Retain Authentication
This is where we will explain the various authentication methods.
Users
This section discusses user rights assignments.
New users get listed in Retain as they log in. They will be authenticated automatically against the address book that had been synced during setup.
One of the easiest and more convenient things to do is to change the Session Timeout duration for the admin user. The max is 480 minutes (8 hours). It is a pain to try troubleshooting job issues and to have it timeout on you while doing that kind of thing.
One thing that makes life easier for many customers is to set the default Display Number 100 per page and the Message Age Display to 3 years.
Hands On
One of the major uses of Retain is for eDiscovery. The entire archive can be searched by the admin user to provide requested information for legal, Freedom of Information Act, or other sunshine law purposes. However, we know that network administrators are busy people and running a query about which user sent what to whom on a particular date only requires a user with modest technical skill and proper rights. This might be a helpdesk manager user or junior sysadmin. We also know that we don't want to give users too many rights or they might change something important on the server as they explore.
- Go to the User section of the Retain Web Console.
- Click on Add User.
- Set Authentication Method to "Offline" (the user does not need a mailbox on the email system).
- Set a password.
- Go to the User Rights tab, and give them "Search all mailboxes" and "Publish Messages", you may consider giving them "See Confidential Items [other mailboxes]" rights as well.
- Go to the Miscellaneous tab and set "Display Number" to 100 and "Message Age Display" to "Last 3 years".
- Press "Save Changes".
Groups
This section discusses group rights assignments and how they interact with specific user rights. In some cases, user rights take precedence; yet in others, group rights are king.
