EMC SourceOne Offline Access Version 7.1

Transcription

1 EMC SourceOne Offline Access Version 7.1 Installation and Administration Guide REV 01 EMC Corporation Corporate Headquarters: Hopkinton, MA

2 Copyright EMC Corporation. All rights reserved. Published September, 2013 EMC believes the information in this publication is accurate as of its publication date. The information is subject to change without notice. THE INFORMATION IN THIS PUBLICATION IS PROVIDED AS IS. EMC CORPORATION MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND WITH RESPECT TO THE INFORMATION IN THIS PUBLICATION, AND SPECIFICALLY DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Use, copying, and distribution of any EMC software described in this publication requires an applicable software license. For the most up-to-date regulatory document for your product line, go to the Technical Documentation and Advisories section on EMC Online Support site. For the most up-to-date listing of EMC product names, see EMC Corporation Trademarks on EMC.com. All other trademarks used herein are the property of their respective owners. 2 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

3 Contents Chapter 1 Chapter 2 Chapter 3 Offline Access Overview Introduction Offline Access benefits Offline Access architecture Offline Access components...15 Offline Access processes...16 General Prerequisites and Guidelines System requirements System considerations Installation considerations...19 Security considerations...20 Display settings...21 Synchronizing computer clocks...22 Considerations for mixed Xtender-SourceOne environments...22 Installing and Upgrading Offline Access Installing the Offline Access software Upgrading the Offline Access client Manual upgrade...33 Silent upgrade...33 Repair Offline Access after upgrading to Outlook...34 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide 3

4 Contents Chapter 4 Configuring Offline Access Introduction Configuration considerations User permissions Configuration guidelines Accessing Xtender messages in a SourceOne environment Offline Access cache Configuring Offline Access for multi-user computers Configuring group policy Adding the Offline Access administrative template to Group Policy Editor Configuring Offline Access policies How to enable settings in GPO Enabling/disabling Offline Access Enabling/disabling copy shortcut behavior Enabling/disabling move shortcut behavior Configuring the maximum age of messages to cache Configuring the maximum cache size Showing/hiding the Offline Access tray icon Configuring the location of the cache database Configuring the synchronization frequency Configuring the types of messages to cache Configuring the minimum age of messages to pre-cache Configuring SourceOne Web Services host settings Configuring delay for Requesting Message dialog box Configuring log files Configuring the startup synchronization delay Specifying item types to cache Configuring Offline Access for User Delete Considerations and limitations for User Delete GPO entries for User Delete Registry entries for User Delete Modifying ports used by Offline Access Registry entries HKEY_CURRENT_USER registry entries HKEY_LOCAL_MACHINE registry entries EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

5 Contents Enabling Kerberos authentication Overview of using Kerberos authentication with Offline Access Enabling Kerberos authentication on the EMC SourceOne Web server Enabling Kerberos on Offline Access clients Verifying that Kerberos authentication is being used on the server and client Chapter 5 Troubleshooting Offline Access Troubleshooting checklist Repairing the components Repairing Microsoft Visual C++ Redistributable Repairing Microsoft.NET framework Repairing EMC SourceOne Offline Access Offline Access and Microsoft Office Upgrading to Microsoft Office 2010/ Uninstalling Microsoft Outlook Offline Access and expired passwords Configuring number of retries Enabling and viewing log files for Offline Access Uninstalling EMC SourceOne Offline Access client software Uninstallation considerations Uninstalling the Offline Access software manually Uninstalling the Offline Access software silently EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide 5

6 Contents 6 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

7 Preface As part of an effort to improve and enhance the performance and capabilities of its product lines, EMC periodically releases revisions of its hardware and software. Therefore, some functions described in this document may not be supported by all versions of the software or hardware currently in use. For the most up-to-date information on product features, refer to your product release notes. If a product does not function properly or does not function as described in this document, please contact your EMC representative. Audience Related documentation This document is part of the EMC SourceOne Offline Access documentation set, and is intended for use by installers of the product, Discovery Manager system administrators, and mail server administrators. Related documents include: EMC SourceOne Offline Access User Guide EMC SourceOne Offline Access Release Notes EMC SourceOne Management Installation Guide EMC SourceOne Management Administration Guide EMC SourceOne Search User Guide EMC SourceOne Products Compatibility Guide EMC SourceOne Management Release Notes EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide 7

8 Preface Conventions used in this document EMC uses the following conventions for special notices. Note: A note presents information that is important, but not hazard-related.! CAUTION A caution notice contains information essential to avoid data loss or damage to the system or equipment.! IMPORTANT An important notice contains information essential to operation of the software. Typographical conventions EMC uses the following type style conventions in this document: Normal Used in running (nonprocedural) text for: Names of interface elements (such as names of windows, dialog boxes, buttons, fields, and menus) Names of resources, attributes, pools, Boolean expressions, buttons, DQL statements, keywords, clauses, environment variables, filenames, functions, utilities URLs, pathnames, filenames, directory names, computer names, links, groups, service keys, file systems, notifications Bold: Used in running (nonprocedural) text for: Names of commands, daemons, options, programs, processes, services, applications, utilities, kernels, notifications, system call, man pages Used in procedures for: Names of interface elements (such as names of windows, dialog boxes, buttons, fields, and menus) What user specifically selects, clicks, presses, or types Italic: Used in all text (including procedures) for: Full titles of publications referenced in text Emphasis (for example a new term) Variables Courier: Used for: System output, such as an error message or script URLs, complete paths, filenames, prompts, and syntax when shown outside of running text Courier bold: Used for: Specific user input (such as commands) 8 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

9 Preface Courier italic: Used in procedures for: Variables on command line User input variables < > Angle brackets enclose parameter or variable values supplied by the user [ ] Square brackets enclose optional values Vertical bar indicates alternate selections - the bar means or { } Braces indicate content that you must specify (that is, x or y or z)... Ellipses indicate nonessential information omitted from the example Where to get help Your comments EMC support, product, and licensing information can be obtained as follows. Product information For documentation, release notes, software updates, or information about EMC products, licensing, and service, go to the EMC Online Support website at: Technical support Go to EMC Online Support and click Service Center. You will see several options for contacting EMC Technical Support. Note that to open a service request, you must have a valid support agreement. Contact your EMC sales representative for details about obtaining a valid support agreement or with questions about your account. Online communities Visit EMC Community Network at for peer contacts, conversations, and content on product support and solutions. Interactively engage online with customers, partners, and certified professions for all EMC products. Your suggestions will help us continue to improve the accuracy, organization, and overall quality of the user publications. Send your opinions of this document to: EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide 9

10 Preface 10 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

11 1 Offline Access Overview This chapter contains the following topics: Introduction Offline Access benefits Offline Access architecture Offline Access Overview 11

12 Offline Access Overview Introduction The EMC SourceOne Offline Access provides a seamless experience to the user when retrieving shortcut messages in Outlook. In addition, you can configure Offline Access to cache messages on users hard drives so that users can retrieve messages when they are not connected to the network. EMC SourceOne Offline Access 7.1 provides support for Outlook 2013 and the new offline access cache mode feature synchronizes Outlook cache data. Offline Access benefits EMC SourceOne Offline Access client application provides: User access to archived , online or off-line Increased performance when users access from remote locations Reduce Exchange and SourceOne server load and network traffic by caching data locally Automatic synchronization and caching Instant resolution of shortcut Preview pane which works fully with shortcut messages Ability to open attachments directly from the preview pane Improved efficiency in handling shortcut messages and attachments 12 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

13 Offline Access Overview Offline Access architecture Figure 1 on page 13 illustrates how the Offline Access client components work with Microsoft Outlook and the EMC SourceOne Web server. Figure 1 Architecture diagram Offline Access for Outlook 2007 Offline Access architecture 13

14 Offline Access Overview Figure 2 Architecture diagram Offline Access for Outlook 2010/2013 Refer to: Offline Access components on page 15 Offline Access processes on page EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

15 Offline Access Overview Offline Access components The following table describes the major Offline Access components. Table 1 Offline Access components Component Offline Access Agent Offline Access Extension (Outlook 2007) Offline Access Add-In (Outlook 2010/2013) Offline Access Sync Agent Offline Access SourceOne Provider Database Provider Offline Access Compact component Description The Offline Access Agent on the client computer: Pre-caches messages to be shortcut. Monitors network and archive server connection status. Backfills existing shortcuts if necessary. Removes cached items that no longer exist in the user s mailbox. Ensures that the cache size is within a few percentage points of the configured maximum. The Offline Access Extension on the user s computer monitors user actions and intercepts Outlook events: Read, Open, Reply, Forward, and Copy. The Offline Access Add-In on the user s computer monitors user actions and intercepts Outlook events: Read, Open, Reply, Forward, and Copy. The Offline Access Sync Agent builds a local database cache and determines the connection status to the network. The Remote Repository Provider accesses archive content by using EMC SourceOne Web Services host. Offline Access interfaces with the database through the database provider. The Offline Access Add-in/Extension and Sync Agent use this component to add, remove, or modify items in the database. When the user selects the Compact option, the Compact component frees unused disk space. Compacting the cache does not compress data. Offline Access architecture 15

16 Offline Access Overview Offline Access processes How Offline Access works Refer to: How Offline Access works on page 16 Synchronization process on page 16 Offline Access works in the following way: 1. Shortcut messages are created in the user s mailbox on the Exchange server and replicated to the OST file on the user s computer. 2. The Offline Access Agent on the user s computer synchronizes the OA cache with the OST file. 3. After initial synchronization with the OST file, the Offline Access cache contains the contents of shortcut messages. 4. The Offline Access Extension on the user s computer intercepts user requests to open messages. 5. If the messages are not in the Offline Access cache, then the SourceOne Provider re-caches messages from the SourceOne Web server. Synchronization process Synchronization occurs between the Offline Access and Outlook: At initial load. At the interval specified in either: The Cache Sync frequency setting in Offline Access Group Policy. For more information, refer to Configuring the synchronization frequency on page 60. Or, if the policy is not enabled, in the Sync frequency field in the Options > EMC SourceOne tab > Cache Settings dialog box. For more information, refer to the EMC SourceOne Offline Access User Guide. When the user requests an on-demand sync by using the Update option. 16 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

17 2 General Prerequisites and Guidelines This chapter provides details on system requirements, security considerations, and best practices for installing and configuring EMC SourceOne Offline Access software. This chapter is organized as follows: System requirements System considerations General Prerequisites and Guidelines 17

18 General Prerequisites and Guidelines System requirements This section describes the basic system requirements. Table on page 18 describes the requirements for client computers running the EMC SourceOne Offline Access software. Table 2-1 EMC SourceOne Offline Access client computer requirements Hardware OS Network Software Standard desktop or laptop used in a corporate environment. The EMC SourceOne Products Compatibility Guide provides more detailed information on operating system requirements. Standard connection to the corporate network. The EMC SourceOne Products Compatibility Guide provides more detailed information on supported versions of the software described in this section. software (Exchange) Ensure Microsoft Outlook installed Validated by EMC SourceOne software installation that client version is supported Microsoft.NET Framework Redistributable Package Manually or silently install Validated by EMC SourceOne software installation Microsoft Visual C SP1 Redistributable Package (x86) Microsoft Visual C SP1 Redistributable Package (x64) English language systems are automatically installed with EMC SourceOne Offline Access software if not present English language systems are automatically installed with EMC SourceOne Offline Access software 64-bit version if not present Review other considerations in System considerations on page EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

19 General Prerequisites and Guidelines System considerations Before you install and configure Offline Access, review: Installation considerations on page 19 Security considerations on page 20 Display settings on page 21 Synchronizing computer clocks on page 22 Considerations for mixed Xtender-SourceOne environments on page 22 Installation considerations Review the following installation considerations: Outlook profile: If you log in as a user without an Outlook profile on a client computer, and you install Offline Access by using the installation wizard, then the EMC SourceOne server port settings are not saved. As a workaround, install Offline Access silently by using the registry keys or GPO to push out configuration settings. Random Uninstall/reinstall behavior: In some cases, after uninstalling, if you reinstall Offline Access: The Offline Access Extension does not load. The Offline Access Agent does not start. The maximum cache size is set to 0 MB. The error occurs during the following scenario: 1. Disable the Offline Access Extension through Outlook. 2. Exit Outlook. 3. Uninstall Offline Access. 4. Install Offline Access. System considerations 19

20 General Prerequisites and Guidelines Outlook preserves the cache state when it restarts. There is no safe method to force Outlook to discard its cached state. Use one of the following workarounds: After uninstalling Offline Access, restart Outlook before reinstalling Offline Access. In Outlook s Add-in Manager, enable the Offline Access Extension. Uninstall leaves log files: By design, log files are not removed when you uninstall Offline Access. Log files are located at: C:\Documents and Settings\<user>\Local Settings\Application Data\EMC\ Unused language folder: A Korean language folder is created in \Program Files\EMC SourceOne\Offline Access\Languages\1042. The folder is not used. Security considerations Review the following security considerations: Client security on page 20 Windows firewall on page 21 McAfee anti-virus software on page 21 Using Offline Access with S/MIME encrypted and signed messages on page 21 Client security To secure the Offline Access: Use strong passwords for the user s Windows account. Refer to Microsoft best practices for creating and using strong passwords. Use a password-enabled screen saver. Secure the user s hard drive with Windows encryption. 20 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

21 General Prerequisites and Guidelines Windows firewall Windows XP SP2, and Windows Vista/Windows 7 include Windows firewall, which is turned on by default. If you have problems accessing shortcutted s, try turning off the default Windows firewall on your client computer. Refer to the following Microsoft article for details: et/sp2_wfintro.mspx McAfee anti-virus software For EMC SourceOne Offline Access to operate with McAfee VirusScan s Buffer overrun protection for Outlook option, you must use either of the following versions: McAfee VirusScan 8.0i Patch 13 or later McAfee VirusScan 8.5 or later Using Offline Access with S/MIME encrypted and signed messages EMC SourceOne Offline Access can be used to open and view messages encrypted and digitally signed by Outlook mail clients using the S/MIME (Secure/Multipurpose Internet Mail Extensions) protocol. S/MIME is a protocol that adds digital signatures and encryption to MIME messages as described in RFC Other Non-S/MIME types of encryption and digital signing are not currently supported with Offline Access. Messages digitally signed and encrypted using S/MIME that were shortcut by EMC SourceOne Management can be opened and viewed using Offline Access. Note: When using Microsoft Outlook Delegate Access, a delegated user will require access to the delegator's signed certificate to access any encrypted and digitally-signed messages, including r Display settings For the best display of the icons in the Tools > Options > EMC SourceOne tab of Outlook on Microsoft Windows, set the Color Quality to 32-bit by using the Control Panel > Display > Display Properties > Settings tab option. System considerations 21

22 General Prerequisites and Guidelines Synchronizing computer clocks Ensure that the clocks on Offline Access client computers are synchronized with servers; otherwise, errors might occur. Considerations for mixed Xtender-SourceOne environments Consider the following information: Xtender User Cache server is no longer supported The Offline Access client works with SourceOne servers. The Xtender User Cache server is no longer supported. Uninstall previous versions of Offline Access client If you are deploying the Offline Access client application on a client computer in which a previous version of EMC Xtender Offline Access is already installed, you must first uninstall the older version of the client application. Type the following command (ensure there is a space before /l*v): MsiExec.exe /qn /x{53412f82-8f2f-4aab-90cb-57e39e06308b} /l*v %temp%:\emc_uc_uninstall.log Note: The GUID is the same regardless of the Offline Access version, and the original installation executable does not need to be available. Xtender software altered by EMC SourceOne Offline Access The EMC SourceOne Offline Access installation program alters the Xtender Shortcut Add-in on Xtender client computers. Both products include a COM add-in used to resolve shortcuts that is incompatible with the components used by the EMC SourceOne Offline Access application. If this shortcut COM add-in is detected during installation, you are notified and it is disabled. 22 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

23 3 Installing and Upgrading Offline Access This chapter describes how to install EMC SourceOne Offline Access software. This chapter is organized as follows: Installing the Offline Access software Upgrading the Offline Access client To uninstall Offline Access, refer to Uninstalling EMC SourceOne Offline Access client software on page 121. Installing and Upgrading Offline Access 23

24 Installing and Upgrading Offline Access Installing the Offline Access software You can install the EMC SourceOne Offline Access software on client computers to provide transparent access to shortcut (online or offline). This section includes procedures for installing this software manually using the MSI installation, or silently using a distribution package such as Microsoft SMS. Refer to: Prerequisites on page 24 Procedures on page 26 Verifying the installation for Outlook 2010/2013 on page 32 Note: Do not install the Exchange Management Console on client computers that are running Offline Access. The Exchange Management Console installs a version of MAPI that Offline Access does not support, and which causes the error: Offline Access Cache Agent: Failed to open MAPI message store 0x EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

25 Installing and Upgrading Offline Access Prerequisites Table 2 provides an overview of the prerequisites you must complete before installing software. Table 2 Prerequisites Prerequisite System requirements Accounts and permissions EMC SourceOne software Review considerations Details Hardware, operating system, network connectivity, and prerequisite software requirements are described in Table on page 18. Also, ensure that you review the information in System considerations on page 19. Ensure that: Active Directory accounts and groups and other permissions-related configuration is performed as described in the EMC SourceOne Management Installation Guide. Database permissions are configured as described in the EMC SourceOne Management Installation Guide. This installation requires that an EMC SourceOne Web Services computer exists and is accessible on the network. You will specify this hostname during the EMC SourceOne Offline Access software installation. If you have configured two or more Web Services computers in a load balancing cluster, you will instead specify the virtual hostname during the EMC SourceOne Offline Access software installation. For more information, see the EMC SourceOne Management Installation Guide. Ensure that you review the considerations provided in System considerations on page 19. Installing the Offline Access software 25

26 Installing and Upgrading Offline Access Procedures Manual installation Install the Offline Access software by using one of the following methods: Manual installation on page 26 Silent installation on page 31 To install the Offline Access software manually: 1. Log in to the host computer by using an account with local administrator privileges. 2. Navigate to the Setup\Windows directory on the EMC SourceOne Offline Access software kit. 3. Based on your installation copy any of the following executable to a temporary location on the host computer: Architecture 32-Bit Platform 64-Bit Platform Installer ES1_OfflineAccess.exe ES1_OfflineAccessx64.exe 4. Navigate to the temporary location to which you copied the setup executable. 5. Double-click the appropriate executable and click Run. The Welcome page is displayed. When the installer is run, it validates the system configuration to ensure that prerequisite components are installed. Depending on your system configuration, the installer might automatically install one or more prerequisite components before displaying the Welcome page. Automatically installed components are listed in the SourceOne Management Installation Guide. 6. Click Next to display the Destination Folder page. 26 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

27 Installing and Upgrading Offline Access Figure 3 Destination folder If other EMC SourceOne software is installed on your computer, or if a previous version of Offline Access is installed, then the Change button is not available and you cannot change the installation directory. Continue to Step 7. If other EMC SourceOne software is not installed on your computer, or if a previous version of Offline Access is not installed, then the Change button is available, and you can change the installation directory. To specify a non-default directory in which to install EMC SourceOne Offline Access client software: a. Click Change to display the Change Current Destination Folder page. b. Browse to or create the destination folder. Note: You cannot install the Offline Access software in the following protected operating system folders: C:\Windows, C:\WinNT, C:\InetPub. c. Click OK. The destination you specified appears in the Destination Folders page. Installing the Offline Access software 27

28 Installing and Upgrading Offline Access 7. (Optional) By default, the cache location is: C: \Documents and Settings\User\Application Data\EMC\ To specify a non-default location for the cache: a. Click Advanced to display the Advanced Settings page. Figure 4 Advanced settings page b. Note the following: If the cache location has been configured in the Offline Access Group Policy (described in Configuring the location of the cache database on page 58 ), then you cannot specify a cache location on the Advanced Settings page. You should not specify any of the following folders as the cache location: C:\Windows, C:\WinNT, C:\InetPub, C:\Program Files. c. On the Advanced Settings page, click Change. 28 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

29 Installing and Upgrading Offline Access Figure 5 Change cache folder location page d. Select the location for the cache. e. In the Advanced Settings page, click OK. 8. Configure the server settings by using the Server Settings page. Figure 6 Server settings Installing the Offline Access software 29

30 Installing and Upgrading Offline Access 9. Enter the Server Settings information: a. In the Real-time message retrieval server field, specify the hostname of the computer on which the EMC SourceOne Web Services software is installed, specifically the Document Management service. If using load balancing such as Microsoft NLBS, type the virtual hostname. b. In the Real-time message retrieval server: Port field, specify the primary port of the Web Services host or virtual host. The default value is The real-time message retrieval server and port must be specified so that messages can be retrieved by the Offline Access Extension. c. In the Synchronization (backfill) server field, specify the Web Services host (or virtual host). d. In the Synchronization (backfill) server: Port field, specify the secondary port of the Web Services host (or virtual host). The default value is The synchronization (backfill) server and port must be specified so that the Offline Access Agent can populate your Offline Access cache. Note: If you specify the same Web Services host (or virtual host) for both ports, do not specify port 8001 for the synchronization (backfill) port. Port 8001 is also used by other EMC SourceOne clients (OWA, Outlook, EMC SourceOne Search, EMC SourceOne Discovery Manager) for message retrieval. If you specify port 8001 for synchronization (backfill), then the backfilling process for Offline Access could negatively affect message retrieval by other clients. 10. Click Next to display the Ready for Installation page. 11. Click Install. After the installation is complete, the InstallShield Wizard Completed page displays. 12. Click Finish. Note: If Outlook was running during the installation, it must be restarted to use Offline Access. 30 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

31 Installing and Upgrading Offline Access Silent installation You can silently install the Offline Access software. The ES1_OfflineAccess.exe program confirms that the appropriate version of the Microsoft Installer (MSI) is on the system and it launches the MSI with the applicable parameters. The Microsoft Installer documentation provides more information on standard command line parameters. Use the following syntax to silently install Offline Access: ES1_OfflineAccess.exe /s /v"/qn /L*v C:\EMC_OfflineAccess.log INSTALLDIR=\"DRIVE:\DIRECTORY\" EX_TCP_PRIMARY_SERVER=PRIMARY_TCP_SERVER EX_TCP_PRIMARY_PORT=PRIMARY_TCP_PORT EX_TCP_SECONDARY_SERVER=SECONDARY_TCP_SERVER EX_TCP_SECONDARY_PORT=SECONDARY_TCP_PORT REBOOT=ReallySuppress " This table describes the required user-defined parameters. Table 3 Required silent install parameters for Offline Access software Parameter INSTALLDIR EX_TCP_PRIMARY_SERVER EX_TCP_PRIMARY_PORT EX_TCP_SECONDARY_SERVER EX_TCP_SECONDARY_PORT Detail Installation directory. Example: C:\EMC Enter the hostname of the computer on which Web services installed. If using load balancing, type the virtual hostname. Enter This is the default value. Enter the hostname of the computer on which Web Services installed. If using load balancing, type the virtual hostname. Enter This is the default value. Installing the Offline Access software 31

32 Installing and Upgrading Offline Access This table describes the optional user-defined parameters. Table 4 Optional silent install parameters for Offline Access software Parameter EX_CACHEDIR Detail Points to a non-default location for the cache. Note: If you use EX_CACHEDIR, then you must also use EX_CACHEMOD. Example: C:\EMC_OfflineAccess_Cache EX_CACHEMOD EX_SAVECACHE EX_SAVE_SETTINGS A value of 1 instructs the install to modify the default cache location. If you use EX_CACHEMOD, then you must also use EX_CACHEDIR. Used only for uninstalling Offline Access. Specifies whether to save an existing cache or to delete it when uninstalling Offline Access client: FALSE = Do not save the cache, delete it. TRUE = Save the cache, do not delete it. Used only for uninstalling Offline Access. Specifies whether to save registry settings or to delete them when uninstalling Offline Access client: FALSE = Do not save registry settings, delete them. TRUE = Save registry settings, do not delete them. Verifying the installation for Outlook 2010/2013 After you install Offline Access for Outlook 2010/2013, verify that there are two entries for Offline Access in the Outlook COM Add-Ins dialog box (File > Options > Add-ins > Add-ins Options button): EMC SourceOne Offline Access Addin - the Offline Access add-in for Outlook 2010/2013 EMC SourceOne Offline Access Configuration page - the EMC SourceOne tab added to the Outlook Options dialog box Note: By design, these strings are not localized. 32 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

33 Installing and Upgrading Offline Access Upgrading the Offline Access client Always refer to the EMC SourceOne Offline Access Release Notes before upgrading the Offline Access client. Refer to: Manual upgrade on page 33 Silent upgrade on page 33 Repair Offline Access after upgrading to Outlook on page 34 Manual upgrade To upgrade an older version of Offline Access client: 1. Close Microsoft Outlook on the client machine. 2. Verify that Microsoft Outlook and Offline Access are not running. To confirm, open Task Manager and verify that the following processes are not running: Outlook.exe ExOAAgent.exe 3. Depending on the environment, run either of the following executables: ES1_OfflineAccess.exe (32-bit) ES1_OfflineAccess64.exe (64-bit) 4. After the upgrade is complete, start Microsoft Outlook. Silent upgrade To perform a silent upgrade of the Offline Access client, use the /update switch: ES1_OfflineAccess.exe /s /update /v"/qn /L*v C:\EMC_OfflineAccess2.log INSTALLDIR=\"DRIVE:\DIRECTORY\" EX_TCP_PRIMARY_SERVER=PRIMARY_TCP_SERVER EX_TCP_PRIMARY_PORT=PRIMARY_TCP_PORT EX_TCP_SECONDARY_SERVER=SECONDARY_TCP_SERVER EX_TCP_SECONDARY_PORT=SECONDARY_TCP_PORT REBOOT=ReallySuppress " Upgrading the Offline Access client 33

34 Installing and Upgrading Offline Access Repair Offline Access after upgrading to Outlook If you install Offline Access on a computer running Outlook 2007/2010, and then later you upgrade to Outlook 2010/2013, you must run Repair on Offline Access. The Repair option registers the Offline Access COM Add-in required for Outlook 2010 support, and unregisters the Exchange Client Extension that was required for Outlook 2007 support. As an alternative to running Repair, you can: 1. Script the repair of the Offline Access install. 2. Manually unregister the EXOAExtn.dll file in the Offline Access installation directory. 3. Register the EMCOAAddin.dll file also located in the Offline Access installation directory. 34 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

35 4 Configuring Offline Access This chapter describes how to configure the EMC SourceOne Offline Access client for EMC SourceOne. This chapter is organized as follows: Introduction Configuration considerations Configuring Offline Access for multi-user computers Configuring group policy Configuring Offline Access for User Delete Modifying ports used by Offline Access Registry entries Enabling Kerberos authentication Configuring Offline Access 35

36 Introduction You can configure Offline Access using either the Group Policy Object (GPO) settings or registry settings. Offline Access users can configure settings in Tools > Options > EMC SourceOne tab in Outlook, as described in the EMC SourceOne Offline Access User Guide. Note: To configure Offline Access in a multi-user computer environment, you must use either GPO or custom logon scripts that deploy a registry file. Refer to Configuring Offline Access for multi-user computers on page 44. Configuration considerations Before you configure Offline Access, consider the following: User permissions on page 36 Configuration guidelines on page 39 Accessing Xtender messages in a SourceOne environment on page 41 Offline Access cache on page 41 User permissions Consider the following user permission requirements: Required permissions for Offline Access users on page 37 User permissions on mapped folders on page EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

37 Required permissions for Offline Access users In an EMC SourceOne environment, or in a mixed Xtender and EMC SourceOne environment, Offline Access users must have the following permissions as described in the following table. Table 5 User permissions for Offline Access Action Retrieve archived messages Open shortcuts in a shared mailbox Open shortcuts in a shared folder in a mailbox Required permissions Offline Access users must have permissions on the SourceOne mapped folders. Refer to "Configuring Mapped Folders" in the EMC SourceOne Management Administration Guide. Offline Access users must have Exchange Full Mailbox permissions on the shared mailbox. Just sharing the Outlook folder is not sufficient. Offline Access users must have all of the following Outlook permissions to access a shared folder: Delegate access to the mailbox. In the Outlook Delegate Permissions dialog box, the delegator must select Editor in the Inbox field. Reviewer permission on the top-level Mailbox - <username> node in Outlook. Editor permission on the shared folder in Outlook. For information on setting delegate permissions, consult the documentation for your mail client. Note: A delegated user does not need permissions on the SourceOne mapped folders. As long as the delegator has permissions on the mapped folders and can access shortcuts from the archive, then the delegated user can access the same shortcuts. Open shortcuts in a delegate mailbox Offline Access users must delegate access to the mailbox. In the Outlook Delegate Permissions dialog box, the delegator must select Editor in the Inbox field. For information on setting delegate permissions, consult the documentation for your mail client. Note: A delegated user does not need permissions on the SourceOne mapped folders. As long as the delegator has permissions on the mapped folders and can access shortcuts from the archive, then the delegated user can access the same shortcuts. Configuration considerations 37

38 Table 5 User permissions for Offline Access (continued) Action Open shortcuts in Public Folders Required permissions In a mixed SourceOne and Xtender environment, where Xtender is used to shortcut items in Public Folders, Offline Access users must have the following permissions to retrieve Xtender shortcuts from those Public Folders: Edit All permission on the Public Folders. The SourceOne service account and the Xtender service account also need client access permissions on Public Folders. Read All permission on the SourceOne mapped folders associated with the Xtender archive. User permissions on mapped folders To retrieve messages from the archive, Offline Access users must have permissions on mapped folders. For Outlook Delegate Access, a delegated user does not need permissions on the mapped folders. As long as the delegator has permissions on the mapped folders and can access shortcuts from the archive, then the delegated user can access the same shortcuts. In a mixed environment (EMC SourceOne and Xtender), to retrieve Xtender shortcuts in Public Folders, Offline Access users must have Read All permission on the mapped folders associated with the Xtender archive. For more information about permissions required for Outlook (delegate access, shared mailboxes, and shared folders) and Public Folders, refer to User permissions on page 36. For more information on mapped folders, refer to "Configuring Mapped Folders" in the EMC SourceOne Management Administration Guide. 38 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

39 Configuration guidelines This section describes best practices for deploying and configuring Offline Access: Deploy before shortcutting: Deploy Offline Access on users machines before they create shortcuts in their mailboxes, particularly, for the user machines with Cached Exchange Mode enabled in Outlook. If you follow this recommendation, then Offline Access can build its local cache from Outlook s cache without having to retrieve messages over the network. Upgrade before shortcutting: Upgrade Offline Access clients before shortcutting calendar items. Calendar items are cached: In addition to messages, Offline Access can now store calendar items in the local cache. When disconnected from the network, users can retrieve attachments in the calendar items. Cache start time and shortcut policy: To copy the messages from Outlook s cache before they become shortcuts, set the Offline Access cache start time (Cache messages older than option) earlier than the start time of the shortcut policy. During Offline Access synchronization, shortcuts must be retrieved from the archive server. Additionally, provide a buffer time for users, for example, users returning to the office after an extended period, to ensure that messages are retrieved from Outlook s cache. For example, if shortcuts are created for messages older than 90 days, consider setting the Offline Access cache start time to 60 days so that messages are copied to the cache 30 days before they become shortcuts. Cache size: Set the maximum cache size large enough to hold the majority of messages within the cache period. This would help the disconnected and remote users to have the messages in the local cache. They need not retrieve them from the archive server. After the initial installation, by default, the maximum cache size is set to 20 percent of the free disk space. You can modify the percentage before you install Offline Access. Configuration considerations 39

40 Cache Item Types: To control which item types are cached ( , appointments, meetings): Use the Cache Item Types setting in the Offline Access Group Policy. or Type the following registry entry: HKCU\Software\EMC\SourceOne\OfflineAccess\Config\Cach eitemtypes Caching options and shortcut policy: Ensure that the setting for the Cache messages that option (All messages or Have attachments) matches the similar setting for the shortcut policy. If these settings do not match, the Offline Access cache either caches more items than necessary or does not cache items that should be in the cache. Cached Exchange Mode: If users do not enable Cached Exchange Mode in Outlook, consider setting the Cache messages that option to Don t cache any messages in Offline Access. Offline Access creates a local cache file that contains messages similar to Outlook s cache. You can decide to not create a local cache for the same reason that Outlook is configured to not use a local cache file. Offline Access continues to operate; however, each time a shortcut is accessed by the user, Offline Access must retrieve the message from the archive server. Calendar items: If you choose to cache calendar items, deploy the new Offline Access client before you create shortcuts for calendar items. Offline Access pre-caches calendar items before they are shortcut. After you deploy the new Offline Access client, calendar items are cached based on the existing cache settings. The All messages and Have attachments options for the Cache messages that setting have the same results for calendar items as they have for messages. 40 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

41 Accessing Xtender messages in a SourceOne environment To access EMC Xtender messages in an environment in which EMC SourceOne is also installed: 1. Connect the Xtender archive to EMC SourceOne. Refer to "Connecting Archives" in the EMC SourceOne Management Administration Guide. 2. Map the Xtender archive folders to EMC SourceOne mapped folders. Refer to "Configuring Mapped Folders" in the EMC SourceOne Management Administration Guide. 3. Give users permissions on the mapped folders. To retrieve messages, Offline Access users must have permissions on those folders. Refer to "Configuring Mapped Folders" in the EMC SourceOne Management Administration Guide. 4. Configure Offline Access to use the EMC SourceOne TCP server settings. Refer to Configuring SourceOne Web Services host settings on page 64. You can also specify TCP server settings during installation of the Offline Access client and in the Offline Access user interface. Offline Access cache Offline Access can run in the following modes: Caching mode: The Cache messages that option is set to either All messages or Have attachments. Messages are cached on the user s hard drive. Users can preview and open shortcut messages in Outlook whether or not they are connected to the network. Shortcut messages are opened from the user s cache. The Update, Rebuild, and Compact options are available on the status icon s right-click menu and on the EMC SourceOne tab in Outlook. Configuration considerations 41

42 Non-caching mode: The Cache messages that option is set to Don t cache any messages. Messages are not cached on the user s hard drive. Users can preview and open shortcut messages in Outlook. The Update, Rebuild, and Compact options are disabled on the status icon s right-click menu and on the EMC SourceOne tab in Outlook. To specify the mode, use the Cache messages that option, as described in Configuring the types of messages to cache on page 61. Offline Access cache maintenance on client computers Consider the following: Changing server settings after Offline Access installation on page 42 Enabling or disabling the Offline Access cache on page 42 Rebuilding the Offline Access cache on page 43 Copying the Offline Access cache to another computer on page 43 Changing server settings after Offline Access installation In EMC SourceOne environments, to change the servers used by EMC SourceOne Offline Access after installation, edit the TCP server settings in one of the following locations: The TCP server settings in Offline Access Group Policy. For more information, refer to Configuring SourceOne Web Services host settings on page 64. The Server Settings dialog box. Refer to the EMC SourceOne Offline Access User Guide. Enabling or disabling the Offline Access cache To enable or disable the cache, refer to one of the following: Enabling/disabling Offline Access on page 48 Enabling/disabling EMC SourceOne Offline Access in the EMC SourceOne Offline Access User Guide or online help 42 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

43 Rebuilding the Offline Access cache To rebuild the cache, see the EMC SourceOne Offline Access User Guide or online help. Copying the Offline Access cache to another computer To avoid rebuilding the OfflineAccess cache on a new or re-imaged computer, copy the cache from the old computer to the new computer before starting Outlook. Table 6 Cache locations Platforms Windows XP Windows Vista Windows 7 Windows 8 Cache location C:\Documents and Settings\user\Local Settings\Application Data\EMC\ C:\Users\user\AppData\Local\EMC\ 1. Copy the EMC folder containing the cache from the old computer to the appropriate directory on the new computer. For example, if the default cache locations are used: For Windows XP, copy the EMC folder to the following directory on the new computer: C:\Documents and Settings\user\Local Settings\Application Data For Windows Vista, Windows 7, and Windows 8, copy the EMC folder to the following directory on the new computer: C:\Users\user\AppData\Local 2. Delete log files from the EMC folder. 3. Start Outlook on the new computer. Outlook will use the OfflineAccess cache that was copied from the old computer. The cache has an ID that is unique for each user, so the cache can be copied. This StoreID is in the registry: HKCU\Software\EMC\SourceOne\OfflineAccess\Config. Configuration considerations 43

44 Configuring Offline Access for multi-user computers To configure Offline Access in a multi-user computer environment, you must use one of the following methods: Configure GPO and push the settings out to all users as described in Configuring group policy on page 45. If you use GPO, then the user cannot edit the settings in the Tools > Options > EMC SourceOne tab in Outlook. Use custom logon scripts to deploy a registry file pointing to HKLM\Software\EMC\SourceOne\OfflineAccess\Config. For descriptions of the settings, refer to the following: HKCU\Software\EMC\SourceOne\OfflineAccess\Config on page 86. The HKLM settings will be copied into the HKCU for each user who logs on to that computer and uses Offline Access. If you use a registry file, then the same settings are sent to all users of that computer. However, each user can edit the settings independently in Tools > Options > EMC SourceOne tab in Outlook, and the edited settings are saved under the HKCU for that user. Offline Access looks under the HKLM registry key for configuration settings that have not been configured by GPO and that have not been set under HKCU. Settings found under HKLM are copied to the user s HKCU and can be edited by the user in Outlook > Tools > Options > EMC SourceOne tab. 44 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

45 Configuring group policy Use Microsoft Group Policy Editor and the EMC Offline Access administrative template (Offline Access Group Policy.adm and Offline Access Group Policy.admx to manage user setting). Offline Access settings managed through Group Policy are written to the registry, under HKCU\Software\Policies\EMC\OfflineAccess\1.0, as described in HKCU\Software\Policies\EMC\OfflineAccess\1.0 on page 96. If an Offline Access policy setting exists in the registry, then corresponding setting in the Tools > Options > EMC SourceOne tab in Outlook is unavailable (grayed out). This is true even if the policy settings were pushed to the client computer before Offline Access was installed. If policy settings are pushed to the client computer: While Outlook is running, Outlook will not use the policy settings until it is restarted. While the Offline Access Agent is running, Outlook should not need a restart, but Outlook will not use the policy settings until the next synchronization run starts. Adding the Offline Access administrative template to Group Policy Editor To add the EMC Offline Access administrative template to Group Policy Editor: 1. Based on the version of Outlook you have on your computer, copy one of the following files from the EMC Offline Access release kit to a directory on the computer. Offline Access Group Policy.adm for Windows 2007 Offline Access Group Policy.admx file for Windows Start the Microsoft Group Policy Editor. Refer to Microsoft documentation. 3. In the left pane, right-click the appropriate Administrative Templates folder, then select Add/Remove Templates. 4. In the Add/Remove Templates dialog box, click Add. Configuring group policy 45

46 5. In the Policy Templates dialog box, select Offline Access Group Policy.adm, then click Open. The Add/Remove Templates dialog box lists Offline Access Group Policy. 6. Click Close to close the Add/Remove Templates dialog box. The Administrative Templates folder displays the EMC Offline Access Policies subfolder. Figure 7 EMC Offline Access policies 46 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

47 Configuring Offline Access policies To configure an Offline Access setting: 1. In Group Policy Editor, expand the Administrative Templates node containing the EMC Offline Access Policies folder. 2. Click the EMC Offline Access Policies folder. 3. In the right pane, double-click the setting that you want to configure. 4. Continue to the appropriate topic: How to enable settings in GPO on page 48 Enabling/disabling Offline Access on page 48 Enabling/disabling copy shortcut behavior on page 50 Configuring the maximum age of messages to cache on page 54 Configuring the maximum cache size on page 55 Showing/hiding the Offline Access tray icon on page 57 Configuring the location of the cache database on page 58 Configuring the synchronization frequency on page 60 Configuring the types of messages to cache on page 61 Configuring the minimum age of messages to pre-cache on page 62 Configuring SourceOne Web Services host settings on page 64 Configuring delay for Requesting Message dialog box on page 67 Configuring log files on page 69 Configuring the startup synchronization delay on page 73 Specifying item types to cache on page After configuring a setting, perform one of the following steps: To go directly to another Offline Access setting, click Apply, then click either Previous Setting or Next Setting. To save your changes and to close the properties dialog box, click OK. Configuring group policy 47

48 How to enable settings in GPO All GPO setting have three standard options: Not Configured, Enabled, and Disabled. Most Offline Access GPO settings also have additional options or fields. If you select the Enabled option for a GPO setting that requires additional information, but you do not supply that information, then the GPO property will revert to Disabled. For example, to enable Offline Access in GPO, you must select both the Enabled option and the Enable Offline Access checkbox, as shown in Figure 8 on page 49. This is how Microsoft's Group Policy Management interface works. Enabling/disabling Offline Access If Offline Access is not enabled by Group Policy, then all other Offline Access policy settings are ignored. If Offline Access is disabled or not configured in Group Policy, then the user s local preferences are used. The user can change settings through the Tools > Options > EMC SourceOne > Offline Access checkbox in Outlook To enable or disable Offline Access: 1. In the EMC Offline Access Policies window, double-click the Enable Offline Access setting. The Enable Offline Access Properties dialog box opens. 48 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

49 Figure 8 Enable Offline Access 2. Perform one of the following steps: To enable Offline Access, select Enabled. To disable Offline Access, select Disabled. Configuring group policy 49

50 Enabling/disabling copy shortcut behavior Overview on page 50 Procedure on page 50! IMPORTANT The Restore On Copy option applies only to Offline Access running with Outlook 2007, and is enabled by default. This option does not apply to Offline Access running with Outlook 2010/2013. Overview Procedure You can enable or disable the restoration of shortcut items when users copy them by using the Restore On Copy setting. If this setting is not configured or is disabled in Group Policy, then the user's preferences are used. The user can change these settings through Tools > Options > EMC SourceOne > Restore on Copy options in Outlook. Other factors also affect the restoration of shortcut items during a copy, as described in "Restoring shortcut items when you copy them" in the EMC SourceOne Offline Access User Guide. To enable or disable the restoration of shortcut items when users copy or move them: 1. In the EMC Offline Access Policies window, double-click the Copy Shortcuts Behavior setting. The Copy Shortcuts Behavior Properties dialog box opens. 50 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

51 Figure 9 Copy shortcuts behavior 2. Perform one of the following steps: To enable the restoration of shortcut items when users copy them, click Enabled. To disable the restoration of shortcut items when users copy them, click Disabled. Configuring group policy 51

52 Enabling/disabling move shortcut behavior Overview on page 50 Procedure on page 50! IMPORTANT The Restore On Move option applies only to Offline Access running with Outlook 2007, and is enabled by default. This option does not apply to Offline Access running with Outlook 2010/2013. Overview Procedure You can enable or disable the restoration of shortcut items when users copy or move them by using the Restore On Move settings. If this setting is not configured or is disabled in Group Policy, then the user's preferences are used. The user can change these settings through Tools > Options > EMC SourceOne > Restore On Move options in Outlook. Other factors also affect the restoration of shortcut items during a move, as described in "Restoring shortcut items when you move them" in the EMC SourceOne Offline Access User Guide. To enable or disable the restoration of shortcut items when users move them: 1. In the EMC Offline Access Policies window, double-click the Move Shortcuts Behavior setting. The Move Shortcuts Behavior Properties dialog box opens. 52 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

53 Figure 10 Move shortcuts behavior 2. Perform one of the following steps: To enable the restoration of shortcut items when users move them, click Enabled. To disable the restoration of shortcut items when users move them, click Disabled. Configuring group policy 53

54 Configuring the maximum age of messages to cache Use the Don t cache messages older than setting with the Cache Maximum Age setting to specify a range of message ages to cache. This value must be greater than the value for the Cache Maximum Age setting, described in Configuring the minimum age of messages to pre-cache on page 62. If this setting is not configured or is disabled, then the user's preference or a default (no limit) is used. The user can change this setting through Tools > Options > EMC SourceOne > Don t cache messages older than field in Outlook. To specify the maximum age of messages to cache: 1. In the EMC Offline Access Policies window, double-click the Cache Maximum Age setting. The Don t Cache Maximum Age Properties dialog box opens. Figure 11 Cache maximum age 54 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

55 2. Perform one of the following steps: To enable the setting, do both of the following steps: a. Select Enabled. b. Select an option from the Cache Maximum Age field. Note: The default is Outlook Offline Setting. To disable the setting, click either: Not Configured Disabled Configuring the maximum cache size You can specify the maximum size of the cache file on disk as the percentage of free disk space to allocate for the cache. If this setting is enabled in Group Policy but a value is not specified, then a default of 20 percent of free disk space is automatically allocated on the cache drive at first run. If this setting is not configured or is disabled in Group Policy, then the user's preferences are used. The user can change the absolute value for this setting in Tools > Options > EMC SourceOne > Cache maximum size (MB) field in Outlook. The user cannot change the percent value. Note: The maximum cache size that you specify is a target for the synchronization process. The actual cache size displayed in Tools > Options > EMC SourceOne > Support Information in Outlook may exceed the specified maximum cache size by several percentage points. Configuring group policy 55

56 To specify the maximum cache size: 1. In the EMC Offline Access Policies window, double-click the Cache Maximum Size setting. The Cache Maximum Size Properties dialog box opens. Figure 12 Cache maximum size 2. To enable the setting, perform the following steps: a. Select Enabled. b. Specify a relative maximum cache size by selecting a percent from the % of Free Disk Space for Cache field. The range of valid values is 5-3 percent. The default is 20 percent. 3. To disable the setting, select either: Not Configured Disabled 56 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

57 Showing/hiding the Offline Access tray icon If this setting is not configured or is disabled in Group Policy, then the user's preferences are used. The user can change this setting in Tools > Options > EMC SourceOne > Show tool tray icon checkbox in Outlook. Note: In Windows 7, the Offline Access icon is not displayed by default. Refer to "Displaying the Offline Access icon in Windows 7" in the EMC SourceOne Offline Access User Guide. To show or hide the Offline Access icon in the system tool tray: 1. In the EMC Offline Access Policies window, double-click the Show Tray Icon setting. The Show Tray Icon Properties dialog box opens. Figure 13 Show tray icon 2. Do one of the following steps: To enable the setting, select Enabled. To disable the setting, select Disabled. Configuring group policy 57

58 Configuring the location of the cache database If you enable this setting in Group Policy, but do not specify a location, then the default path configured during installation is used (the user s Application Data path). If this setting is not configured or is disabled in Group Policy, then the the user s preference or the default path configured during installation is used. The user can change this setting in Tools > Options > EMC SourceOne tab > Cache Settings > Select new option in Outlook.! CAUTION Do not specify any of the following folders as the cache location: C:\Windows, C:\WinNT, C:\InetPub, C:\Program Files. Do not specify any folder that contains other files. Do not store other files in the cache directory. The cache directory is removed when Offline Access is uninstalled (unless you perform a silent uninstall that includes the EX_SAVECACHE=TRUE argument). 58 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

59 To specify the location of the cache database: 1. In the EMC Offline Access Policies window, double-click the Cache Database Location setting. The Cache Database Location Properties dialog box is opened. Figure 14 Cache database location 2. To enable the setting, perform the following steps: a. Select Enabled. b. In the Path for the Cache Database field, type the path in which you want the cache to reside. Note: Specify a full local path. Network shares are not supported. 3. To disable the setting, select either: Not Configured Disabled Configuring group policy 59

60 Configuring the synchronization frequency If this setting is not configured or is disabled, then the default resynchronization frequency of 1440 minutes (24 hours) is used. The user can change this setting in Tools > Options > EMC SourceOne tab > Cache Settings > Update frequency (minutes) field in Outlook. To specify how often to synchronize the cache with the user s mailbox: 1. In the EMC Offline Access Policies window, double-click the Cache Sync Frequency setting. The Cache Sync Frequency Properties dialog box opens. Figure 15 Cache synchronization frequency 60 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

61 2. To enable the setting, perform the following steps: a. Select Enabled. b. Specify a frequency, in minutes, in the Cache Sync Frequency (in minutes) field. The range of valid values is 60 to minutes. The default is 1440 minutes (24 hours). 3. To disable the setting, select either: Not Configured Disabled Configuring the types of messages to cache If these settings are not configured or are disabled in Group Policy, then the user's preferences are used. The user can change this setting in Tools > Options > EMC SourceOne tab > Cache Settings > Cache messages field. To specify the types of items to cache: 1. In the EMC Offline Access Policies window, double-click the Cache Filter setting. The Cache Filter Properties dialog box opens. Figure 16 Cache filter Configuring group policy 61

62 2. Perform one of the following steps: To enable the setting, perform the following steps: a. Select Enabled. b. Select an option from the Cache Items that field: All items: Cache all items (default) Have attachments: Cache only items with attachments Don t cache any items: Do not cache any items To disable the setting, select either Not Configured or Disabled. Configuring the minimum age of messages to pre-cache You use the Cache Maximum Age setting with the Don t cache items older than setting to specify a range of message ages to cache. This value must be less than the value for the Cache Maximum Age setting, described in Configuring the maximum age of messages to cache on page 54. Messages that are newer than the minimum age you specify are not cached. If this value is not set, then the default is 30 days. If these settings are not configured or are disabled in Group Policy, then the user's preferences are used. The user can change this setting in Tools > Options > EMC SourceOne > Cache Settings > Cache items that are older than (days) field. To specify the minimum age of items to pre-cache: 1. In the EMC Offline Access Policies window, double-click the Cache Minimum Age setting. The Cache Minimum Age Properties dialog box opens. 62 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

63 Figure 17 Cache minimum age 2. Perform one of the following steps: To enable the setting, do both of the following steps: a. Select Enabled. b. Specify an age, in days, in the Cache Minimum Age field. The valid range of values is 0 to 999. The default is 30. To disable the setting, click either Not Configured or Disabled. Configuring group policy 63

64 Configuring SourceOne Web Services host settings Refer to: Server settings on page 64 About the TCP server settings on page 64 Configuring TCP server settings on page 65 Server settings Note: Refer to Accessing Xtender messages in a SourceOne environment on page 41 for information on how to access Xtender messages in an environment in which EMC SourceOne is also installed. If you use Group Policies to push server addresses for Offline Access, you must also push the archive server type. This is especially important for sites that: Are moving users from Xtender to EMC SourceOne. You must push the SourceOne server type along with the TCP server addresses. Install Offline Access on multi-user computers. Uninstall only cleans the registry for the user who uninstalls Offline Access. Configuring Offline Access for multi-user computers on page 44 provides more information. About the TCP server settings The Offline Access Extension uses the Real-time Message Retrieval Server TCP Address: Port setting for retrieval, and the Offline Access Agent uses the Synchronization (backfill) Server TCP Address: Port setting to populate (pre-cache and backfill) the cache. Both settings are required. If these settings are not configured during installation or in Group Policy, or are disabled in Group Policy, then the user's preferences are used. The user can change this setting in Tools > Options > EMC SourceOne tab > Server Settings option in Outlook. 64 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

65 Configuring TCP server settings To configure TCP server settings: 1. In the EMC Offline Access Policies window, double-click the SourceOne Web Services Host Settings option. The SourceOne Web Services Host Settings Properties dialog box opens. Figure 18 Web service server settings 2. Perform one of the following steps: To enable the setting, do steps a, b, and c: a. Select Enabled. b. In the Real-time Message Retrieval Server TCP Address: Port field, specify the following: Fully qualified EMC SourceOne server name. Configuring group policy 65

66 Port on that server that is hosting the Document Management Service (DocManageSvcHost): EMC_SourceOne_server.domain:8001 Example: ES1Server.corp.company.com:8001 The Real-time Message Retrieval Server TCP Address: Port field must be configured so that messages can be retrieved. c. In the Synchronization (backfill) Server TCP Address: Port field, specify the following: The fully qualified EMC SourceOne server name. The port on that server that is hosting the Document Management Offline Access Service (DocManageSvcOAHost): EMC_SourceOne_server.domain:8002 Example: ES1Server.corp.company.com:8002 The Synchronization (backfill) Server TCP Address: Port field must be configured so that Offline Access caches on user computers can be populated (back-filled). Note: Do not specify port 8001 for the Synchronization (backfill) Server TCP Address: Port. Port 8001 is also used by other EMC SourceOne clients (OWA, Outlook, EMC SourceOne Search, EMC SourceOne Discovery Manager) for message retrieval. If you specify port 8001 for the Synchronization (backfill) Server TCP Address: Port, then the backfilling process for Offline Access could negatively affect message retrieval by other clients. To disable the setting, select either Not Configured or Disabled. 66 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

67 Configuring delay for Requesting Message dialog box If an item is taking some time to retrieve, a Requesting Message dialog box is displayed. Figure 19 Requesting message If the user does not want to wait for the item to be retrieved, then the user can click Cancel. You can configure the delay before this dialog box opens. If this setting is not configured or is disabled in Group Policy, then the user's preferences are used. The user can change this setting by using the Tools > Options > EMC SourceOne > Notifications option in Outlook. To configure the delay before this dialog box opens: 1. In the EMC Offline Access Policies window, double-click the Cancel Dialog Delay policy. The Cancel Dialog Delay Properties dialog box opens. Configuring group policy 67

68 Figure 20 Cancel dialog delay 2. Perform one of the following steps: To enable the setting, do both of the following steps: a. Select Enabled. b. In the When retrieving messages show cancel dialog after (secs) field, specify the amount of time, in seconds, to wait before displaying the Wait (Cancel) dialog box. The range of values is 1 to 100 (seconds). The default is 2 (seconds). To disable the setting, select either Not Configured or Disabled. Note: If the user selects several items to copy or move that are not in the cache and are being retrieved, and if the user clicks Cancel in the Requesting Message dialog box, then the entire copy or move operation is cancelled. No items are copied or moved. To override this behavior, use the ContinueOnCancel registry entry. Refer to HKCU\Software\EMC\SourceOne\OfflineAccess\Config on page EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

69 Configuring log files! IMPORTANT Do not operate with a high logging level. By default, the verbosity level for EMC SourceOne trace logs is set to None. For troubleshooting purposes, EMC Support personnel may instruct you to set the verbosity level to Verbose for one or more trace logs. After you supply the requested logs to EMC Support, lower the verbosity level to None. A verbosity level higher than None has a negative effect on CPU use and disk space. Log filenames and locations This table describes the Offline Access log files. Table 7 Log files Installation Offline Access for Outlook 2007 Offline Access for Outlook 2010/2013 Log files OfflineAccessExtension.log - the Exchange Client Extension for Outlook interactions OfflineAccessAgent.log - the agent for background retrievals OfflineAccessConfig.log - the property page operations OfflineAccessAddIn.log - the add-in for Outlook interactions OfflineAccessAgent.log - the agent for background retrievals OfflineAccessConfig.log - the property page operations This table lists the locations of the log files. Table 8 Location of the log files Platform Windows XP Windows Vista Windows 7 Windows 8 Location C:\Documents and Settings\user\Local Settings\Application Data\EMC\ C:\Users\user\AppData\Local C:\Users\user\AppData\Local \EMC C:\Users\user\AppData\Local \EMC Configuring group policy 69

70 Enabling logging and setting logging level To enable logging and to set the logging level, refer to "Configuring logging" in the EMC SourceOne Offline Access User Guide. Changes to the log level setting by using the Tools > Options > EMC SourceOne > Support Information dialog box take effect for each component at different times: For the Offline Access Extension, changes to logging level take effect as soon as a message is selected or read. For the Offline Access Agent, changes to logging level take effect in two minutes, or at the next synchronization, whichever happens first. 70 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

71 Specifying size and number of log files When a log file reaches a certain size, a new log file is created. To control the maximum size and number of log files when logging is enabled: 1. In the EMC Offline Access Policies window, double-click the Log File Settings policy. The Log File Settings Properties dialog box opens. Figure 21 Log file settings Configuring group policy 71

72 2. Perform one of the following steps: To enable the setting, do steps a, b, and c: a. Select Enabled. b. In the Number of log files per component (agent and extension) field, specify the maximum number of log files to create. The value is applied to each Offline Access component (agent and extension). The range of values is 1 to 20. The default is 5. c. In the Maximum size of each log file in MB field, specify the maximum size of log files to create. The value is applied to each Offline Access component (agent and extension). The range of values is 1 to 100 (MB). The default is 20 (MB). To disable the setting, select either Not Configured or Disabled. To calculate the disk space used by the log files based on your settings, use the following formula: Number of log files per component x Maximum size of each log file x 2 For example, if you use the default settings, then the log files would use 200 MB of disk space: 5 files x 20 MB x 2 = 200 MB Note: To prevent the log files from filling the hard disk, logging is disabled when the disk free space reaches 20 percent or less of the total space, regardless of the size and number of log files you specify. Deleting log files You can delete old log files at any time, even if Offline Access is running. You cannot delete the current, active OfflineAccessAgent.log file until you shut down the Offline Access Agent. You cannot delete the current, active OfflineAccessExtension.log file until you shut down Outlook. 72 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

73 Configuring the startup synchronization delay You can specify the delay between the time that Outlook and the Offline Access Agent starts, and the time that a scheduled synchronization or a rebuild occurs. This delay prevents performance problems that can happen if a synchronization or rebuild occurs while Outlook is starting. Users cannot change this setting. To specify how long to delay synchronization at startup: 1. In the EMC Offline Access Policies window, double-click the Startup Sync Delay setting. The Startup Sync Delay Properties dialog box opens. Figure 22 Startup sync delay properties Configuring group policy 73

74 2. Perform one of the following steps: To enable the setting, do both of the following steps: a. Select Enabled. b. Specify a time, in seconds, in the After agent startup, delay scheduled syncs for (secs) field. The valid range of values is 60 to The default is 600. To disable the setting, select either Not Configured or Disabled. Specifying item types to cache You can specify the types of items to cache. The valid values correspond to the item types supported by EMC SourceOne Shortcut activities and by Offline Access. Users cannot change this setting. To specify the types of items to cache: 1. In the EMC Offline Access Policies window, double-click the Cache Item Types setting. The Cache Item Types Properties dialog box opens. Figure 23 Cache items types 74 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

75 2. Perform one of the following steps: To disable the setting, select either Not Configured or Disabled. To enable the setting, do both of the following steps: a. Select Enabled. b. In the Cache item types mask field, specify one of the values listed in Table 9 on page 75. Table 9 Valid values for Cache item types Value Description 1 Items (default) 2 Appointments 4 Meetings Note: To cache more than one type of item, specify the sum of the appropriate values. If you enter a value outside the range of 1 through 7, then an error message displays, for example: 3 Items and Appointments 5 Items and Meetings 6 Appointments and Meetings 7 Items and Appointments and Meetings 0 is less than the minimum allowed value of 1. 1 will be saved instead of 0. 8 is greater than the maximum allowed value of 7. 7 will be saved instead of 8. Configuring group policy 75

76 Configuring Offline Access for User Delete Offline Access 6.7 and higher supports the User Delete feature. If you configure Offline Access for User Delete: Users can delete items from the SourceOne archive through Outlook. Users can delete single or multiple selected items. Users are prompted for confirmation before deleting the items from the archive. Users can apply the current action to all future deletions and suppress prompting. User Delete behavior depends on the version of Outlook, as described in Table 4. Table 4 User Delete behavior in versions of Outlook Features Outlook 2007 Outlook 2010 Drag and drop to Deleted Items folder Not supported Supported Deletion of Appointment types Not supported Supported Explicit deletions from the list pane Supported Supported Deletions from To-Do Bar Not Supported Not Supported Deletion of items in an Inspector window Deletion of items by deleting the parent Outlook folder Supported Not Supported in Outlook 2007 Supported Supported Before you configure Offline Access for User Delete, review Considerations and limitations for User Delete on page 77. To enable or disable User Delete for the Outlook mail client, use the User Delete Enable setting in EMC Offline Access Policies, as described in Enabling/disabling User Delete on page 78. For additional configuration information, refer to: GPO entries for User Delete on page 78 Registry entries for User Delete on page EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

77 Considerations and limitations for User Delete User Delete does not support: Delegate deletions (the ability for a delegate to remove a delegator s archive content). PST deletions (removing the archive content by deleting archived items within PSTs). Public folder deletions (removing the archive content by deleting the archived items within public folders). Implicit deletions through rules, out-of-store moves etc. Items restored from the Deleted Items folder cannot be re-archived unless the Reprocess items option is specified on a subsequent Historical Archive activity. Some deletion scenarios can lead to orphaned shortcut items: Deleting a shortcut item along with its archive copy, and then restoring the shortcut from the Deleted Items folder causes the shortcut item to be orphaned. Offline Access cache copy might be deleted depending on the restore operation and Offline Access cache update. Deleting one of the multiple mailbox copies of a shortcut item, and subsequently deleting the archive copy causes the remaining copies to be orphaned. Offline Access cache copy cannot be deleted. User Delete operates only on archived items. Deletion of mailbox items that do not have the ES1 MsgID property is ignored. Journaled-only items are not eligible for User Delete activity; Historical Archive processing is required. Actions taken at the Confirm Archive Delete prompt affect only archived content. Supported Delete actions are: Explicit deletions through delete key and context menu. Supported delete actions vary slightly across Outlook versions due to differences or limitations in the integration technologies used. Refer to Table 4 on page 76. Configuring Offline Access for User Delete 77

78 By design: User Delete does not intervene in mailbox deletions. Both Soft deletions (delete actions resulting in messages being moved to the Deleted Items folder) and Hard deletions (SHIFT+DEL action to bypass the Deleted Items folder) are monitored. Deletions from the Deleted Items folder are ignored. In Outlook 2007, EMC SourceOne does not support the deletion of archived content when an Outlook folder is deleted. This behavior is due to a Microsoft defect within the Exchange client Extension and Outlook Refer to the following Microsoft Knowledge base article for more information Users must first delete the items from the Outlook folder, then delete the Outlook folder. GPO entries for User Delete Refer to following sections: Enabling/disabling User Delete on page 78 Enabling/disabling the User Delete Prompt on page 80 Specifying the default delete action on page 81 Enabling/disabling User Delete If User Delete is disabled or not configured in Group Policy, then the following registry entry is used: HKCU\Software\EMC\SourceOne\OfflineAccess\Config\UserDeleteEnable The user cannot enable or disable User Delete. To enable or disable User Delete: 1. In the EMC Offline Access Policies window, double-click the Enable User Delete setting. The User Delete Enable Properties dialog box opens. 78 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

79 Figure 24 Enable User Delete 2. Do one of the following steps: To enable User Delete, click Enabled. To disable User Delete, click Disabled. Configuring Offline Access for User Delete 79

80 Enabling/disabling the User Delete Prompt If this setting is not configured, then the user's preference is used. The user can change this setting through Outlook > Tools > Options >EMC SourceOne tab > Notifications, as described in the EMC SourceOne Offline Access User Guide. If User Delete Prompt is disabled or not configured in Group Policy, then the following registry entry is used: HKCU\Software\EMC\SourceOne\OfflineAccess\Config\UserDeletePrompt The user cannot enable or disable User Delete Prompt. To control the display of the User Delete prompt in the Outlook mail client: 1. In the EMC Offline Access Policies window, double-click the User Delete Prompt Enable setting. The User Delete Prompt Enable Properties dialog box opens. 2. Do one of the following steps: To enable User Delete Prompt, click Enabled. To disable User Delete Prompt, click Disabled. 80 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

81 Figure 25 Enable User Delete Prompt Specifying the default delete action If this setting is not configured, and if the user chooses to suppress the User Delete prompt, then the button that the user selects in the prompt becomes his default delete action: Yes/Yes to All = Always delete selected messages from the archive No/No to All = Never delete selected messages from the archive The following registry entry is used to set User Delete Default Delete. HKCU\Software\EMC\SourceOne\OfflineAccess\Config\UserDeleteDefaultDelete The user cannot enable or disable User Delete Default Delete. Configuring Offline Access for User Delete 81

82 To enable or disable User Delete Default Delete: 1. In the EMC Offline Access Policies window, double-click the Enable Default User Delete setting. The User Delete Default Delete Properties dialog box opens. Figure 26 User Delete Default Delete 2. Perform one of the following steps: To enable Default User Delete, click Enabled. To disable Default User Delete, click either Not Configured or Disabled. 82 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

83 Registry entries for User Delete Note: If you use the User Delete Enable setting in the Offline Access GPO, then the UserDeleteEnable entry is added to HKCU\Software\Policies\EMC\OfflineAccess\1.0, overriding the UserDeleteEnable entry in HKCU\Software\EMC\SourceOne\OfflineAccess\Config. Table 10 on page 83 lists the entries that User Delete uses in HKCU\Software\EMC\SourceOne\OfflineAccess\Config. Table 10 Registry entries for User Delete Value name Type Valid/Default values Description UserDeleteEnable DWORD Valid values: 0 = False Non-zero = True Default = 0 (False) UserDeleteShowPrompt DWORD Valid values: 0 = False Non-zero = True Default = 1 (True) UserDeleteDefaultDelete DWORD Valid values: 0 = False Non-zero = True Default = 0 (False) Corresponds to the Enable User Delete policy. Indicates whether User Delete is enabled or disabled for Outlook. The user cannot change this value. Corresponds to: The Perform this action without prompting for all future deletions checkbox in the Confirm Archive Delete dialog box: When the user selects this checkbox, then the registry value is set to 0. When the user clears this checkbox, then the registry value is set to 1. The Prompt to delete archive copies on deletion of mailbox items checkbox in the Tools > Options > EMC SourceOne > Notifications dialog box in Outlook. When the user selects this checkbox, then the registry value is set to 1. When the user clears this checkbox, then the registry value is set to 0. This value is written to the registry only when the user selects the Perform this action without prompting for all future deletions checkbox in the Confirm Archive Delete dialog box. Indicates the default action selected by the user in the Confirm Archive Delete dialog box: Yes or Yes to All = 1 No or No to All = 0 Configuring Offline Access for User Delete 83

84 Modifying ports used by Offline Access Offline Access uses the Document Management services on the Web Services server. Each Document Management service has its own configuration file on the Web Services server: Program Files\EMC SourceOne\ExDocMgmt\DocManageSvcHost.exe.config Program Files\EMC SourceOne\ExOAService\DocManageSvcOAHost.exe.config After installation, to modify ports used by Offline Access: 1. Edit the port value for the baseaddress key in the following configuration files: In DocManageSvcHost.exe.config: add baseaddress="net.tcp://localhost:8001/docsvc" In DocManageSvcOAHost.exe.config: add baseaddress="net.tcp://localhost:8002/docsvc" 2. Restart the services on the Web Services server. 3. Deploy the port changes to Offline Access clients. Note: To change the port numbers manually in the Offline Access client, refer to the EMC SourceOne Offline Access User Guide or the online help. 84 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

85 Registry entries The following sections describe the registry keys created during installation and operation of EMC SourceOne Offline Access: Some of these entries are created or modified: When you edit settings in the Offline Access Group Policy, as described in Configuring group policy on page 45. When a user edits settings in Outlook > Tools > Options > EMC SourceOne tab, as described in the EMC SourceOne Offline Access User Guide. Also refer to Configuring Offline Access for multi-user computers on page 44. Within each table, the names of registry values are listed in alphabetical order. Refer to: HKEY_CURRENT_USER registry entries on page 85 HKEY_LOCAL_MACHINE registry entries on page 100 HKEY_CURRENT_USER registry entries The following sections describe the Offline Access registry keys created in HKEY_CURRENT_USER: HKCU\Software\EMC\SourceOne on page 86 HKCU\Software\EMC\SourceOne\OfflineAccess on page 86 HKCU\Software\EMC\SourceOne\OfflineAccess\Config on page 86 HKCU\Software\EMC\SourceOne\TraceLogs on page 96 HKCU\Software\Policies\EMC\OfflineAccess\1.0 on page 96 Registry entries 85

86 HKCU\Software\EMC\SourceOne This registry key contains one subkey and one value as given in. Table 11 HKCU\Software\EMC\SourceOne Value name Type Valid/Default values Description LastTally DWORD No longer used. HKCU\Software\EMC\SourceOne\OfflineAccess This registry key contains one subkey and two values. Table 12 HKCU\Software\EMC\SourceOne\OfflineAccess Value name Type Valid/Default values Description LastGoodServer REG_SZ Default: blank The name of the last server with which Offline Access communicated successfully. HKCU\Software\EMC\SourceOne\OfflineAccess\Config This key contains most of the properties of the user s cache. These settings are created or modified by the system or when a user edits settings in Tools > Options > EMC SourceOne tab in Outlook, as described in the EMC SourceOne Offline Access User Guide. Offline Access Group Policy settings, described in HKCU\Software\Policies\EMC\OfflineAccess\1.0 on page 96, take precedence over user settings. 86 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

87 Table 13 HKCU\Software\EMC\SourceOne\OfflineAccess\Config Value name Type Valid/Default values Description BeginCacheItems OlderThan_Days DWORD Default: 30 (days) The age of messages to cache, in days. The user can change this value in the Cache messages that are older than field in the Cache Settings dialog box. The minimum value is 0. CacheEnabled DWORD Valid values: 0 (False) 1 (True) Default: 1 Set to 1 (True) when the user selects the Enable Cache option from the tool tray icon s right-click menu or the Enable Cache checkbox on the EMC SourceOne tab in Outlook Options dialog box. When the CacheEnabled key is set to 1 (True): EMC SourceOne Offline Access cache is enabled, allowing content that was shortcut on the Exchange server to be cached locally. The local cache then resolves the shortcut links in the . EMC SourceOne Offline Access is always loaded with Outlook, but this key must be 1 (True) for Outlook to use its functionality. The user can use the Update menu option or the Rebuild option on the cache. When the CacheEnabled key is set to 0 (False): The local caching done by EMC SourceOne Offline Access is disabled and Outlook displays what it gets from Exchange. In an EMC SourceOne environment with the Mobile service installed, if the mailbox has been shortcut, then the messages display with links that can be resolved. CacheItemTypes DWORD Valid values: 1 ( Items) 2 (Appointments) 4 (Meetings) Default: 1 ( Items) The item types to cache. The valid values correspond to the item types supported by EMC SourceOne Shortcut activities and by Offline Access. To cache more than one item type, specify the sum of the appropriate values: 3 ( Items and Appointments) 5 ( Items and Meetings) 6 (Appointments and Meetings) 7 ( Items and Appointments and Meetings) The user cannot change this value. Refer to Specifying item types to cache on page 74. Registry entries 87

88 Table 13 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description CacheLocation REG_SZ Default for Windows XP: C:\Documents and Settings\User\Ap plication Data\EMC\ Default for Windows Vista: C:\Users\user\Ap pdata\local The path to the current user s cache on the local drive. The user can change this value in the Cache Settings dialog box. If the user uses the Rebuild option, then all the files and folders at this location are deleted. Refer to Configuring the location of the cache database on page 58. CacheMessagesOf Type_enum DWORD Valid values: 0 (All messages) 1 (Have attachments) 2 (Don t cache any messages) Default: 0 The level of caching. The user can change this value in the Cache messages that field in the Cache Settings dialog box. CachePeriod_Days DWORD Default: 0xffffffff (No limit) How long to keep items in the cache, in days. The user can specify a cache period by selecting a value in the Don t cache messages older than field in the EMC SourceOne tab of the Outlook Options dialog box. Values shown in the Don t cache messages older than field as months or years are represented as days in the registry. CancelDialogDelay_Secs DWORD Default: 5 (seconds) The time delay before the Wait dialog box appears when retrieving contents. The user can change this value in the When retrieving messages, show Cancel dialog after _ seconds field in the Notifications dialog box. Compact_Cache DWORD Default: 0 The Offline Access Agent sets this value to True when it wants the Offline Access Compact component to compact the current cache. The Offline Access Compact component sets this value to False when it starts compacting the cache. 88 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

89 Table 13 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description ConnectionState DWORD Valid values: 0 (No front-end servers are reachable) 1 (The primary server is reachable) 2 (the secondary server is reachable) 3 (Both primary and secondary servers are reachable) Default: 3 Note: Do not edit this value. The Offline Access Extension and Agent components use this value internally to track the connectivity of the primary and secondary front-end servers. ContinueOnCancel Valid values: 0 (Default behavior of Cancel in the Requesting Message dialog box) 1 (Overrides Cancel in the Requesting Message dialog box.) If the user selects several items to copy or move that are not in the cache and are being retrieved, and if the user clicks Cancel in the Requesting Message dialog box, then by default the entire copy or move operation is cancelled. No items are copied or moved. To override this default behavior, and to continue retrieving items (restored or shortcut) and complete the copy/move operation, set the ContinueOnCancel registry entry to 1. Note: Use the RestoreOnCopy and RestoreOnMove registry entries to control whether shortcut items are restored when they are copied/moved. CurrentCacheDBSize_MB DWORD Default: 0 (MB at installation) The current size of the cache, in MB. This value is updated by the system, and cannot be edited. This value displays in the Cache Size (MB) field in the Support Information dialog box. CurrentOutlookProfile REG_SZ Default: Outlook The Offline Access Extension sets this value to the current profile that Outlook is using, so that the Offline Access Agent can create a MAPI session by using the same profile as Outlook. Registry entries 89

90 Table 13 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description DisableCacheBuilds DWORD Default: 0 The Offline Access Extension sets this value when the user is using Outlook with a default profile that is not associated with the current cache. This notifies the Offline Access Agent to not to build or work with the cache. For example, assume: The users have a default Outlook profile named Profile1 and have a cache for this profile. The users have another Outlook profile named Profile2, which they define as their new default profile. Profile1 is no longer the user s default profile. In this case, when the user starts Outlook (and the Offline Access extension starts), the Offline Access Extension determines that the user s default profile does not match the profile associated with the cache. The user is prompted to delete the old cache and build a new cache for Profile2. If the user selects No, then the Offline Access Extension runs in cache disabled mode, and the Offline Access extension sets the DisableCacheBuild value to notify the Offline Access Agent not to use the cache. ForceSaveForCacheMode DWORD In Outlook 2007, HTML messages with embedded images or attachments display as plain text when a mailbox is opened by another user with full mailbox access to that mailbox. To work around the issue, set this registry entry to 1. HttpURLPrimary REG_SZ Default: /EMCRetriever /drpwebservice.asmx HttpURLSecondary REG_SZ Default: LanguageID DWORD Default: 1033 (U.S. English) Note: This setting is no longer used. Note: This setting is no longer used. The language code page. 90 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

91 Table 13 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description LastSyncTime DWORD Default: blank Used by the Offline Access Agent to determine when the next synchronization is to occur, based on the update (resynchronization) frequency. The units are ticks, used to represent time to epoch (the number of seconds since January 1, :00:00). The Offline Access Extension uses this value to display the last sync time as a datetime string in the Last cache update field in the Support Information dialog box. This value is updated by the system, and cannot be edited directly. The user can trigger synchronization by selecting the Update option from the tool tray icon s right-click menu. LogginLevel DWORD Valid values: 0 (None) 1 (Low) 2 (Medium) 3 (High) 4 (Verbose) Default: 0 (None) MaxCacheSize_MB DWORD Default: calculated, based on (PercentDiskSpace) x (the free space on the disk) MaxConsecutiveConnectFails DWORD Range: Default: 200 The current logging level. The user can enable/disable logging by selecting an option from the Logging Level field in the Support Information dialog box. Maximum size of the user s cache, in MB. The user can change this value in the Cache maximum size (MB) field in the EMC SourceOne tab of the Outlook Options dialog box. When MaxCacheSize_MB is set to 0 (Not Set), then the maximum cache size is calculated using the PercentDiskSpace value. If a backfill server is not running, then synchronization is interrupted after the specified number of consecutive connection failures. MaxLogonAttempts DWORD Default: 3 Determines how many times the Offline Access status agent attempts to authenticate with the front-end server. After the third attempt, Offline Access is set to an offline state and no longer prompts the user for credentials. NextSyncTime DWORD Calculated time at which the next synchronization should occur, based on LastSyncTime. Registry entries 91

92 Table 13 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description NumberLogFiles DWORD Range: 1-20 Default: 5 Corresponds to the Number of log files per component field in the Log file settings policy. Maximum number of log files to create for each Offline Access component (agent and extension). The value is applied to each component. Use with SizeLogFiles_MB. NumberOfItemsInCache DWORD Default: 0 The number of items in the cache. This value displays in the Items in the cache field in the Support Information dialog box. This value is updated by the system, and cannot be edited directly. OutlookOfflineSetting DWORD Valid values: 0 (False) 1 (True) Default: 1 The user can set this value to 1(True) by selecting offline access cache mode. This value is the same as Outlook cache mode. PercentDiskSpace DWORD Default: 20 (percent) The percent of free disk space to use for the cache. The percent of free disk space to use for the cache when MaxCacheSize_MB is set to 0 (Not Set). RebuildCache DWORD Valid values: 0 (False) 1 (True) Default: 0 RestoreOnCopy DWORD Valid values: 0 (False) 1 (True) Default: 0 The user can set this value to 1 (True) by selecting Rebuild cache in the Support Information dialog box. The user can select Rebuild cache during normal Outlook operation. However, the reset does not occur until after Outlook shuts down. Rebuild cache: Deletes the entire contents of the user s cache (mailbox folder). Re-synchronizes the user s cache with Exchange and EMC SourceOne server when the user restarts Outlook and reconnects to the Microsoft Exchange network. Note: This setting applies to Outlook 2007, not to Outlook Controls whether shortcut messages are restored when users copy them. The user can set this value to 1 (True) by selecting the Restore On Copy checkbox in the EMC SourceOne tab. Also refer to the corresponding setting in Group Policy and HKCU\Software\Policies\EMC\OfflineAccess\ EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

93 Table 13 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description RestoreOnMove DWORD Valid values: 0 (False) 1 (True) Default: 0 ResyncFrequency_Mins DWORD Default: 1440 (minutes; equals once every 24 hours) RetrievalRetryBailWait DWORD Range: (minutes) Default: 60 (minutes) RetrievalRetryMaxInterval DWORD Range: 5-60 (seconds) Default: 15 (seconds) RetrievalRetryNumber DWORD Range: 0-50 Default: 8 ServerVersion_enum DWORD Valid value: 1 (EMC SourceOne) Note: This setting applies to Outlook 2007, not to Outlook Controls whether shortcut messages are restored when users move them. The user can set this value to 1 (True) by selecting the Restore On Move checkbox in the EMC SourceOne tab. Also refer to the corresponding setting in Group Policy and HKCU\Software\Policies\EMC\OfflineAccess\1.0. How often to synchronize the cache with the mailbox. The user can change this value in the Update frequency (minutes) field in the Cache Settings dialog box. (For EMC SourceOne environments.) The wait (in minutes) before performing another synchronization, if a synchronization fails after exceeding the specified number of retries on a single message. Use with RetrievalRetryMaxInterval and RetrievalRetryNumber. (For EMC Source ne environments.) The maximum interval (in seconds) to wait between retrieval attempts. The Offline Access Agent uses randomly calculated intervals between 0 and this value. Use with RetrievalRetryBailWait and RetrievalRetryNumber. (For EMC SourceOne environments.) The number of consecutive attempts to retrieve a message if the EMC SourceOne Document Management service is busy. Use with RetrievalRetryBailWait and RetrievalRetryMaxInterval. The type of server. The value, by default, is set to 1 (EMC SourceOne). Registry entries 93

94 Table 13 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description ShowTrayIcon DWORD Valid values: 0 (Hide icon) 1 (Show icon) Default: 1 Determines whether the EMC SourceOne Offline Access status icon displays in the system tray. The user can set this value to 0 by selecting the Hide This Icon option from the icon s right-click menu, or by clearing the Show tool tray icon checkbox on the EMC SourceOne tab in the Outlook Options dialog box. The user can reset this value to 1 by selecting the Show tool tray icon checkbox on the EMC SourceOne tab in the Outlook Options dialog box. ShutdownDuringSync DWORD Default: 0 If Outlook is closed while a synchronization is occurring, this value is set to 1. When Outlook is restarted, if this value is one, then synchronization will resume. SizeLogFiles_MB DWORD Range: (MB Default: 20 (MB) StatusCheckInterval DWORD Range: (seconds) Default: 120 (seconds) Corresponds to the Maximum size of each log file in MB field in the Log file settings policy. Maximum size of log files to create. The value is applied to each component (agent and extension). Use with NumberLogFiles. The Offline Access Agent performs status checks. It performs the first status check 30 seconds after the Offline Access Agent starts. This registry entry specifies the interval (in seconds) between status checks performed by the Offline Access Agent. The Offline Access icon in the system tool tray displays the status. A lower value updates the status more frequently, but may cause more network traffic. If you specify an invalid value, then at the next status check, the value is reset to the extreme value nearest the invalid value. For example, a value of 10 is reset to 30. The reset action is logged. Changes to this value are applied after the next status check occurs. StoreID REG_SZ The Offline Access Extension sets this value to the StoreID of the Exchange mailbox associated with the cache. 94 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

95 Table 13 HKCU\Software\EMC\SourceOne\OfflineAccess\Config (continued) Value name Type Valid/Default values Description SyncState DWORD Valid values: 0 = Update is not in progress. (Update, Rebuild, and Compact options are enabled.) 1 = Update is in progress. (Update, Rebuild, and Compact options are disabled.) 6 = An error occurred; synchronization failed. (Update, Rebuild, and Compact options are enabled.) Indicates whether an Update (synchronization) is in progress. TCPServerPortPrimary REG_SZ The fully qualified name of the EMC SourceOne server hosting the Document Management Service, and the TCP/IP port used to retrieve messages, specified in: Outlook > Tools > Options > EMC SourceOne tab > Server Settings dialog box > Real-time message retrieval server:port field. TCPServerPortSecondary REG_SZ The fully qualified name of the secondary EMC SourceOne server hosting the Document Management Service, and the TCP/IP port used to backfill the cache, specified in: Outlook > Tools > Options > EMC SourceOne tab > Server Settings dialog box > Synchronization (backfill) server:port field. UsingAddin Indicates which Offline Access component is installed: 0 = The Offline Access extension for Outlook 2007 is installed. 1 = The Offline Access add-in for Outlook 2010 is installed. Registry entries 95

96 HKCU\Software\EMC\SourceOne\TraceLogs This registry key contains several subkeys, one for each Offline Access component. The values in a subkey controls trace logging for that component. Do not edit trace log registry settings unless directed by EMC Support personnel. To specify logging settings, refer to Configuring log files on page 69. HKCU\Software\Policies\EMC\OfflineAccess\1.0 This key contains most of the properties of the user s cache. These entries are created and modified when you edit settings in the Offline Access Group Policy, as described in Configuring group policy on page 45. By default, all policies are set to Not Configured (Disabled). Policy settings take precedence over the user settings in the following: HKCU\ Software\EMC\SourceOne\OfflineAccess\Config Tools > Options > EMC SourceOne. When you enable a policy setting, the user cannot edit the corresponding setting in the Tools > Options > EMC SourceOne option in Outlook. Table 14 HKCU\Software\Policies\EMC\OfflineAccess\1.0 Value name Type Valid/Default values Description BeginCacheItems OlderThan_Days DWORD Default when enabled: 30 (days) Corresponds to the Cache messages older than policy. The age of messages to cache, in days. If this policy is disabled or not configured, then the user can change this value in the Cache messages that are older than field in the Cache Settings dialog box. The minimum value is EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

97 Table 14 HKCU\Software\Policies\EMC\OfflineAccess\1.0 (continued) Value name Type Valid/Default values Description CacheEnabled DWORD When enabled: 1 Corresponds to the Enable Offline Access policy. If this policy is disabled or not configured, then the user can select the Enable Cache option from the tool tray icon s right-click menu or the Enable Cache checkbox on the EMC SourceOne tab in Outlook Options dialog box. When the Enable Offline Access policy is enabled: EMC SourceOne Offline Access cache is enabled, allowing content that was shortcut on the Exchange server to be cached locally. The local cache then resolves the shortcut links in the . EMC SourceOne Offline Access is always loaded with Outlook, but this key must be 1 (True) for Outlook to use its functionality. The user can use the Update menu option or the Rebuild option on the cache. When the Enable Offline Access policy is not configured or disabled: The local caching done by EMC SourceOne Offline Access is disabled and Outlook sees what it gets from Exchange. In an EMC SourceOne environment with the Mobile service installed, if the mailbox has been shortcut, the messages display with links that can be resolved. CacheLocation REG_SZ Default when enabled: blank Corresponds to the Cache database location policy. The path to the current user s cache on the local drive. If this policy is disabled or not configured, then the user can change this value in the Cache Settings dialog box. If the user uses the Rebuild option, then all the files and folders at this location are deleted. CacheMessagesOf Type_enum DWORD Valid values: 0 (All messages) 1 (Have attachments) 2 (Don t cache any messages) Default when enabled: 0 Corresponds to the Cache message types policy. Determines whether or not messages are cached, and if so, which messages: all messages or only those messages that have attachments. If this policy is disabled or not configured, then the user can change this value in the Cache messages that field in the Cache Settings dialog box. Registry entries 97

98 Table 14 HKCU\Software\Policies\EMC\OfflineAccess\1.0 (continued) Value name Type Valid/Default values Description CachePeriod_Days DWORD Default when enabled: 0xffffffff (No Limit) CancelDialogDelay_Secs DWORD Default when enabled: 5 (seconds) Corresponds to the Don t cache messages older than policy. How long to keep items in the cache, in days. If this policy is disabled or not configured, then the user can specify a cache period by selecting a value in the Don t cache messages older than field in the EMC SourceOne tab of the Outlook Options dialog box. Values shown in the Don t cache messages older than field as months or years are represented as days in the registry. Corresponds to the Cancel dialog delay policy. The time delay before the Wait (Cancel) dialog box appears when retrieving contents. If this policy is disabled or not configured, then the user can change this value in the When retrieving messages, show Cancel dialog after _ seconds field in the Notifications dialog box. HttpURLPrimary REG_SZ Note: This setting is no longer used. HttpURLSecondary REG_SZ Note: This setting is no longer used. NumberLogFiles DWORD Range: 1-20 Default: 5 PercentDiskSpace DWORD Default when enabled: 20 (percent) ResyncFrequency_Mins DWORD Default when enabled: 1440 (minutes; equals once every 24 hours) Corresponds to the Number of log files per component field in the Log file settings policy. Maximum number of log files to create for each Offline Access component (agent and extension). The value is applied to each component. Use with SizeLogFiles_MB. Corresponds to the % of free disk space for cache setting in the Maximum cache size policy. The percent of free disk space to use for the cache when MaxCacheSize_MB is set to 0 (Not Set). Corresponds to the Cache re-sync frequency policy. How often to synchronize the cache with the mailbox. If this policy is disabled or not configured, then the user can change this value in the Update frequency (minutes) field in the Cache Settings dialog box. 98 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

99 Table 14 HKCU\Software\Policies\EMC\OfflineAccess\1.0 (continued) Value name Type Valid/Default values Description ShowTrayIcon DWORD Valid values: 0 (Hide icon) 1 (Show icon) SizeLogFiles_MB DWORD Range: (MB) Default: 20 (MB) Corresponds to the Show icon in system tray policy. Determines whether the EMC SourceOne Offline Access status icon displays in the system tray. If this policy is disabled or not configured, then the user can set this value to 0 by selecting the Hide This Icon option from the icon s right-click menu, or by clearing the Show tool tray icon checkbox on the EMC SourceOne tab in the Outlook Options dialog box. The user can reset this value to 1 by selecting the Show tool tray icon checkbox on the EMC SourceOne tab in the Outlook Options dialog box. Corresponds to the Maximum size of each log file in MB field in the Log file settings policy. Maximum size of log files to create. The value is applied to each component (agent and extension). Use with NumberLogFiles. TCPServerPortPrimary REG_SZ Default: blank Corresponds to the Real-time message retrieval server:port setting in the TCP server settings policy. (For EMC SourceOne environments.)the TCP/IP port of the EMC SourceOne server hosting the Document Management Service used for retrieving messages. If this policy is disabled or not configured, then the user can change this value in the Real-time message retrieval server:port field in the Server Settings dialog box. TCPServerPortSecondary REG_SZ Default: blank Corresponds to the Synchronization (backfill) server:port setting in the TCP server settings policy. (For EMC SourceOne environments.) The TCP/IP port of the EMC SourceOne server hosting the Document Management Service used for backfilling the cache. If this policy is disabled or not configured, then the user can change this value in the Synchronization (backfill) server:port field in the Server Settings dialog box. Registry entries 99

100 HKEY_LOCAL_MACHINE registry entries The following sections describe the registry keys created in HKEY_LOCAL_MACHINE for Offline Access: HKLM\Software\EMC\SourceOne on page 100 HKLM\Software\EMC\SourceOne\OfflineAccess on page 100 HKLM\Software\EMC\SourceOne\Security on page 101 HKLM\Software\EMC\SourceOne\Versions on page 101 HKLM\Software\EMC\SourceOne This registry key contains two values and several subkeys. Table 15 HKLM\Software\EMC\SourceOne Value name Type Valid/Default values Description InstallDir REG_SZ Default: C:\Program Files\EMC SourceOne Parent directory in which EMC SourceOne executables are installed. LogDir REG_SZ Not used by Offline Access. Refer to Configuring log files on page 69 for the location of Offline Access log files. HKLM\Software\EMC\SourceOne\OfflineAccess This registry key contains one value. Table 16 HKLM\Software\EMC\SourceOne\OfflineAccess Value name Type Valid/Default values Description InstallDir REG_SZ Default: C:\Program Files\EMC SourceOne Directory in which Offline Access executables are installed. Specified on the Destination Folder screen or Change Destination Folder screen during installation. 100 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

101 HKLM\Software\EMC\SourceOne\Security This registry key contains one value that stores the encrypted security key for EMC SourceOne. Table 17 HKLM\Software\EMC\SourceOne\Security Value name Type Valid/Default values Description ExDpKey REG_SZ Encrypted security key. HKLM\Software\EMC\SourceOne\Versions This registry key contains one value that stores the version number for Offline Access. Table 18 HKLM\Software\EMC\SourceOne\Versions Value name Type Valid/Default values Description OfflineAccess REG_SZ Current version number of Offline Access The current version number of Offline Access. Registry entries 101

102 Enabling Kerberos authentication Use the information the following sections describe to enable Kerberos authentication for use with EMC SourceOne Offline Access. Overview of using Kerberos authentication with Offline Access on page 102 Enabling Kerberos authentication on the EMC SourceOne Web server on page 103 Enabling Kerberos on Offline Access clients on page 107 Overview of using Kerberos authentication with Offline Access EMC SourceOne Offline Access by default uses Microsoft Windows NT LAN Manager (NTLM) authentication. In some cases, you may want to change the authentication protocol used by Offline Access to be Kerberos authentication instead of NTLM. For example, you may want to use Kerberos with Offline Access when using Offline Access on an Internet Protocol version 6 (IPV6) network, or when using software that allow smart cards for authentication. To enable Kerberos authentication for Offline Access and verify that it is working, you must perform tasks on both the Offline Access clients and on the EMC SourceOne Web servers as described in the following sections: Enabling Kerberos authentication on the EMC SourceOne Web server on page 103 Enabling Kerberos on Offline Access clients on page 107 Verifying that Kerberos authentication is being used on the server and client on page EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

103 Enabling Kerberos authentication on the EMC SourceOne Web server You enable Kerberos authentication on the EMC SourceOne Web server, by doing the following: 1. Modify the configuration files on the EMC SourceOne Web servers to enable Kerberos authentication as described in Modifying configuration files to enable Kerberos on page Set the Service Principal Name (SPN) used for Kerberos authentication as described in Set the Service Principal Names to be used on page Stop and then restart the needed services on the EMC SourceOne Web server as described in Restart the services after changing the configuration on page Verify that Kerberos authentication is being used as described in Enabling Kerberos on Offline Access clients on page 107. Modifying configuration files to enable Kerberos To enable Kerberos authentication, you much modify the two files used to configure the one or more EMC SourceOne Web servers on each computer where the EMC SourceOne Document Management Service is installed. You need to modify these two files for each server running the EMC SourceOne Document Management Service. These files are: DocManageSvcHost.exe.config Used to configure the EMC SourceOne Document Management Service (DocManageSvcHost.exe). The Document Management Service is installed as part of the EMC SourceOne Web Services component of EMC SourceOne Management. Modify the DocManageSvcHost.exe.config file as described in Modifying the DocManageSvcHost.exe.config file on page 104. DocManageSvcOAHost.exe.config Used to configure the Document Management Offline Access Service (DocManageSvcOAHost.exe). This file is installed as part of EMC SourceOne Offline Access. Modify the DocManageSvcOAHost.exe.config file as described in Modifying the DocManageSvcOAHost.exe.config file on page 105. Enabling Kerberos authentication 103

104 Modifying the DocManageSvcHost.exe.config file To modify the DocManageSvcHost.exe.config file, do the following: 1. Edit the file, DocManageSvcHost.exe.config, and find the following section: <system.servicemodel>... <endpoint > <!-- <identity> <serviceprincipalname value="docmanagesvc/server:8001"/> </identity> --> </endpoint> </system.servicemodel> 2. Remove the comment around the <identify> </identify> block, and replace the word Server with the fully qualified domain name of the server (or the load balancer for the server) on which the Document Management Service runs. For example, the following shows the comment removed and the word Server replaced by the fully qualified domain name for the server Example1, where the Document Management Service runs at this site: <system.servicemodel>... <endpoint > <identity> <serviceprincipalname value="docmanagesvc/example1.corp.com:8001"/> </identity> </endpoint> </system.servicemodel> 3. Save the file. 104 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

105 Modifying the DocManageSvcOAHost.exe.config file To modify the DocManageSvcOAHost.exe.config file, do the following: 1. Edit the file, DocManageSvcOAHost.exe.config, and find the following section: <system.servicemodel>... <endpoint > <!-- <identity> <serviceprincipalname value="docmanagesvc/server:8002"/> </identity> --> </endpoint> </system.servicemodel> 2. Remove the comment around the <identity> </identity> block, and replace the word Server with the fully qualified domain name of the server (or the load balancer for the server) on which the Document Management Service and the Offline Access Service run. For example, the following shows the comment removed and the word Server replaced by the fully qualified domain name of the server Example1, where the Document Management Service and the Offline Access service run at this site: <system.servicemodel>... <endpoint > <!-- <identity> <serviceprincipalname value="docmanagesvc/example1.corp.com:8002"/> </identity> --> </endpoint> </system.servicemodel> 3. Save the file. Enabling Kerberos authentication 105

106 Set the Service Principal Names to be used To use Kerberos authentication with Offline Access, you must configure a service principal name (SPN) to be used for the authentication as described in the following sections: Understanding and using an SPN with Offline Access on page 106 Registering the SPNs for use with Offline Access on page 106 Understanding and using an SPN with Offline Access A service principal name (SPN) is the name by which a Kerberos client uniquely identifies an instance of a service for a given Kerberos target computer. For additional background information on the SetSPN utility, including usage and installation, refer to the following: Note: The configuration of Kerberos authentication for use with Offline Access differs from that used for single sign-on configurations. For more information on using Kerberos in a single sign-on configuration, refer to the EMC SourceOne Management Installation Guide appendix Single Sign-on Support Example (Windows). Registering the SPNs for use with Offline Access You register the service principal names to be used by Offline Access using the Microsoft SetSPN utility. To register the service principal names, do the following on the domain controller used by Offline Access, using the service account used by the EMC SourceOne Web Services: 1. List the currently registered SPNs by issuing the SetSPN command with the -L option as in the following example: setspn -L domain\e5admin 2. Register the Document Management Service (DocManageScv) as an SPN for both the 8001 and 8002 ports used by Offline Access, using the fully qualified domain name of the one or more EMC SourceOne Web Services servers (or the load balancer for the servers). In the following example, the fully qualified name of the Discovery Manager Web Services host computers are Example1.domain.com and Example2.domain.com. 106 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

107 setspn -A DocManageSvc/Example1.domain.com:8001 domain\e5admin setspn -A DocManageSvc/Example1.domain.com:8002 domain\e5admin setspn -A DocManageSvc/Example2.domain.com:8001 domain\e5admin setspn -A DocManageSvc/Example2.domain.com:8002 domain\e5admin Note: The fully qualified names used with the SetSPN utility should be the same names specified in the modified DocManageSvcOAHost.exe.config and DocManageSvcHost.exe.config files 3. List the currently registered SPNs again to verify that the previous registration was successful. setspn -L domain\e5admin 4. Log out of the EMC SourceOne Web Services service account. Restart the services after changing the configuration After you have changed the configuration files and registered the service principal names, you need to stop and restart two services on the EMC SourceOne Web server: Document Management Service (DocManageSvcHost.exe) Offline Access Service (DocManageSvcOAHost.exe) Enabling Kerberos on Offline Access clients You enable Kerberos authentication on the Offline Access clients in your organization by: On installation, using the appropriate install option. Refer to Enabling Kerberos using an installation option on page 108. Using group policies to update your Offline Access clients. Refer to Enabling Kerberos using group policies on page 108.! IMPORTANT When installing or updating Offline Access clients, ensure that when you specify server settings you use the same fully qualified domain name used in the configuration files as described in Enabling Kerberos authentication on the EMC SourceOne Web server on page 103. Enabling Kerberos authentication 107

108 Enabling Kerberos using an installation option To enable Kerberos authentication when performing a silent install of the Offline Access client, specify the following option and value: USEKERBEROS=1 Alternatively, if the Offline Access client is already installed, you can enable Kerberos authentication for that client by doing the following on the computer on which the Offline Access client is installed: 1. Change the registry value of EnableKerberosAuth to a value of Stop and then restart Microsoft Outlook. Refer to the EMC SourceOne Offline Access Installation and Administration Guide for more information on installing (or modifying the installation of) the Offline Access client. Enabling Kerberos using group policies You can enable Kerberos authentication using the Microsoft Group Policy Editor and the EMC Offline Access administrative template (Offline Access Group Policy.adm for Outlook 2007 and Offline Access Group Policy.admx for Outlook 2010) to manage user settings. To enable Kerberos authentication through the Group Policy Editor user interface, do the following: 1. In the EMC Offline Access policies, select the Enable Kerberos Authentication setting. 2. In the Enable Kerberos Authentication Properties dialog, select Enabled and click OK. Refer to Figure 27, Using Group Policy Editor to enable Kerberos authentication, for an illustration of using the Group Policy Editor to enable Kerberos authentication. For detailed instructions on how to alter Offline Access clients using GPO templates, refer to Chapter 4, Configuring Offline Access in the EMC SourceOne Offline Access Installation and Administration Guide. 108 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide

109 Figure 27 Using Group Policy Editor to enable Kerberos authentication EMC SourceOne Management 6.8 SP2 introduces a new key that can be used with the templates that allow you to specify whether to use NTLM or Kerberos as the authentication protocol. By default, NTLM authentication is specified by the following key and values: EnableKerberosAuth Dword 0 To use Kerberos authentication, use the following key values: EnableKerberosAuth Dword 1 Enabling Kerberos authentication 109

110 Verifying that Kerberos authentication is being used on the server and client Once you have completed the process of enabling Kerberos authentication on the servers and clients, you can verify that it is functioning correctly by using the Offline Access client to restore a shortcut message, and then reviewing the resulting event log message. For example, Figure 28, Example of Kerberos authentication used with Offline Access, shows the properties for an event log message that indicate that Kerberos authentication was used. Figure 28 Example of Kerberos authentication used with Offline Access 110 EMC SourceOne Version 7.1 Offline Access Installation and Administration Guide