An Exchange Service Account is required. Create an Exchange user with mailbox to act as the service account.

For more information about IPRO's Exchange Service Account security management—see FAQ Exchange Service Account.

• Log into the Exchange Administration Console (EAC). An Administrator account is required.
• From the left-hand panel, select Roles > Admin Roles.
• Click Add role group.
• 
• In the Set up the basics section, do the following:
• Give the custom role an appropriate Name.
• Add a Description specifying what permissions the members of this role group will have. Include that this custom role group should not be deleted.
• Leave Write Scope at the Default setting.
  
• Click Next.
• In the Add permissions section, individually select the following:
  • Address Lists
  • Application Impersonation
  • Distribution Groups
  • Journaling
  • Mailbox Import Export
  • Mailbox Search
  • Transport Rules
  • View-Only Configuration
  • View-Only Recipients
• 
• Click Next.
• In the Assign admins section, select the Exchange Service Account previously created. Enter it in the Members field.
• 
• Click Next.
• In the Review role group and finish section, double-check all. When ready, click Add Role Group.
• 

The Service Account must have access rights to all the user accounts that need to be archived. Access is granted through impersonation rights, or application impersonation. This gives a single user the ability to access all other accounts, or specified accounts. Impersonation is configured from the Exchange Administration Console (EAC) or from PowerShell.

• To configure impersonation from PowerShell:

  • Open a remote connection to Office 365.
  • Create a new management role, named NMArchiveImpersonation, with the role of "ApplicationImpersonation" assigned to the Service Account. Run the following command:

  • New-ManagementRoleAssignment

    -Name:NMArchiveImpersonation

    -Role:ApplicationImpersonation

    -User "netgovern@tenant.onmicrosoft.com"

• To configure impersonation from the EAC:

  • Log into the EAC. An Administrator account is required.
  • From the left-hand panel, open Permissions.
  • In the Admin Roles tab, click on the plus icon (+) to add a new entry.
  • 
  • Enter the following information in the relevant fields:
    • Name: NMArchiveImpersonation
    • Roles: ApplicationImpersonation
    • Under Members, select the correct service account
  • Click Save. The new role group will be added.

• To register the EWS application, enter the following URL in a web browser:
  https://login.microsoftonline.com/common/adminconsent?client_id=0a9b0b39-2512-48a4-83ff-c2ed8c1057ff&state=12345&redirect_uri=https://localhost:65010/crawler
• You should already be logged in to Office 365 with you Global Administrator Account. If not, log in, following any prompts to use the correct credentials.
• Grant permissions to the application. Click Accept.
• 
• You will be redirected to the following URL, which indicates successful registration:
https://localhost:65010/crawler?admin_consent=True&tenant=12cf9842-fb72-4b1d-9f89-6a69e478f803&state=12345
  The page will not resolve and can be closed.
• Once you have successfully registered the application, delete any existing objects in the MailStore tab, if applicable.

• Log into the NetGovern Admin UI.
• Select Archiving.
• Open the Users Sync tab.
• Navigate to the Users Sync section, click Exchange.
• If not filled in automatically, enter the Service Account username and password, and Powershell URL.
• Add the Office 365 Tenant ID. AzureUSGovernment O365 tenants are supported.
• 
• NOTE
  The O365 Tenant ID is located in the Directory ID box.
  
• To complete the process, run a new User Sync to re-sync the address books. Once user mailboxes have been synchronized to the local cache, they can be selected for archiving jobs. Syncing the address books is a requirement for setting up archiving jobs—see Syncing Address Books.

Once the previous steps have been performed in the Users Sync tab of the NetGovern Admin UI, ensure that following configurations are performed in the Mail Server tab.

• Open the Mail Server tab.
• 
• From the Server Type dropdown list, select the relevant version of Exchange.
• 
• If the correct parameters have not been entered in the Users Sync tab and the address book has not been synced, then you will receive an error message when selecting the Exchange Server Type.
• Under Mail Stores, you can add a cloud-based storage location. Click Add Cloud Store.
• 
• You will be instructed to run an address book sync in order to finalize the Users and Groups synchronization. Click OK.
• Click Save.

You must have completed the prerequisites for configuring the Exchange connector in NetGovern. You can contact your Support Representative for further details on the connector features, system requirements, and pre-configuration process.

Perform the following steps in the NetGovern Admin UI. Administrator rights are required.

• Log into the NetGovern Admin UI.
• Select Archiving.
• Open the Connectors tab.
• 
• Navigate to the Locations section. Click Add.
• 
• Under Storage Locations, select Archive.
• 
  
• Click Next.
• The Archive Location configuration window displays.
• 
• In the Name field, enter a name that is meaningful to the users and reviewers who will be accessing the data. Include the term "Connector" in the name entered.
TIP
Choose a location name that is meaningful to the users and reviewers who will be accessing the archive data. The name is also used by the indexing service. To change the location name, a new location must be created and its data reindexed.
• In the Description field, enter a relevant description of the storage location.
• Single Instance Storage (SIS) checks each attachment saved to the system and ensures that only one identical copy is saved within the repository. Files will be saved to a content folder appended to the defined data path. In the Single Instance Storage (SIS) field, select one of the following:
  • Global: Enables SIS across all users archived to this location. If multiple users receive one or multiple copies of an identical attachment, only one copy is stored.
  • Account Level: Enables SIS on an individual user level.
• Optional: Enable Dual-Login Protection to ensure that access to the local storage location in NetGovern Search will require the authorization of a second Case manager or NetGovern Search Administrator.
• Optional: Enable Invisible to Regular Users if you would like to hide the location from end users in NetGovern Search.
• The storage device options provided in the Archive Data Store and Attachment Data Store fields serve both performance and security purposes. For example, in some cases you may want to store larger and less frequently accessed attachments on slower, cheaper storage.
  • In Archive Data Store, select the storage device where the archive data will be stored—see Configuring Storage Devices.
  • In Attachment Data Store, select the storage device where you would like to store the data.
  • Optional: Specify a subfolder in the localstore device. In the associated + (plus) field, enter the subdirectory path to the selected storage device to which you want the archive data to be written.
  • Example: Your storage device has a UNC path of \\localstore\data. If you set the archive data store to localstore and a path of attachments, archive data will be written here:
    • \\server1\data\attachments
• In the Audit Path field, enter the UNC path to the location where you want to store the audit files for the data archived to this storage location. You can designate a location for the audit files that is different from where archived data will be stored.
• NOTE
  Since audit files are accessed and updated more frequently than other types of files, they should be stored on faster media. Storing the audit files in a different location also allows the possibility of applying different access rights, although all NetGovern Search access is done through the NetGovern Search services account.
• WARNING
  In order for NetGovern Search to function properly, it is important that you do not lose your audit files. This applies to all versions of NetGovern Search. It is recommended that you establish a procedure for backing up your audit files, so if you accidentally delete them, they can be restored. For more information on backing up, see Backing Up Archived Files.
• Click Test to verify the Audit Path connection.
• Click Save.
• Click Save at the bottom-left of the Connectors tab.
• IMPORTANT
  When you have created the location and configured the connector, you must ensure that all users are mapped. For more information—see User Mapping. For detailed steps—see Configuring User Mapping.
• IMPORTANT
  Once configuration is complete, an archiving job must be created in order to process the mailbox content—see Configuring an Email Archiving Job.