cancel
Showing results for 
Search instead for 
Did you mean: 

Archiving using non VSA account.

ashks2014
Level 5

Is it possible to set up an Exchange archiving task from a mailbox server using an account other than the VSA?

So you have another account that has the EV Exchange permissions applied to it and run the archiving task under the credentials of that account. This is using Windows Server 2008R2 and EV10.0.4

Could this work?

4 REPLIES 4

dcVAST
Level 5
Partner Accredited

On the Exchange Archiving Task if you set the log on account to something other than the VSA Enterprise Vault automatically does the following:

Adds the new account to the local Administrators group on the servers that run Exchange Server tasks.

Assigns the following rights to the new account: Replace a process level token, Log On As a Service, Debug Programs.

Assigns the following Enterprise Vault roles to the new account: Exchange Administrator, Task Application.

Roles-based administration in Enterprise Vault http://www.symantec.com/docs/HOWTO107974

Enterprise Vault Accounts and Permissions http://www.symantec.com/docs/TECH76700

ashks2014
Level 5

Thanks. so if i create an account, run setevpermissions script against this account and then set the archiving task to run under the credentials of this account, will it archive mailboxes? 

dcVAST
Level 5
Partner Accredited

On the Task when you set the user it should prompt you to set the permissions:

3.png

dcVAST
Level 5
Partner Accredited

Just to clarify, are talking about the Task or running the permissions script for another user other than the VSA?

 

The VSA’s requirements in Exchange

  • The VSA requires full access to all mailboxes and public folders. Choose one of the following options:
     
  • For Exchange 2003 and earlier, grant the permissions manually using Exchange System Manager.
  • For Exchange 2007 and later, grant the permissions using the PowerShell script included on the Enterprise Vault media (instructions).
  • For any version of Exchange, grant the permissions manually using ADSIEdit (list of the required permissions; instructions on using ADSIEdit).
     
  • If archiving from Exchange 2010, the VSA is required to have its own mailbox with a custom Throttling Policy (instructions).
    (Note that the mailbox receiving this Throttling Policy is the mailbox associated with the VSA, not the EV System Mailbox discussed below. They are separate mailboxes.)
     
  • In a multiple-domain environment, the VSA must be able to access all domains associated with any Exchange Servers that are to be archived (further details and examples).
     
  • The VSA should not be a member of the built-in Exchange Organization Administrators group.