Difference between revisions of "Retain Exchange"

From GWAVA Technologies Training
Jump to: navigation, search
(Overview of Exchange)
(Useful Troubleshooting posts)
 
(68 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 
== Exchange Module On-Premise Basics ==
 
 
There are two major sections to setting up Retain to connect to an on-premise Exchange server.
 
 
One is the '''Impersonation User''' and the other is the '''Exchange Forest'''.
 
 
===Impersonation User===
 
 
In the Exchange Module the Impersonation User is formally called the ''Global Catalog User''.
 
 
This user needs to exist in Exchange and will have a mailbox even though it won't be used. This user also needs to ApplicationImpersonation rights. Those rights can be added to a User in the 2013 Exchange Admin Console.
 
 
Appendix G of the Admin Guide describes how to set it up in Exchange 2010 & 2007.
 
 
===Exchange Forest===
 
The tab may say Exchange Forest but we are actually talking about the Active Directory Domain Forest.
 
You will find the Domain on the Exchange Server in Active Directory Domains and Trusts or Active Directory Users and Computers.
 
 
Active Directory Directory Services is Microsoft's implementation of a directory service, it is a way to organize users, computers and other assets in an organization.
 
 
That domain at the top of the stack is the Global Catalog Host. You may have other domains and organizational units under that, but that is the one you would most want to use. At the top you have the domain, that may have multiple forests. At the other end you have organizational units made up of users and computers.
 
 
This is can be a DNS domain name or IP address.
 
The port is 3268 for Plain Text, and 3269 for SSL connections.
 
 
The final thing to set is the Search Base. This is formatted in LDAP so it needs more information.
 
There are 4 major components to an LDAP query:
 
* DC=Domain Component
 
* OU=Organizational Unit
 
* CN=Common Name
 
* DN=Distinguishing Name
 
 
You should become familiar with the most common errors that relate to Exchange systems.
 
 
====Hands On====
 
What does it look like if the Retain User does not have Application Impersonation Rights.
 
*Create your own Impersonation User account and use it as part of your Retain Exchange Module.
 
*Open the Exchange Admin Console.
 
*Create a new user for your Retain system
 
*Attempt to run a job. Note the error.
 
*Now add Application Impersonation rights.
 
 
====Hands On====
 
What does it look like if Basic Authentication is not enabled.
 
*Go to IIS Manager on the Exchange system and disable Basic Authentication.
 
*Attempt to run a job. Note the error.
 
*[[Troubleshooting_Exchange#Exchange_Management_Shell|Basic Authentication Check]]
 
*Now re-enable Basic Authentication.
 
 
====Hands On====
 
What does it look like if the Search Base is incorrect. You would expect that pointing the search base of the LDAP query at the Users contain would be better as it would not have to search the entire AD forest.
 
*Go to Module Configuration/Exchange/Exchange Forest.
 
*Add CN=Users to the Search Base.
 
*Attempt to run a job. Note the error.
 
*Remove CN=Users from the Search Base.
 
 
==How It Works==
 
===Overview of Exchange===
 
 
Exchange is a cluster of roles on one or more servers that transfers messages.  
 
Exchange is a cluster of roles on one or more servers that transfers messages.  
  
Line 73: Line 14:
  
 
The Exchange Mailbox Server hosts the database(s) that stores the users messages.
 
The Exchange Mailbox Server hosts the database(s) that stores the users messages.
 +
 +
==How It Works==
  
 
===Overview of Retain's Access to Exchange===
 
===Overview of Retain's Access to Exchange===
 +
[http://support.gwava.com/kb/?View=entry&EntryID=2242 Autodiscover: How Retain Connects to Your Exchange Mailboxes]
  
 
When Retain archives from Exchange it uses the Impersonation User aka Global Catalog User to enter Active Directory (AD) to find a user.  
 
When Retain archives from Exchange it uses the Impersonation User aka Global Catalog User to enter Active Directory (AD) to find a user.  
Line 88: Line 32:
 
Retain will go to the first user in that list and using ApplicationImpersonation rights. It will get the list of folders for the first user and then will process the messages.
 
Retain will go to the first user in that list and using ApplicationImpersonation rights. It will get the list of folders for the first user and then will process the messages.
  
==Installation==
+
==Exchange Limitations==
[[Exchange Installation]]
+
Exchange has certain stated limitations [http://technet.microsoft.com/en-us/library/exchange-online-limits.aspx], but even in cases where there are no stated limits, there are practical limitations you are going to reach.
 +
 
 +
<blockquote>
 +
“I usually recommend no more than about 2500 - 5000 messages in any of the critical path folders.  The critical path folders are the Calendar, Contacts, Inbox, and Sent Item folder. Ideally, keep the Inbox, Contacts and Calendar to 1000 or less.  Other folders, particularly custom folders created by the user, can handle having larger numbers of items without having a broad impact on the user experience (20,000 items in my "Cookie Recipes" folder?  No problem - except when I need to find that recipe from last Christmas!).” [http://blogs.technet.com/b/exchange/archive/2005/03/14/395229.aspx]
 +
</blockquote>
 +
 
 +
Attempting to send the Enron dataset to a user >500,000 message cause the test system to have issues at ~125,000 messages.
 +
 
 +
Like many computer systems it works best when it is lightly loaded which in the case of Exchange means keeping as few messages the mailbox database as is practical and since the vast majority of messages are never viewed again after they are initially received it makes sense to get them out of the system.
 +
 
 +
The average user receives 120 emails a day, 260 days of the year or 31,200 messages a year.
 +
 
 +
==[[Exchange Module On-Premise]]==
 +
 
 +
The Exchange servers are on your organization's property somewhere. You have full control over them.
 +
 
 +
==[[Exchange Module Office365]]==
 +
 
 +
Your organization had decided to host your email system with Microsoft on Microsoft's servers and you have little control over them.
 +
 
 +
==[[Exchange Installation]]==
 +
 
 +
*[[Windows 2012R2|Installing Windows Server 2012 R2]]
 +
*[[Exchange 2013|Installing Exchange 2013 for a lab enviroment]]
 +
*[[Creating CAS|Installing Standalone CAS for Exchange 2013]]
 +
*[[Retain Exchange Install|Installing Retain on Windows]]
 +
*[[Retain Outlook Web Access 2013 Plugin]]
 +
*[[Retain Outlook 2013 Plugin]]
 +
 
 +
==Exchange Archive Strategies==
 +
[[Exchange Archiving Strategies]]
  
 
==Troubleshooting==
 
==Troubleshooting==
 
[[Troubleshooting Exchange]]
 
[[Troubleshooting Exchange]]
  
<br>
+
==PowerShell Commands==
 +
[[Powershell Commands]]
 +
 
 +
==Field Test Files==
 +
*[http://support.gwava.com/kb/?View=entry&EntryID=2330 Patches]
 +
 
 +
==Useful Troubleshooting posts==
 +
[https://blogs.technet.microsoft.com/exchange/2016/05/31/checklist-for-troubleshooting-outlook-connectivity-in-exchange-2013-and-2016-on-premises/ Checklist for troubleshooting Outlook connectivity in Exchange 2013 and 2016 (on-premises)]
 +
 
 +
[http://diagnostics.office.com/#/ Fix Outlook and Office 365 problems with Microsoft Support and Recovery Assistant for Office 365]
 +
 
 +
[https://blogs.technet.microsoft.com/rmilne/2011/10/21/exchange-the-autodiscover-web-service/ Exchange & The Autodiscover Web Service]
 +
 
 
=====Back to [[Retain Module Configuration]]=====
 
=====Back to [[Retain Module Configuration]]=====

Latest revision as of 17:43, 21 December 2016

Exchange is a cluster of roles on one or more servers that transfers messages.

The major roles are:

  • DNS (Domain Name Server)
  • AD DS (Active Directory Directory Services)
  • CAS (Client Access Server)
  • Exchange Mailbox Server

The Name Server resolves which server is doing what role. It is very important that Retain and the Exchange servers all point to the same one so the domains are all resolved correctly.

Active Directory organizes the domains, users and computers of the network so they have the proper rights. Mainly that the Retain user has ApplicationImpersonation rights.

The CAS is the front door of the network, it sends requests from the users to the proper place in the network, in the case of Retain it is access to the mailbox database.

The Exchange Mailbox Server hosts the database(s) that stores the users messages.

Contents

[edit] How It Works

[edit] Overview of Retain's Access to Exchange

Autodiscover: How Retain Connects to Your Exchange Mailboxes

When Retain archives from Exchange it uses the Impersonation User aka Global Catalog User to enter Active Directory (AD) to find a user.

We enter Exchange in one of four ways:

  • LDAP (Lightweight Directory Access Protocol)
  • SCP (Service Connection Point)
  • EWS (Exchange Web Services)
  • Autodiscover

In that user it searches for the user's homeMDB (homeMailboxDataBase) and uses that to link to the homeMDBBL object in AD. From there it gets the current list of mailboxes in the mail server's database.

Retain will go to the first user in that list and using ApplicationImpersonation rights. It will get the list of folders for the first user and then will process the messages.

[edit] Exchange Limitations

Exchange has certain stated limitations [1], but even in cases where there are no stated limits, there are practical limitations you are going to reach.

“I usually recommend no more than about 2500 - 5000 messages in any of the critical path folders. The critical path folders are the Calendar, Contacts, Inbox, and Sent Item folder. Ideally, keep the Inbox, Contacts and Calendar to 1000 or less. Other folders, particularly custom folders created by the user, can handle having larger numbers of items without having a broad impact on the user experience (20,000 items in my "Cookie Recipes" folder? No problem - except when I need to find that recipe from last Christmas!).” [2]

Attempting to send the Enron dataset to a user >500,000 message cause the test system to have issues at ~125,000 messages.

Like many computer systems it works best when it is lightly loaded which in the case of Exchange means keeping as few messages the mailbox database as is practical and since the vast majority of messages are never viewed again after they are initially received it makes sense to get them out of the system.

The average user receives 120 emails a day, 260 days of the year or 31,200 messages a year.

[edit] Exchange Module On-Premise

The Exchange servers are on your organization's property somewhere. You have full control over them.

[edit] Exchange Module Office365

Your organization had decided to host your email system with Microsoft on Microsoft's servers and you have little control over them.

[edit] Exchange Installation

[edit] Exchange Archive Strategies

Exchange Archiving Strategies

[edit] Troubleshooting

Troubleshooting Exchange

[edit] PowerShell Commands

Powershell Commands

[edit] Field Test Files

[edit] Useful Troubleshooting posts

Checklist for troubleshooting Outlook connectivity in Exchange 2013 and 2016 (on-premises)

Fix Outlook and Office 365 problems with Microsoft Support and Recovery Assistant for Office 365

Exchange & The Autodiscover Web Service

[edit] Back to Retain Module Configuration
Personal tools
Namespaces

Variants
Actions
Home
Exchange
GroupWise
JAVA
Linux
MTK
Retain
GW Monitoring and Reporting (Redline)
GW Disaster Recovery (Reload)
GW Forensics (Reveal)
GWAVA
Secure Messaging Gateway
GW Mailbox Management (Vertigo)
Windows
Other
User Experience
Toolbox
Languages
Toolbox