Working with Exchange servers

Applies to

Data Security v7.6.x

Overview

With Data Security, you can perform discovery on Microsoft Exchange servers. Before you begin, there are a number of steps you need to take.

Exchange 2010

1.	Define a service account for Exchange discovery scanning.

2.	Grant the account one of the following roles. This is necessary so that Data Security can discover messages and display results.

Exchange Full Administrator

Exchange Administrator

Exchange View Only Administrator

The service account should now be able to accesse Exchange via Outlook Web App (OWA) and move between the mailboxes intended to be scanned during the discovery. Try switching between mailboxes as shown below:

3.	Configure Exchange impersonation. Exchange impersonation needs to be enabled for the service account used for the discovery

a.	Open the Exchange Management Shell.

b.	Run the New-ManagementRoleAssignment cmdlet to add the permission to impersonate to the specified user.

For example, to enable a service account to impersonate all other users in an organization, enter the following:

New-ManagementRoleAssignment -Name:impersonationAssignmentName -Role:ApplicationImpersonation -User:ServiceAccount

For more information on Exchange impersonation, see http://msdn.microsoft.com/en-us/library/bb204095.

4.	Configure an Exchange discovery task.

a.	Log onto the TRITON Console and select the Data Security tab.

b.	Select Main > Policy Management > Discovery Policies > Add Network Task > Exchange Task.

c.	Complete the wizard as explained in the TRITON - Data Security Help.