installer for the new version.

Not e: T here is no programat ic w ay t o upgrade from GRE version 6 t o t he new er versions. Y ou must uninst all version 6 t hen inst all t he new version.

To Repair GRE

1. Use the Microsoft Control Panel interface and select "Uninstall a Program". 2. Find GRE in the list then click uninstall/change.

3. Choose the repair option and complete the process.

To Uninstall GRE

1. Use the Microsoft Control Panel interface and select "Uninstall a Program". 2. Find GRE in the list then click uninstall/change.

3. Select uninstall.

2.1 Licensing

Licensing Models

StorageCraft has two GRE licensing models:

StorageCraft ShadowProtect Granular Recovery for Exchange (EDBs that are part of a ShadowProtect backup) Requires a mounted ShadowProtect Image

MSP Portal Subscription version

StorageCraft Granular Recovery for Exchange (EDBs that are independent of a ShadowProtect backup) Does not require a mounted ShadowProtect Image

Not available via the MSP Portal IT Edition uses this version

Both models are also offered in Perpetual and Project License versions.

To Purchase a GRE license

GRE license purchase options:

Project (unlimited mailboxes, short term projects - 60 days) 250 (GRE can manage 250 mailboxes)

Unlimited (GRE can manage an unlimited number of mailboxes) GRE license types:

(6)

*Node locked (any EDB can be opened but the license can only be installed on a specific single machine.) Server bound (only EDBs from a specific Exchange server can be opened with the server bound license.) DA G (EDBs from any Exchange server in the DA G can be opened with a DA G license.)

*Node locked means that the license is dedicated for the specific machine where it is installed. It is not for a particular server name. When you configure a license on the License portal you can enter the ComputerIdentity for the computer the license corresponds to otherwise the license will be locked to the first machine that installs it using the GRE license download functionality. The

ComputerIdentity can be obtained by running GRE on the target machine and then going to the licenses subfolder in the GRE data folder (default location is C:\ProgramData\StorageCraft\GRE\Licenses\ComputerIdentity.txt) and copying the contents of the ComputerIdentity.txt file.

Note: StorageCraft Granular Recovery for Exchange (for Exchange 2013) requires a separate license for each EDB.

To configure and download licenses

Retail

Licenses must be configured in the ShadowProtect Granular Recovery for Exchange Portal prior to downloading the license. 1. Enter the Product Key. This takes you to the GRE licensing page.

2. Enter your name, company name, email settings, and server name, then click Save Configuration. 3. For DA G licenses, enter the server name for each additional server in the DA G

Note: You need to buy a separate GRE license for each Exchange server in your DA G. A fter purchasing the licenses, contact StorageCraft support to combine the licenses into a single key for all the servers in your DA G..

MSP

Licenses must be purchased through the MSP portal. You must add one GRE product key per Exchange server. StorageCraft configures the MSP licenses based on the actual server names entered when adding the product key.

Note: Be sure to enter the server name accurately, or select your server from the drop down list in the MSP portal. This ensures that the server bound license is linked to your specific server.

To automatically download the license

1. Launch GRE.

2. Navigate to GRE>Help>Licensing>Download License. 3. Enter the product key.

To manually download and install the license

1. Click Download on the Success page and save the file.

2. Copy the downloaded license to the licenses subfolder in the GRE data folder. The default location is: C:\ProgramData\StorageCraft\GRE\Licenses\

3. If GRE is not running, start GRE to automatically find the license. GRE automatically finds the license the next time it starts. 4. If GRE is running, navigate to GRE>Help>Licensing and click Refresh Licenses.

Refreshing Licenses

In the licensing dialog you will see the licenses that pertain to your system. The "Refresh Licenses" functionality refreshes the screen A ND communicates with the licensing server and refreshes the actual licenses list. Licenses that don't pertain to your system (i.e. it won't work) are visible in the folder but not in the dialog.

Note: Each Public mailbox decrements your license count. However, public folders inside a public mailbox don't decrement your license count.

To Manage Licenses

(7)

The left window lists the installed licenses

The right window contains information about the license selected in the left window.

3 Configuring GRE

Several Microsoft Exchange Server management files (ESEUTILS) are used to check and repair EDB files (prior to use if necessary). The Exchange Server management files must be manually copied from the Exchange Server folder to the installed GRE folder (applicable for your system) as specified below.

For GRE running on ShadowProtect IT Edition, copy the files to: <IT drive>:\GREUtils

For GRE installed on a specific computer, copy the files to: <GRE install folder/Exchange version folder name>

GRE Install Folder Default Locations

The default GRE install folder locations are:

%SystemDrive%:\Program Files\StorageCraft\GRE (default for GRE if you have 64-bit Outlook) %SystemDrive%:\Program Files (x86) \StorageCraft\GRE (default for GRE if you have 32-bit Outlook) The default data file location is:

%SystemDrive%:\ProgramData\StorageCraft\GRE (default data file location for both 32-bit and 64-bit GRE)

Not e: ProgramDat a is a hidden folder on t he syst em volume t hat cont ains program dat a files. T hese dat a files can be moved from t he default locat ion if your syst em volume has limit ed free space.

Using Exchange 2003 EDB files with GRE

To recover folders or messages from Exchange 2003 EDB files

1. Get a copy of the following files from the Exchange 2003 Server bin directory: ESEUTIL.exe

ESE.dll EXCHMEM.dll JCB.dll EXOSA L.dll

Not e: T he default bin direct ory locat ion for Exchange 2003 is C:\Program Files\Exchsrvr\bin\

(8)

Using Exchange 2007 EDB files with GRE

To recover folders or messages from Exchange 2007 EDB files

1. Get a copy of the following files from the Exchange 2007 Server bin directory: ESEUTIL.exe

ESE.dll EXCHMEM.dll JCB.dll

Not e: T he default bin direct ory locat ion for Exchange 2007 is C:\Program Files\Microsoft \Exchange Server\bin\

2. Save the copy of the files to <GRE install folder location>\ese2007\.

Using Exchange 2010 EDB files with GRE

To recover folders or messages from Exchange 2010 EDB files

1. Get a copy of the following files from the Exchange 2010 Server bin directory: ESEUTIL.exe

ESE.dll EXCHMEM.dll

Not e: T he default bin direct ory locat ion for Exchange 2010 is C:\Program Files\Microsoft \Exchange Server\V14\bin\

2. Save the copy of the files to <GRE install folder location>\ese2010\.

Using Exchange 2013 EDB files with GRE

To recover folders or messages from Exchange 2013 EDB files

1. Get a copy of the following files from the Exchange 2013 Server bin directory: ESEUTIL.exe

ESE.dll EXCHMEM.dll

Not e: T he default bin direct ory locat ion for Exchange 2013 is C:\Program Files\Microsoft \Exchange Server\V15\bin\

2. Save the copy of the files to <GRE install folder location>\ese2013\.

Additional Information

See Microsoft's KB article "How to use eseutil.exe" for additional information.

4 Configuring Exchange Permissions

To Set up Exchange service accounts for use with GRE (Optional)

To restore e-mail content directly to a Microsoft Exchange Server you need to configure Exchange administrative permissions as described on the following pages:

Exchange Service A ccount Setup

(9)

4.1 Exchange Service Account Setup

Configuring Exchange Server Service Accounts

Complete the steps in this section for all supported versions of Exchange server.

This is the preferred method to configure Exchange service account permissions for use with StorageCraft GRE. 1. In A ctive Directory Users and Computers (A DUC) create a new user.

The new user is the name of your service account for the Exchange environment.

2. Create a mailbox for the service account user and login to the account at least once to initialize the mailbox. 3. Open the A ctive Directory® Service Interfaces Editor (A DSI Edit or adsiedit.msc).

This can be installed from the Windows OS install media. (\support\tools\suptools.msi) 4. Navigate to the folder shown below then Right click and select Properties.

(10)

6. Click Advanced.

7. Click Add.

8. In the Enter the object name to select field, enter the username of the service account created earlier. This is the name of the new user created with A DUC in step 1.

(11)

10. Click OK when finished finding & validating the service account name. 11. This window is now shown:

12. In the Object Permissions window, find and check the Allow box for Full Control. 13. Click OK to accept new permissions.

14. Click OK again. 15. Click OK again.

Not e: Aft er you creat e a service account (by changing permissions), you need t o rest art t he Exchange Informat ion St ore service on t he Exchange servers for t he permissions t o t ake effect . T he Informat ion St ore service is on t he Server(s) w it h t he Mailbox role.

Additional Configuration Instructions for Exchange 2010 or 2013

Complete the additional steps in this section for Exchange 2010 or 2013 servers.

Note: For mixed environments you need a service account for Exchange 2013 (if part of the environment) and a separate service account on one of the legacy Exchange servers (Exchange Server 2010 or 2007).

To set up Exchange 2010 or 2013 service accounts rights using RBAC

1. In A ctive Directory find and select the Microsoft Exchange Security Group OU. 2. On the right side, double click Orginization Management.

3. Click the Members tab.

4. Select the name(s) to be assigned admin rights. 5. Click Add.

(12)

Additional Configuration Instructions for Exchange 2003 (non-mixed)

1. Open Exchange System Manager.

2. Right Click on the top Exchange organization item. 3. Choose Delegate Control.

4. Click Next.

5. Click A dd.

6. Change the Role to Exchange Full A dministrator. 7. Click Browse to select a User.

(13)

8. Click OK after you select the User A ccount.

9. Click OK to finalize the user selection.

10. Click Finish to finalize choosing Delegate A dministrative access configuration.

4.2 Alternate Exchange Service Account Setup

This is A lternate method (less preferred) for setting up service accounts. Use this method if the other methods don't work. In order to access and recover to Exchange mailboxes with ShadowProtect Granular Recovery for Exchange, the account running Granular Recovery for Exchange MUST have FullA ccess to the target mailbox(es). Below are several PowerShell commands that can be run to help enable users to access mailboxes. These scripts must be run through the Exchange Management Shell console. A dditionally, the user running the Exchange Management Shell must be an Exchange administrator and have the appropriate Exchange permissions to run these cmdlets.

A Note on Exchange Permissions

There are several things that need to be understood regarding the Exchange permissions and how they relate to an A ctive Directory environment. By default, the permissions of some domain-level accounts (i.e default A dministrator A ccount) have explicit DENY attributes assigned to all mailboxes (except their own) within the Exchange schema. This differs depending on the versions of Exchange and A ctive Directory. Exchange 2007 and Exchange 2010 have will exhibit this behavior.

In order to utilize the ShadowProtect Granular Recovery for Exchange tool, the credentials used to access the mailboxes must have FullA ccess rights to the mailbox they wish to manipulate. Just because the user is the Domain A dmin account, it DOES NOT mean that they have rights to other mailboxes in the Exchange schema. It is therefore recommended to create a service account for use with ShadowProtect Granular Recovery for Exchange to allow a specific user account to gain FullA ccess to all the Exchange mailboxes. This will enable access while still maintaining security across the domain-level accounts.

Scripts

These scripts should be used with caution and should be run by the Exchange administrator or the end-user responsible for maintaining the Exchange in the organization. These scripts are provided for the benefit of simplifying the configuration process

(14)

PowerShell Script One

The following script will add FullA ccess rights to the specified mailbox for the specified user. The following command will only affect the specified user mailbox. It is recommended to use this script to test on a single mailbox before modifying all mailbox permissions.

Add-MailboxPermission -Identitiy <mailboxname> -User <Domain Account> -AccessRights FullAccess

Example: To add the FullA ccess permission to the BobWatanabe mailbox for the StorageCraft Domain ShadowProtect Granular Recovery for Exchange service account the syntax would be as follows:

Add-MailboxPermission -Identitiy bobwatanabe -User StorageCraft\Administrator - AccessRights FullAccess

*This command does not appear to take time to propagate throughout the A D environment and should immediately allow access as long as the user does not have any Deny rights inherited from an A D group.

The following script will set the permissions an entire Exchange database:

Get-mailbox –Identity “<database>” | Add-MailboxPermission –User <Domain Account> -AccessRights FullAccess

Example: To add the FullA ccess permission to all mailboxes on the Exchange database for the StorageCraft ShadowProtect Granular Recovery for Exchange service account, the syntax would be as follows:

Get-Mailbox –Identity “mailbox database 1583061650” | Add-MailboxPermission –User StorageCraft\ShadowProtect Granular Recovery for Exchange -AccessRights FullAccess

PowerShell Script Two

The following script may be required to allow access to all mailboxes and has been needed in addition to the

add-mailboxpermission cmdlet above. This is a “server-wide” cmdlet as it can be applied to all databases in the Exchange domain. You will need to run this for each database you want to modify permissions for.

Get-MailboxDatabase -Identity “[mailbox database name]” | Add-ADPermission -User [username] -AccessRights GenericAll

Example: To enable our StorageCraft ShadowProtect Granular Recovery for Exchange service account GenericA ll access to the Exchange database, the command would be as follows:

GetMailboxDatabase Identity “mailbox database 1583061650” | AddADPermission User StorageCraft\administrator -AccessRights GenericAll

PowerShell Script Three

If a service account is not being used, this script will be needed to remove the DENY attribute on built-in domain A dministrator account in A ctive Directory. This script provided below to remove the DENY attribute on domain-level accounts (and groups) should be used with caution and knowledge that this is a potential security concern as it will allow the accounts to have full access to A LL mailboxes in the Exchange domain organization.

Get-OrganizationConfig | Remove-ADPermission -User <Domain Account> -AccessRights ExtendedRight -ExtendedRights

Receive-A s –Deny

Example: To remove the Deny permission for the domain-level administrator account in the StorageCraft domain, the command would be as follows:

GetOrganizationConfig | RemoveADPermission User StorageCraft\administrator AccessRights ExtendedRight -ExtendedRights Receive-As –Deny

*This command will take time to propagate throughout the domain A D environment, so it may take some time to verify if the command was successful or not. A dditionally, you can use this command for A D groups as well. If the Group name contains a space, be sure to encapsulate the domain\groupname in quotes.

Example: “StorageCraft\ Enterprise Administrators”.

Other Useful Scripts

The following are scripts that are useful in troubleshooting and verifying Exchange settings and mailbox information.

This script will show the permissions for all users on the specified mailbox. This is useful for verifying and checking to see what permissions the A D users and groups have to the specific mailbox.

Get-mailboxpermission –identity <mailboxname>

(15)

Get-mailboxdatabase

Important: It is not the responsibility of StorageCraft employees to validate or be responsible for repercussions in modifying the rights and permissions of users in the Exchange environment.

5 Understanding the GRE User Interface

The GRE user interface allows you to view, restore and export Exchange email information from sources such as Exchange EDB files (Exchange 2003 - 2013) or mounted ShadowProtect backup image files.

The user interface consists of menu options and the information windows.

Menu Options

File

Open Source EDB Open Target Export Selection View License String Quit

Tools

Hide Preview Search Source

Generate Exchange 2013 License Keys Settings Help Online Help Licensing A bout Information Windows

Source Selection (top left and top middle windows) Target Selection (bottom left and bottom middle window) Message Preview (right window)

Source Selection

The source selection directory (top left window) The source email selection (top middle window) The message preview (right window)

Target Selection

The target selection directory (bottom left window) The target email selection (bottom middle window) The message preview (right window)

(16)

Source Selection Directory

The top left window is the source selection window from a selected EDB file.

Drilling Down in the Directory Tree

You can drill down through this directory tree to select a folder or an individual email:

Message Preview

A preview of the email or message selected in the source or target window displays in the right window. This is the preview window:

(17)

Viewing Entire Messages

If you see the error shown in the Note below, use GRE's Export function to view the entire message.

Note: If the body of an email is too large, the preview will not show the message. Instead you'll see the following error:

Target Selection Directory

The lower left window is the target selection window.

The functionality is the same as the source selection window. Select an email or message in the selection window to display the details in the target preview window. The maximum message length limitation is the same for the target messages as for source messages.

Note: If the body of a target email is too large, it can't be exported for viewing. You must use an email client such as Outlook to view the message.

(18)

5.1 GRE Settings

GRE Settings are found under Tools > Settings. This menu allows you to change settings for: Restoring Duplicates

Security Log files PST files

Restoring Duplicates

If duplicate messages are found on the target, GRE can: Create a duplicate message (fastest)

Skip the source message (ignore and don't copy the message) Overwrite the target message (slowest)

Security Settings

A llow BCC fields to be shown and restored

Confirmation Settings

A lways confirm restoration location (check the box to always confirm restoration location) A lways confirm migration location (check the box to always confirm the migration location)

Logging

The log file size limit defaults to 1 MB. A new log file is automatically created when the log file reaches the specified file size limit. The new (active) log file always retains the original file name. The log files that have reached the file size limit are renamed and saved by GRE. Typically it isn't necessary to have log files larger than the default size.

(19)

Microsoft recommends 20 GB as the maximum PST file size. If the "A llow creation of additional PST files when size limit is exceeded" box is checked, GRE creates a new PST when the file size limit is reached. If the box is not checked GRE stops the restore.

Temporary Database Settings

The default temporary database location is C:\ProgramData\StorageCraft\GRE\. You can choose any convenient temporary database location.

To restore the default location:

1. Clear the field (delete all text and leave the entry window empty). 2. Click Save.

Reset all Defaults

To restore all default settings click Reset all Defaults.

5.2 Search Operations

GRE offers Basic and A dvanced search options and two search modes. Basic and A dvanced search functionality is availble in both search modes. The search modes are:

Search A ll Sources

Search specific objects such as a single mailbox or folder.

Note: Search results appear at the top of the Source selection window. Each new search creates a separate search result entry in the list. Select a search result entry from the list to display the messages that meet the search criteria.

Basic

The Basic search dialog:

The Basic search tab lets you:

(20)

Advanced

GRE's A dvanced Search dialog:

The A dvanced search tab lets you Match all fields or Match any field to search for the specified terms: Body Subject From To CC or BCC A ttachment Name By Date scope limiters Sort Order

Supported and Unsupported Search Characters

GRE supports most alphanumeric characters in the search field except those listed below: A mpersand: @

Percent: %

Punctuation: periods, commas, quote marks, etc.

For example, in a search for an email address such as John.Doe@somecompany.com, GRE conducts the search for "John" "Doe", "somecompany" and "com".

GRE Search Phrase Functionality

1. When a search phrase is entered in GRE: A ll text is converted to lower case

A ll entries are converted to canonical compatible Unicode equivalents GRE adds a space in front of any word beginning with a letter or number.

Not e: Adding a space provides support for languages t hat don’t t ypically use w hit espace (for example: Asian languages). T his allow s using a w hit espace t o separat e w ords.

2. When the search field is left blank, GRE returns all messages. This allows you to search all messages within a specified range of dates.

3. Punctuation (except the asterisk) will be ignored in searches. Words or partial words followed by an asterisk (*) will return all words or partial words that match the word in front of the asterisk.

For example, if you search for 'the' (without an asterisk) then only messages that include the literal word 'the' will be returned. A search for 'the*' will return all messages that include a word that begins with 'the' including ‘then’, ‘there’, ‘their’, ‘they’, etc.

Not e: T he ast erisk w ildcard charact er must be t he last charact er in t he search. Y ou can search for 't he*'but not '*t he'.

(21)

A n A ND search is used when multiple keywords are not surrounded by quotation marks. Messages containing all the keywords (in any order) will be returned.

A n exact phrase search is used when multiple keywords are surrounded by "quotation marks". Only messages with the exact phrase will be returned.

A hybrid search will be used when an A ND search and "exact phrase" search are combined. Only messages with the "exact phrase" and the individual keywords without quotation marks (in any order) will be returned.

5. A dvanced searches return only messages that contain the specific search terms.

Not e: Y ou should avoid using punct uat ion (ot her t han t he ast erisk). Y ou should only use let t ers and numbers (or t he local language equivalent ) in searches.

6 Recovery Operations

1. Navigate the backup image chain for the desired point-in-time to recover (applies only to ShadowProtect backup image files). 2. Right click the backup image and mount. Remember to include any images from the same backup job that contain database files and or transaction logs. A lso, do not use the Quick Mount feature as the image must be writable (applies only to ShadowProtect backup image files).

3. Launch the ShadowProtect GRE application and then open the source EDB by browsing to the location in the mounted image and the associated log file folder path if needed.

4. Select a target.

5. Restore Email messages, folders, or mailboxes.

Import ant : Migrat ing or rest oring large EDBs can t ake a long t ime. T o prevent reboot ing during t he process, ensure t hat Aut omat ic updat es are NOT select ed in W indow s Updat es.

If t he GRE client loses connect ion w it h t he Exhcange Server during a rest ore it w ill t ry t o reest ablish communicat ion for up t o 3 hours before report ing an error.

St orageCraft also st rongly recommends disabling "Full T ext Search Indexing" w hen migrat ing large EDBs t o prevent net w ork errors during t he migrat ion.

6.1 Mounting ShadowProtect Images

Mounting Images and Configuring GRE

Images containing the Exchange EDB and log files must be mounted as writable. See ShadowProtect Mounting Backup Image Files.

If the EDB file is on a different volume than the log files you must mount images for both volumes. A ll images for a specific GRE session must be from the same ShadowProtect backup job.

Not e: W hen configuring Shadow Prot ect , if t he Exchange EDB and t ransact ion logs are on separat e volumes, Shadow Prot ect must be configured t o back up t he volumes as part of t he same backup job.

Details

If you mount an image on a network drive, then later lose the connection to that drive, (for example a VPN or a WA N connection): 1. Dismount the drive.

2. Discover and correct the connection problem 3. Re-mount (as writable) the backup image as a drive.

(22)

Not e: If you have ongoing problems accessing t he mount ed images from across t he net w ork, t ry copying t he image chain locally (t o t he GRE w orkst at ion), or t o physically at t ached ext ernal media. T his allow s for t he fast est access and recovery t imes.

6.2 Restricted Mode

If you attempt to open or restore an EDB before a license is downloaded for that EDB, you'll see: "Due to license restrictions the selected action cannot be completed". This means you are viewing the mailbox data in restricted (unlicensed) mode. If this happens, download a valid license file then close and reopen the database.

In unlicensed mode you can see the mailboxes and folders and the messages but not the message preview. You need a license to restore Mailboxes and folders. You also need a license to view and restore or export messages.

6.3 Selecting the Source

GRE initially starts without any open EDB source files. Open the Exchange EDB file (or multiple files if you are using more than one EDB).

To open an EDB file

1. Select Open Source. GRE displays the Open Source dialog:

2. Enter the name of the source EDB file or use Browse to select it. 3. Enter the path for the associated log files.

4. Enter the path for the mailbox store (stm) file. 5. Click Open.

6. Repeat for each EDB file wanted.

Note: Multiple EDB files must be opened from the same server, have the same server name, or have a DA G license for use with multiple server names. The EDB file must be from one of the servers with an active DA G license.

To Open an EDB file Dialog

On a new installation the dialog to open an EDB file is displayed automatically when GRE starts. This dialog is displayed each time you open an EDB file.

If the Attempt to skip EDB recovery and repair option is not selected, the log file path (associated log file folder path) is required if the EDB was not in a clean state in the snapshot.

If the Attempt to skip EDB recovery and repair option is not selected and a log path is provided, a recovery (process pending transactions from the log files) is attempted. If the recovery fails, it attempts to repaire the EDB file.

If the Skip Recovery option is selected and GRE is able to successfully skip the recovery then the database is opened. Skip the recovery means change the database from dirty flag to clean and open the database.

Warning: This has the potential for data loss and corruption.

If the Skip Recovery option is selected but GRE is not able to open the EDB (after attempting to skip recovery) it will attempt to do a recover/repair. Depending on the size of the database this might take several hours.

(23)

1. Close the database

2. Dismount the backup file (do not save changes.) 3. Mount the backup image again.

4. Open the EDB file in GRE (Do not check Skip EDB Recovery or Repair).

5. A fter the database maintenance is finished, GRE displays the mailboxes and content.

6.4 Selecting a Target

A GRE target, can be: A new PST file A n existing PST file

A ll mailboxes on a Microsoft Exchange server A single mailbox on a Microsoft Exchange server

To Create a New PST File

GRE lets you save a mailbox to a new PST file: 1. Click Open Target.

2. Select Create a New PST File.

3. Browse to where you want the file created and provide the filename. 4. Click Open. GRE creates the target PST file.

Not e: T his new PST file can be sent t o a different Exchange server (one t hat t he current user may not have right s t o administ er) for rest oring.

To Open an Existing PST file

1. Click Open Target.

2. Select Open an Existing PST File.

3. Specify the PST file using either the dropdown or the Browse button. 4. Click Open. GRE opens the target PST file.

(24)

To Connect to Microsoft Exchange Server

Note: For mixed environments you need a service account for Exchange 2013 (if part of the environment) and a separate service account for one of the legacy Exchange servers (Exchange Server 2010 or 2007).

All Mailboxes

1. Click Open Target.

2. Select Microsoft Exchange Server (A ll Mailboxes). 3. Enter the Target server name.

Note: The user must log in to the Target server's domain. A ccessing all mailboxes requires domain authentication. 4. If you want public folders included, check Connect Public Folders.

Note: The CA S server is required when connecting to a 2010 Exchange server that doesn't have the client access role.

5. Click Open.

Single Mailbox

1. Click Open Target.

2. Select Microsoft Exchange Server (Single Mailbox). 3. Enter the Target SMTP/Email A ddress name. 4. Enter the Server Name (or IP address).

5. If you want public folders included, check Connect Public Folders. 6. Click Open.

Exchange Server as a Target

When you open GRE, and want to connect to the target Exchange All Mailboxes, the current user needs to have a mailbox in the Exchange domain where you want to connect.

Not e: If you are using Out look 2013, t he current user's mailbox must be host ed on Exchange 2007 or new er.

(25)

Your computer must also be a member of the Exchange domain and the user must have Exchange administrative rights (see Setting up Exchange Service A ccounts below for more information).

When you connect to a single mailbox it prompts you for the mailbox credentials. You may need to include the server IP address in the host file of the server you are connecting to if you are connecting to a machine that's not part of your domain. You can connect to multiple single mailboxes at the same time. You can't use the All Mailboxes connect option to connect to an Exchange server outside the domain you are logged into.

Client Access Server (CAS)

When you connect to Exchange Server as a Target, you need to use the address for the server which is performing the Client A ccess Role (2010) or the Mailbox Role (2007).

In a Mixed Environment you should:

Use the CA S field for connecting to an Exchange Server 2010 using the Single mailbox or A ll mailboxes setting.

You should not use the CA S Role server for connecting to an Exchange Server 2007; whether using the Single mailbox or A ll mailboxes setting.

For single mailbox the CA S server name should be entered into the Server Name field since the CA S Server field is not shown.

6.5 Target Management

To manage a target you need to: Create a new folder

Rename an existing file or folder Delete a file or folder

To create a new folder

1. Select the level of the Target's tree where you want to place the new folder. This could be the Inbox, the mailbox root, an existing folder or an existing subfolder.

2. Right-click on this item. GRE displays the Target Operations submenu:

3. Click Create Folder. GRE adds a new folder to the tree. 4. Name the new folder.

To rename a folder

1. Right-click on the folder in the tree.

2. Click Rename. GRE displays the insertion box with the folder's existing name. 3. Type in a new name for the folder.

(26)

To delete a folder

1. Right-click on the folder in the tree. 2. Click Delete.

Warning: GRE does not ask you t o confirm t he delet ion. W hen you click delet e, t he operat ion begins inst ant ly. If you accident ally delet e a folder, you can use t he rest ore opt ion in GRE t o ret rieve it from t he backup EDB file.

To delete restored objects

You can only delete target objects that have been created in the current session. Only folders created with the Create Folder option, or during a restore operation can be renamed. If you restore a message or mailbox, then close GRE and reopen it, the restored objects will be permanent. You must use the mouse to delete objects. Right click on the object to be deleted and click Delete from the menu.

6.6 Restore

Restoring Email messages, folders, or mailboxes can be done in two different ways: Use the mouse to drag the source object and drop it on the target mailbox or folder.

Right-click the source item and copy, then right-click on a destination mailbox or folder in the target directory tree at the lower left.

Not e: If you rest ore a specific t ype of Exchange it em (such as a cont act , calendar it em, or message) t o a different t ype of folder (for example: rest oring a cont act t o a calendar folder, a calendar it em t o a cont act folder, or a message t o a calendar folder, et c.) it w ill be rest ored and visible in GRE, but you w on’t be able t o see it in Out look.

Warning: If you rest ore different (mult iple) mailboxes or folders w it h t he same name, t o t he same locat ion, t he messages from t he mult iple mailboxes w ill be mixed. If you rest ore (merge) mult iple mailboxes (regardless of t he source mailbox names) t o a mailbox root folder in t he t arget , t he cont ent s w ill be merged.

Not e: Cont ent delet ed from mailboxes or folders w ill not be rest ored w hen t he mailboxes or folders are rest ored.

6.7 Mailbox Migration

Creating a user account

The alias from the email address will be the login name for the user account that will be created and associated with a new mailbox. The new user account will have the same user domain as the current Windows user.

For example:

If the email address is "user1@mycompany.com" and the user domain is "mycompany.local", then the userPrincipalName is set to "user1@mycompany.local".

(27)

Import ant : St orageCraft st rongly recommends disabling "Full T ext Search Indexing" w hen migrat ing large EDBs t o prevent net w ork errors during migrat ion.

Initiating the migration:

Use the mouse to drag the source EDB or mailbox and drop it on the target mailbox or folder.

Import ant : T he t arget needs t o be a mailbox st ore (not a mailbox or folder). T arget mailboxes and folders are t reat ed a rest ores, not migrat ions.

Right-click the source item and copy, then right-click on a destination mailbox or folder in the target directory tree at the lower left.

Full or Partial Migration:

Migrate an entire EDB (all mailboxes) Create a single mailbox

Not e: GRE migrat es only user mailboxes. Public folders, equipment mailboxes, and all ot her non-user mailboxes w ill not be migrat ed. Link mailboxes are not creat ed.

Migrate the entire EDB

To migrate the entire EDB: 1. Select the Organization Unit.

2. Enter the applicable Domain Name (See Creating a user account). 3. Enter the password you want to use as the Default.

4. Confirm the Default password.

5. Click Begin to continue or Cancel to abort.

Migrate a single mailbox

To migrate a single mailbox: 1. Enter the Display Name. 2. Select the Organization Unit. 3. Enter the Email A ddress.

(28)

6. Click Begin to continue or Cancel to abort.

6.8 Export Operations

GRE exports files from the Source directory in these formats: MSG

Txt

To export one or more files

1. Select one or more files from the Source email selection view or select a mailbox or folder from the Source directory. 2. Right-click on the selected file(s) to open the Options Submenu:

3. Click Export Selection.GRE displays the Export Selection menu:

4. Use the selector box to choose the export format.

5. Type destination path or use the Browse button to locate the destination for the exported files. 6. Click Export.

Warning: If you export different (mult iple) mailboxes or folders w it h t he same name, t o t he same locat ion, t he messages from t he mult iple mailboxes w ill be mixed.

7 ShadowProtect GRE FAQs

Frequently Asked Questions

Add Exchange Server Certificate as a Trusted Root Certificate

The Exchange Server certificate must be added as a Trusted Root Certificate. This may be done by accessing a mailbox on the Exchange Server via Outlook and importing the Exchange Server certificate.

ESEUTIL.EXE error when recovering Exchange 2007 or 2003 EDB

ESEUTIL.EXE occasionally returns an error when you try to recover a 2007 or 2003 EDB file (even when the Microsoft provided DLL is in the same folder as ESEUTIL.EXE). To fix this problem, copy the JCB_x86.dll or JCB_x64.dll (depending on whether your ESEUTIL.EXE is the x86 or x64 version) over the Microsoft JCB.DLL to recover 2007 or 2003 EDB files. The files (JCB_x86.dll and JCB_x64.dll) can be found (if installed in the default location) in C:\Program Files\StorageCraft\GRE, or C:\Program Files

(x86)\StorageCraft\GRE.

(29)

If you mount an image across a network connection, then lose the network connection, (for example a VPN or a WA N connection), you need to dismount the drive where that image is stored, fix the network connection issues, re-mount the backup image as a drive. If an I/O error is displayed (For example: This drive is not accessible) you may need to reboot the operating system to stop the errors from occurring.

If you are running VMware Workstation, and you want to mount a backup image, you may see a network connection issue if you attempt to use the host computers’ (i.e. the computer that is running VMware Workstation) network shared folder. It causes a condition where neither the host nor VM can access the network. A VMware bridged network connection (not NA T) probably has a problem in the VMware bridged networking driver or networking subsystem. It appears to be blocking network traffic from both the VM and the host computer. If you configure a NA T network connection for the VM it doesn't have the problem and you can use the host computers’ (i.e. the computer that is running VMware Workstation) network shared folder as the destination to mount a backup image.

Display names with Unicode characters fail to connect to single mailbox on MS Exchange Server

Use the Mailbox SMTP/Email address to connect to a single mailbox.

Deleting Restored Objects

You can only delete target objects that have been created in the current session. If you restore a message or mailbox, then close GRE and reopen it, the restored objects will be permanent. You must use the mouse to delete objects. Right click on the object to be deleted and click Delete from the menu.

Soft deleted messages and folders show in Source View

In GRE, soft deleted messages and folders are shown in the Source view to allow the opportunity to restore them.

Date Variance where UTC versus Local Time

Data timestamps are recorded in Exchange databases in GMT. The local machine (and GRE) user interface translates it to local time.

File Name Length Exceeded

One rare problem can occur especially if you have a lot of nested folders. In Microsoft operating systems you can’t create folders (or folder/subfolder tree) with a path longer than 258 Characters. The total length of the tree is 258 characters (total character length). However, Exchange lets you use as many characters as you want. If this happens and you try to export it, it can lock up. Two different errors describe these conditions.

Note: Microsoft Windows has a folder/filename tree-length maximum of 258 characters. The full path length of any restored folder or file must be 258 characters or less. Exchange allows you to have more than 258 characters for a message's

folder/filename path length. If you try to export a message or folder with more than 258 characters you'll see one of the following errors:

1. File name length exceeded

2. Maximum folder/filename tree-length exceeded

If you see either of these errors, you need to restore the data to a .pst file.

Bridged Driver Loopback Error

If you are running VMware Workstation, and you want to mount a backup image, you may see a network connection issue if you attempt to use the host computers’ (i.e. the computer that is running VMware Workstation) network shared folder. It causes a condition where neither the host or VM can access the network. A VMware Bridged network connection (not NA T) probably has a problem in the VMware bridged networking driver or networking subsystem. It appears to be blocking network traffic from both the VM and the host computer. If you configure a NA T network connection for the VM it doesn't have the problem and you can use the host computers’ (i.e. the computer that is running VMware Workstation) network shared folder as the destination to mount a backup image.

Figure

Updating...