Installing GFI MailArchiver

Installing GFI MailArchiver Introduction This chapter highlights important points you should take into consideration before installing GFI MailArchiver on your network, so that you can make the best decisions on where to install and how to configure GFI MailArchiver on your network. On which machine should I install GFI MailArchiver? GFI MailArchiver should be installed on a machine that forms part of the Active Directory domain whilst taking into consideration the following points: Email flow experienced by your servers Machine hardware and software specifications Need to archive email from multiple sources concurrently For example, if you only need to archive email from one Exchange Server, and the server is handling the email flow on your network and still has spare processing capacity, then you can choose to install GFI MailArchiver on the Exchange Server machine directly. On the other hand, if you want to archive email from multiple Exchange servers using IMAP, we suggest that you install GFI MailArchiver on a separate machine. NOTE 1: GFI MailArchiver does not require a dedicated machine when it is not installed on the mail server. For example, you can, install GFI MailArchiver on machines running other applications such as GFI MailEssentials or GFI MailSecurity. NOTE 2: In a Microsoft Exchange Server 2007 environment, you can install GFI MailArchiver on a machine with Microsoft Exchange 2007 Client Access Role Server. In this scenario, you need to enable the IMAP service to access the journaling mailbox stored on the Microsoft Exchange 2007 Mailbox Role Server machine. For more information refer to Appendix: Enabling IMAP on Microsoft Exchange Server 2007 in this manual. The machine on which you choose to install GFI MailArchiver must have Microsoft Internet Information Services (IIS) and the World Wide Web Service installed and running. ASP.NET must be registered since GFI MailArchiver needs to create a virtual directory to host the GFI MailArchiver web interface. GFI MailArchiver for Exchange Installing GFI MailArchiver 7

System requirements To install GFI MailArchiver you need: Windows 2000 (Service Pack 3 or higher), Windows 2003 or Windows 2008 NOTE: The machine needs to be a Domain Controller or connected to one, since GFI MailArchiver requires access to Active Directory. Access to Microsoft Exchange Server 2000 or later Microsoft.NET Framework 2.0 Internet Information Services (IIS) World Wide Web service NOTE: Ensure that ASP.NET is registered with IIS. To register it follow these steps: 1. Open Command Prompt 2. Go to <Windows Directory>\Microsoft.NET\Framework\<version number>\ 3. Type the command aspnet_regiis.exe i and press ENTER Microsoft Internet Explorer 5.5 or later NOTE: Upon installation, GFI MailArchiver creates a default archive store in a Firebird database. (Firebird is an open source database server). Therefore, Microsoft SQL Server is only a requirement if you would like to store data on Microsoft SQL Server rather than on Firebird. GFI MailArchiver supports both Microsoft SQL Server 2000 (Service Pack 3 or higher), Microsoft SQL Server 2005 and Microsoft SQL Server 2008. Refer to the following Knowledge Base article for information regarding the Microsoft SQL Server collation mode required: http://kbase.gfi.com/showarticle.asp?id=kbid002277. To use GFI PST Exporter you need: Outlook 2000 or later installed on target computers Ports 8096 to 8099 open on target computers NOTE: Time skew outside specified limits will affect authentication. Time skew between domain controllers or between member machines and a domain controller can cause Kerberos ticket invalidation. As a result, agent deployment on target computers may fail with an Access Denied error for the computers affected by time skew. Hardware requirements The hardware requirements for GFI MailArchiver are: Pentium 4 (or equivalent) - 2Ghz 512MB RAM (minimum). Recommended: 2GB RAM 2GB of available physical disk space (NTFS) NOTE: It is recommended that you store databases and indexes on separate, appropriately sized hard disks. SCSI hard disks are highly recommended for indexes. 8 Index GFI MailArchiver for Exchange

Preparing the servers for use with GFI MailArchiver GFI MailArchiver requires a Microsoft Exchange Server and a database server where to store the archived emails, such as Microsoft SQL Server. The following sections will show you how to prepare these servers for use with GFI MailArchiver. The section Preparing Microsoft Exchange Server for use with GFI MailArchiver shows you how to enable journaling on the email store since this is required. This section also contains an optional part that shows you how to enable envelope journaling so that GFI MailArchiver can store the full email internet headers. The section Preparing Microsoft SQL Server for use with GFI MailArchiver shows you how to configure and prepare Microsoft SQL Server for use with GFI MailArchiver by creating a new blank database. GFI MailArchiver for Exchange Installing GFI MailArchiver 9

Preparing Microsoft Exchange Server for use with GFI MailArchiver To archive email from Microsoft Exchange Server, you will need to set up and configure journaling. The next sections show you how to do this for Microsoft Exchange Server 2003 and Microsoft Exchange Server 2007. Microsoft Exchange Server 2003 Journaling You first need to set up and configure a journaling mailbox. The Exchange Server journaling feature will use the journaling mailbox to store a copy of each email that passes through the server. GFI MailArchiver will then periodically check the journaling mailbox and archive any emails found. To set up journaling on the Exchange Server, follow these steps: 1. Create a new mailbox where you want Microsoft Exchange to journal emails. Do this by adding a new user in the Active Directory Users and Computers console. Give the mailbox a relevant name such as journal. 2. Open the Exchange System Manager and navigate to the Mailbox Store node by expanding Servers <server_name> Storage Group. Right click on the Mailbox Store node and then click Properties. 3. In the Properties dialog go to the General tab and select the Archive all messages sent or received by mailboxes on this store check box. Screenshot 1 - Enabling journaling on an Exchange mailbox store 10 Index GFI MailArchiver for Exchange

4. Click on the Browse button located to the right of the Archive all messages sent or received by mailboxes on this store check box. 5. In the Select Recipient dialog box, enter the journaling mailbox name you created in step one, for example journal, and click OK. NOTE: If you want to archive emails to a public folder, enter a public folder name in the Select Recipient dialog. However, note that Microsoft does not recommend using public folders as the journal recipient. More information is available in the following Microsoft Knowledge Base article, http://support.microsoft.com/?kbid=843105, (refer to question 6 in the question and answer section). Screenshot 2 - Selecting the journaling mailbox name 6. Close the Mailbox Store Properties dialog and the Exchange System Manager management console. The Exchange Server journaling mailbox created is now ready for use with GFI MailArchiver. Enabling Envelope Journaling in Exchange Server 2003 (recommended) NOTE: If you want to archive email header information, you need to read this section to enable Exchange Envelope Journaling. If you do not want to archive email header information skip this section. GFI MailArchiver will still work correctly. Envelope Journaling is available in Exchange 2000 post Service Pack 3 and Exchange 2003 Service Pack 1. Exchange Envelope Journaling captures all the available RFC2821 recipients and all the RFC2822 recipients, including CC and BCC recipients. It also captures members of a distribution group expansion and it captures reports that include delivery receipts, NDRs, read receipts, and out-of-office notifications. For more information about Envelope Journaling, please visit this Microsoft web page: 3How Exchange Server Envelope Journaling Works. You can enable Envelope Journaling by using either one of these methods: 1. Use the Exchange Server Email Journaling Advanced Configuration (exejcfg.exe) tool. 2. Use the ADSI editor management console. GFI MailArchiver for Exchange Installing GFI MailArchiver 11

Method 1: Using the exejcfg.exe tool To enable Envelope Journaling using the exejcfg.exe tool, follow these steps: 1. Open the command prompt. 2. Navigate to the folder in which you copied the exejcfg.exe tool. 3. To enable Envelope Journaling, type exejcfg e and press Enter. NOTE 1: exejcfg d disables Envelope Journaling for that organization. NOTE 2: You can download the exejcfg.exe tool from the following Microsoft web page: http://www.microsoft.com/downloads/details.aspx?familyid=e7f73f10-7933-40f3-b07e-ebf38df3400d&displaylang=en NOTE 3: You can use the exejcfg.exe tool downloaded from the above link in both Exchange 2000 and Exchange 2003 Server environments. Method 2: Using the ADSI editor To enable Envelope Journaling using the ADSI editor, follow these steps: 1. Open the adsiedit.msc console. NOTE: You can find the adsiedit.msc tool in the Windows 2003 Server support tools and in the Windows 2000 Server resource kit. Screenshot 3 - ADSI Edit 2. Navigate to the CN=<your organization name> node by expanding ADSI Edit Configuration <CN=Configuration> 12 Index GFI MailArchiver for Exchange

<CN=Services> <CN=Microsoft Exchange>. Right-click on the CN<your organization name> node and then click Properties. 3. In the properties dialog, select the heuristics attribute from the Attributes list and click the Edit button. Screenshot 4 - Heuristics attribute 4. In the Integer Attribute Editor dialog, type 512 in the Value edit box and click OK. Screenshot 5 - Editing the heuristics attribute value 5. The Value column for the heuristics attribute will be updated to reflect the new value of 512 in the Attributes list. GFI MailArchiver for Exchange Installing GFI MailArchiver 13

Screenshot 6 - Heuristics value set to 512 6. Click OK to save the new setting and close the ADSIEdit console. Note: A value of 512 enables Envelope Journaling, and a value of 0 disables Envelope Journaling. Microsoft Exchange Server 2007 Journaling Microsoft Exchange 2007 supports two types of journaling: 1. Store-level journaling 2. Journaling rules These two journaling methods are described below. Store-level journaling Store-level journaling is similar to the journaling feature of Microsoft Exchange Server 2000/2003. Configuration of the Mailbox Database is similar to that of the Mailbox Store in Exchange 2003. 14 Index GFI MailArchiver for Exchange

Screenshot 7 Configuring a Mailbox Database 1. Select a Mailbox Database and click on Properties. Screenshot 8 Mailbox Database properties 2. Select the Journal Recipient option then select a journaling recipient, preferably a mailbox within the existing Exchange organization, from the Active Directory. GFI MailArchiver for Exchange Installing GFI MailArchiver 15

Journaling rules This feature is new to Microsoft Exchange 2007 and is only available with the Premium client access license. It allows an administrator to setup custom journaling rules such as: Archive only incoming emails Archive only outgoing emails Archive emails for a particular group. GFI MailArchiver supports this type of journaling by detecting and displaying these rules in the Data Sources Configuration Wizard. Screenshot 9 Configuring Journaling rules Journaling rules are configured from within the Hub role configuration. 1. Open the Journaling tab and click on New Journaling Rule. 16 Index GFI MailArchiver for Exchange

Screenshot 10 Creating a new Journaling rule 2. Choose a name for the rule and specify the Journal e-mail address, preferably a mailbox within the existing Exchange organization, from the Active Directory. 3. You can optionally choose to configure the Scope and Journal e- mail for recipient. Through these options you can define the recipient(s) on whom to apply the journaling rule. NOTE: Unlike previous versions of Microsoft Exchange server, journaling within Microsoft Exchange server 2007 includes envelope journaling by default, and thus does not require you to manually enable it. Preparing Microsoft SQL Server for use with GFI MailArchiver This section is optional, since GFI MailArchiver now supports archive stores based on the Firebird database. If you want to create archive stores based on Microsoft SQL Server, you need to follow the steps in this section to create a new empty database through the Enterprise Manager. NOTE 1: You must configure Microsoft SQL Server to use Mixed Authentication mode to be able to use it with GFI MailArchiver. To do so, load the Enterprise Manager, right-click on the SQL Server node and click Properties. In the properties dialog, access the Security tab and click SQL Server and Windows under Authentication. NOTE 2: Refer to the following Knowledge Base article for further information regarding the Microsoft SQL Server collation mode required: http://kbase.gfi.com/showarticle.asp?id=kbid002277 GFI MailArchiver for Exchange Installing GFI MailArchiver 17

Creating the database 1. Open the SQL Server Enterprise Manager; navigate to and expand the SQL Server node on which you want to create the database. 2. Right-click on the Databases node, and then click New Database. Screenshot 11 - Creating a new database 3. In the Database Properties dialog box, type a name for the new database in the Name box, for example, 'MailArchiver', and then click OK. NOTE 1: For optimal performance, pre-allocate space for both the data and transaction files, for example, 500 MB for the data file and 50MB for the transaction file to avoid grow operations while archiving to the database, at least initially. To pre-allocate disk space, specify a value in the Initial size (MB) column. To further reduce slowdowns caused when Microsoft SQL Server performs a grow operation; you should set the file growth for both data and transaction files to a fixed value in megabytes, not more than 100 MB, instead of a percentage value. Additionally, ensure that the Maximum file size option is left to Unrestricted file growth for both data and transaction files. You can configure these settings from the Data Files and Transaction Log tabs of the Database Properties dialog box. NOTE 2: After the first month of archiving, note the database data file size. With this value, estimate the archive database size after six months, for example. If you estimate that your archive database will be larger than 20 GB, you should consider configuring the archive stores management feature of GFI MailArchiver. More information on this feature is available in the Configuring archive stores management section of the Configuring GFI MailArchiver chapter. Installing GFI MailArchiver Before you install GFI MailArchiver, check the points below: 1. Make sure that you are logged on as Administrator or you are using an account with administrative privileges. 2. Save any pending work and close all open applications on the machine. 18 Index GFI MailArchiver for Exchange

3. Check that the machine you are installing GFI MailArchiver on meets the system and hardware requirements specified earlier in this chapter. 4. Check the Exchange Server role. NOTE 1: GFI MailArchiver cannot be installed on the Exchange Server 2007 Edge Role, since such a server is typically deployed on a DMZ using ADAM instead of Active Directory. NOTE 2: You need to enable IMAP if installing on the Exchange Server 2007 Client Access Role. For more information refer to Appendix: Enabling IMAP on Microsoft Exchange Server 2007 in this manual. GFI MailArchiver for Exchange Installing GFI MailArchiver 19

To install GFI MailArchiver: 1. Double-click on: mailarchiver6_x86.exe to install GFI MailArchiver on x32 systems mailarchiver6_x64.exe to install GFI MailArchiver on x64 systems As soon as the Welcome page is displayed click Next. 2. Read the license agreement displayed in the License agreement page and click I accept the terms in the license agreement if you accept the terms of the license agreement. Click Next to continue the installation. Screenshot 12 - Entering the administrator email address and product license key 3. Type the administrator email address in the Administrator Email box. If you bought a license for GFI MailArchiver, type it in the License Key box. If you do not have a license yet and want to evaluate GFI MailArchiver, leave the default evaluation license key in the License Key box. Click Next to continue the installation. NOTE: When you use the evaluation license key, you will be able to use GFI MailArchiver for 10 days. If later you decide to buy GFI MailArchiver, you will not need to install GFI MailArchiver again entering the purchased license key will be sufficient. 4. To install GFI MailArchiver to the default location, click Next to continue. If you want to specify an alternative location where to install GFI MailArchiver, click Change and select a new installation path. Then click Next to continue with the installation. 5. Select the website where you want to install the GFI MailArchiver web interface from the Website list. In the Virtual Directory Alias box (set to MailArchiver by default), type the name for the GFI MailArchiver web interface virtual folder. To continue with the installation click Next. 20 Index GFI MailArchiver for Exchange

Screenshot 13 - Selecting a Website and Virtual Directory 6. Click Install to start the installation of GFI MailArchiver with the settings you configured in the previous pages. Screenshot 14 - GFI MailArchiver installation progress 7. The installation wizard displays the finish page when the installation completes. Click Finish to close the installation wizard. Entering your license key after installation To active your purchased license key: GFI MailArchiver for Exchange Installing GFI MailArchiver 21

1. Click Start All Programs GFI MailArchiver GFI MailArchiver to load the GFI MailArchiver configuration in Internet Explorer. 2. When prompted for a user name and password, type in the username and password of an account that has administrative privileges, to access the GFI MailArchiver configuration. 3. Click on the GFI MailArchiver Configuration Licensing node, in the left navigation pane. 4. Type or paste the GFI MailArchiver license key you bought in the License key box, then click Verify License Key. Screenshot 15 - Entering the GFI MailArchiver license key 5. If you entered the license key correctly, GFI MailArchiver displays the following information: The License Status, the number of Licensed Users, the count of Mail Enabled Users, and for how long GFI MailArchiver has been running next to the Statistics label. If the license key specified is invalid, GFI MailArchiver will display Invalid license key in red next to the License Key box. If you entered a valid license key, click Save Settings. NOTE 1: The license key you bought is licensed for a number of users as shown next to the Licensed Users label. The number of Mail Enabled Users must always be smaller than or equal to the number of Licensed Users. If not, GFI MailArchiver will continue to work for 15 more days until you buy a new license key, and then expire if a new license key is not specified. NOTE 2: GFI MailArchiver counts the number of mail enabled users differently, depending on the exclusion settings configured in the Archiving and User Exclude Options node. The following points describe how GFI MailArchiver counts mail enabled users in the three possible scenarios of: archiving emails for all users, archiving emails for all users except for the users specified and archiving emails only for the users specified. For the examples, we will consider an Active 22 Index GFI MailArchiver for Exchange

Directory (AD) made up of 40 objects, 12 of which are mail-enabled users. Archiving emails for all users GFI MailArchiver counts all the mail enabled user accounts. It does not count other objects such as groups or machines. GFI MailArchiver will thus display 12 near the Mail Enabled Users label. Archiving emails for all users except for the users specified GFI MailArchiver counts all mail enabled user accounts and subtracts the count of AD user accounts (not email addresses) specified in the list. Therefore, if you specified three AD user accounts and one email address for exclusion from archiving, GFI MailArchiver will display 9, near the Mail Enabled Users label. Archiving emails only for the users specified GFI MailArchiver counts the AD user accounts (not email addresses) specified for inclusion in archiving. Therefore, if you specified three AD users for inclusion in archiving, GFI MailArchiver will display 3, near the Mail Enabled Users label. Please note that if you specify even one email address for inclusion in archiving, GFI MailArchiver will count all AD mail enabled user accounts and thus will display 12 near the Mail Enabled Users label. NOTE: Entering the license key should not be confused with the process of registering your company details on our website. This is important; since it allows us to give you support, and notify you of important product news. Register your copy of GFI MailArchiver at http://customers.gfi.com 2Updating a GFI MailArchiver installation with a more recent build If you want to update your current installation of GFI MailArchiver with a more recent build, you should follow the same steps as those described in the Upgrading to GFI MailArchiver 6 section of this chapter. Upgrading to GFI MailArchiver 5 To upgrade from an older version of GFI MailArchiver to GFI MailArchiver 5: 1. Run the GFI MailArchiver setup program by double-clicking on the mailarchiver6.exe file. The installation wizard will perform some unpacking operations and then display the Welcome page. Click Next to continue. 2. Follow the installation wizard on-screen instructions. 3. The installation wizard displays the finish page when the installation completes. Click Finish to close the installation wizard. GFI MailArchiver database schema updates If there are any updates to the database schema, the installation wizard will inform you about this with the following screenshot. The installation will disable email collection and archiving from the mail servers configured, since GFI MailArchiver cannot use the databases until you perform the update procedure outlined below. GFI MailArchiver for Exchange Installing GFI MailArchiver 23

Screenshot 16 - Database schema updates When the installation completes you need to perform the following steps to update the database schema of the archive stores configured and re-enable email collection and archiving from the mail servers configured. 1. Access the GFI MailArchiver configuration as outlined in the Introduction to the Configuration section of the Configuring GFI MailArchiver chapter. 2. Click on the GFI MailArchiver Configuration Archive Stores node, in the left navigation pane. 3. Click the button, to the right of the archive store, to launch the Archive Store Wizard. 4. Go through the pages of the Archive Store Wizard by clicking Next until you reach the database verification page. Then click Yes to update the database schema. 24 Index GFI MailArchiver for Exchange

Screenshot 17 - Upgrade database schema 5. When the upgrade completes, the wizard displays Database verification successful. Click Next until you reach the wizard finish page. 6. Click Finish to close the wizard. 7. Repeat steps 3 to 6 for each archive store configured in the Archive Stores page. 8. Click Save Settings. 9. Click on the GFI MailArchiver Configuration Archive Stores Management node, in the left navigation pane. If you configured archive stores in this page, follow steps 10 to 15. If not, go to step 16. 10. Click the button, to the right of the archive store, to launch the Archive Store Wizard. 11. Go through the pages of the Archive Store Wizard by clicking Next until you reach the database verification page. Then click Yes to update the database schema. 12. When the upgrade completes, the wizard displays Database verification successful. Click Next until you reach the wizard finish page. 13. Click Finish to close the wizard. 14. Repeat steps 10 to 13 for each archive store configured in the Archive Stores Management page. 15. Click Save Settings. 16. You now need to re-enable email collection and archiving from the mail servers configured. To do so, click on the GFI MailArchiver Configuration Mail Servers to Archive node, in the left navigation pane. 17. Click the button, to the right of the mail server, to launch the Mail Server Wizard. GFI MailArchiver for Exchange Installing GFI MailArchiver 25

18. On the first page of the Mail Server Wizard, select the Archive emails from this server check box. 19. Click Finish to close the wizard. 20. Repeat steps 17 to 19 for each mail server configured in the Mail Servers to Archive page. 21. Click Save Settings. Role-based deployment Role-based Deployment allows for scalability of GFI MailArchiver in large IT infrastructures dealing with heavy email traffic. This is achieved through the deployment of multiple GFI MailArchiver instances on separate servers. Each instance is configured to fulfill diverse roles, to balance workload and collectively help for the smooth running of the email archiving process. The following roles can currently be assigned to GFI MailArchiver instances: Central Configuration Service Data Collection Storage Search and Indexing User Interface and Administration Data Import Service For information on how to use this feature, refer to the Role-based Deployment chapter in this manual. 26 Index GFI MailArchiver for Exchange