EMC IS1200 User manual

Title Page
IS1200
Microsoft Exchange Server Connector
User and Configuration Guide
Version 4.3.4
Last updated April 30, 2010
EMC Part Number 300-010-774 A02

EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Version 4.3.4, 2010
Copyright © 2010 Kazeon Systems, Inc. All Rights Reserved.
This notice is intended as a precaution against inadvertent publication and does not imply any waiver of
confidentiality. Information in this document is subject to change without notice. No part of this document may be
reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying,
recording, or information storage or retrieval systems, for any purpose without the express written permission of
Kazeon Systems.
The software described in this document is furnished under a license agreement or nondisclosure agreement. It is
against the law to copy the software onto any medium except as specifically allowed in the license or nondisclosure
agreement.
Kazeon™is the trademark of Kazeon Systems, Inc. All other trademarks and copyrights referred to are the property
of their respective owners.
The text and drawings set forth in this document are the exclusive property of Kazeon Systems. Unless otherwise
noted, all names of companies, products, street addresses, and persons contained in the scenarios are designed solely
to document the use of Kazeon System products.
The Kazeon Information Server software is based in part on software licenses from the following:
Outside In® Content Access © 1991-2010, Chicago, Inc.
The software is based in part on the work of the Independent JPEG Group.
Code from Inxight Software, Inc. Copyright © 1996-2010. All rights reserved. www.inxight.com.
Certain icons used by the Kazeon Web applications come from the Silk Icon set
(http://www.famfamfam.com/lab/icons/silk/)
licensed under the Creative Commons Attribution 2.5 license
(http://creativecommons.org/licenses/by/2.5/).
Last updated February, 2010
Kazeon Systems
1161 San Antonio Road
Mountain View, CA 94043
Copyright Information

iii
EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Table of Contents
Title Page.............................................................................................................. i
Preface ................................................................................................................ v
Audience....................................................................................................................................................v
Related Documentation .............................................................................................................................v
Customer Support......................................................................................................................................v
Chapter 1: Introduction ..................................................................................... 1
About the Kazeon Information Server ......................................................................................................1
Extending Server Functionality.................................................................................................................1
Microsoft Exchange Server Background...................................................................................................1
Exchange Server Implementation Overview.............................................................................................2
Exchange Server Implementation In New Installations.....................................................................2
MS Exchange Server Implementation In Existing Installations ........................................................2
Chapter 2: Establishing Communications Between Exchange and IS1200 .5
Deployment Configurations ......................................................................................................................5
Deployment Hardware and Software Requirements.................................................................................7
Exchange Server Connector Installation Procedures ................................................................................7
Installation Overview.........................................................................................................................8
Creating the IS1200 Service Account on the AD Server...................................................................9
Configuring the Exchange Server....................................................................................................10
Configuring a 2003 Server........................................................................................................10
Configuring a 2007 Server........................................................................................................14
Installing and Configuring the KES Platform..................................................................................15
Configuring the KES Server to Use the Service Account to Access the Exchange Server.............16
Testing the KES Server Configuration.............................................................................................19
Testing the IS1200 Connection to the KES Server..........................................................................21
Chapter 3: Registering Exchange Servers .................................................... 23
Registering Metadata Repositories for Exchange Servers ......................................................................23
Registering an Exchange Server with the IS1200...................................................................................23
Chapter 4: Workflow Changes for Exchange Servers .................................. 27
Classifying Exchange Servers.................................................................................................................28
Increasing Classification Performance for PSTs..............................................................................29
Searching and Reporting on Exchange Servers.......................................................................................29
Applying Actionable Services to Exchange Server Search or Report Results........................................30
Index .................................................................................................................. 31
Glossary ............................................................................................................ 35

iv EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Contents

v
EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Preface
The EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector
User Guide describes how to configure an IS1200 to use the optional Kazeon
Microsoft Exchange Server Connector module. The IS1200-SA and IS1200-FRM do
not support the Kazeon Exchange Connector.
To use the Exchange Connector module the appropriate optional add-on module
licence must first be purchased and installed.
Audience
This guide is intended for Administrators, Business Analysts, and Compliance Auditors.
Related Documentation
IS1200 Installation and Quick Start Guide - provides a quick introduction to
installing, configuring, and using the IS1200.
IS1200 Web-Admin User and Configuration Guide- describes how to use Web-Admin
to setup and manage the IS1200.
IS1200 Web-Search User Guide- describes how to use Web-Search to perform basic
and advanced search.
IS1200 Web-Reports User Guide- describes how to use Web- Reports to perform basic
and advanced reports.
IS1200 eDiscovery Case Manager Administrator’s Guide- for legal representatives, a
primer of all the web-based Interfaces above for performing eDiscovery.
IS1200 Command Line Interface Reference Guide - describes the IS1200 Command
Line Interface.
Customer Support
You can contact Kazeon with questions or comments at [email protected], or call
1-877-kazeon1.

vi EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Preface

1
EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Chapter 1:
Introduction
The guide is provided as a companion to the Kazeon Information Server-ECS IS1200
User and Configuration Guide. The Kazeon Information Server-ECS IS1200 User and
Configuration Guide should be read first as it contains most of the basic IS1200 server
setup and maintenance information on which this guide builds.
About the Kazeon Information Server
The Kazeon Information Servers are integrated hardware and software systems that
provide information management solutions enabling organizations to efficiently and
cost effectively classify, manage, and retrieve data. They provide consistent
information visibility and control across distributed files, minimize the risk of un-
managed files, integrate seemlessly with existing infrastructure, and scale to support
billions of files for searching, reporting, backup search and recovery, and file
migration and archiving.
Extending Server Functionality
The Kazeon Information Server’s standard functionality can be expanded with
optional add-on modules like the Connector for Microsoft Exchange Server. The
Exchange Connector module requires an additional license for the Kazeon
Information Server and allows the IS1200 to perform crawls of Microsoft Exchange
Servers as well as searches, reports, and applying Actionable Services.
Microsoft Exchange Server Background
The Microsoft Exchange Server is a messaging and collaborative software server
system from Microsoft. As part of the Microsoft line of server products, it is widely
used by corporations using Microsoft solutions. Exchange offers electronic mail,
calendaring, contacts and tasks, and support for mobile and web-based access to
information, including and supporting data storage.

Chapter 1: Introduction
2EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Kazeon's Exchange Server Connector (Exchange Connector) enables the following
email capabilities:
zClassification and indexing of email and attachments located on registered
Microsoft Exchange servers, including calendars, contacts, and notes.
zPerforming searches and reports on Exchange Servers
zApplying Actionable Services to emails and attachments found as search or report
results
Kazeon's Exchange Server Connector does not provide classification or indexing
services on the following:
zShared/Public folders
Exchange Server Implementation Overview
Exchange Server Integration is available only on the ECS version of the Kazeon
Information Server. Exchange Server Integration may be included in a new Kazeon
Information Server IS1200-ECS installation, or added to an existing ECS installation
(ECS versions 3.0.3 or better).
If the Exchange Connector optional module was ordered along with the original
Kazeon Information Server purchase, the appropriate optional module license was
automatically included in the server master license and is routinely installed along
with the server license. If the Exchange Connector module was purchased after the
original installation, the Exchange Connector module license must be added to the
installation before module configuration can occur. See the Installing License Keys
chapter of the Kazeon Information Server IS1200 User and Configuration Guide for
details on obtaining and installing optional modules licenses for existing installations.
Exchange Server Implementation In New Installations
The Exchange Connector module software is automatically installed with all Kazeon
Information Server-ECS installations, the Exchange Connector license simply
activates it. Exchange Connector can not be used with the Kazeon Information
Server-SA or Kazeon Information Server-FRM versions.
To use an Exchange Connector module purchased with a new installation, simply
follow the standard hardware and software installation and configuration instructions
in the Kazeon Information Server IS1200 User and Configuration Guide and then use
the rest of this guide to configure the module options.
MS Exchange Server Implementation In Existing Installations
If the Exchange Connector license is obtained after the original Kazeon Information
Server installation, use the following general steps to implement the Exchange
Connector. The following steps assume the Kazeon IS1200 and the Microsoft
Exchange Servers are already setup according to Kazeon and Microsoft approved
guidelines.
1. Add the Exchange Connector license to the IS1200. See the Installing License
Keys chapter of the Kazeon Information Server IS1200 User and Configuration

Exchange Server Implementation Overview
3
EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Guide for details on obtaining and installing optional modules licenses for
existing installations.
2. Ensure the Exchange Server is setup to Microsoft standards for all email user
accounts requiring classification. Supported Exchange versions include:
|Exchange 2000, SP4
|Exchange 2003, SP2 or SP3
|Exchange 2007, SP1
3. Add an IS1200 administrator account to an AD Server (in the same domain as the
Microsoft Exchange Server) with permissions allowing the IS1200 to authenticate
via the AD Server, and access all email accounts on the Microsoft Exchange
Server. See “Creating the IS1200 Service Account on the AD Server” on page 9
for details.
4. Setup a Kazeon Exchange Services (KES) server to work between the IS1200 and
the Microsoft Exchange Server and add the Kazeon Exchange Agent to KES. The
agent allows the IS1200 to register and access Microsoft Exchange Servers. See
“Installing and Configuring the KES Platform” on page 15 for details.
5. On the IS1200, add the new AD username and password (from step 3above) as an
identity to the IS1200. See the The Identity Vault chapter of the Kazeon
Information Server IS1200 User and Configuration Guide for details on adding
identities.
6. On the IS1200, add new metadata filesystems for the Exchange Servers that will
be registered. See the Registering and Managing File Systems chapter of the
Kazeon Information Server IS1200 User and Configuration Guide for details on
adding metadata volumes.
7. Register the Exchange Servers with the IS1200 using the new identity created in
step 3. See “Chapter 3: Registering Exchange Servers” on page 23 for more
information.
8. Classify the Exchange Servers. See “Classifying Exchange Servers” on page 28
and the Job Scheduler chapter of the Kazeon Information Server IS1200 User and
Configuration Guide for details on scheduling classification services.
9. Search, or run Reports, to locate emails or attachments of interest on the Exchange
Servers. See the Searching for Information and Using Reports chapters of the
Kazeon Information Server IS1200 User and Configuration Guide for details on
searching and reporting.
10. Use Actionable Services on search or report results. See “Applying Actionable
Services to Exchange Server Search or Report Results” on page 30 and the
Actionable Services chapter of the Kazeon Information Server IS1200 User and
Configuration Guide for details on applying actionable services to search or report
results.

Chapter 1: Introduction
4EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide

5
EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Chapter 2:
Establishing Communications Between Exchange and IS1200
To enable the Kazeon Information Server to access a Microsoft Exchange Server for
services such as crawls, searches, and reports, a special application called the Kazeon
Exchange Server Agent (ES Agent) must be installed to manage communications
between the Exchange Server and the IS1200. The agent’s processing power needs
require a dedicated computer platform. The dedicated platform, with the agent
installed, provides Kazeon Exchange Services (KES).
The diagram below shows the communication relationships between the system parts.
Deployment Configurations
The Kazeon Exchange Connector can be deployed in a domain with either single or
multiple Exchange servers (multiple servers are typically configured with a single
front-end server providing a common namespace for multiple back-end servers).
Regardless of configuration, the Exchange Connector treats each Exchange server as
an individual repository and interacts directly with the back-end servers.
IS1200 PC with Agent MS Exchange Server
(KES)

Chapter 2: Establishing Communications Between Exchange and IS1200
6EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Considering possible Exchange server configurations, the Kazeon Exchange
Connector can be deployed in one of the following topologies:
zA single Exchange server, a single KES server, and a Kazeon IS1200 cluster.
zMultiple Exchange servers, a single KES server, and a Kazeon IS1200 cluster.

Deployment Hardware and Software Requirements
7
EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
zMultiple Exchange servers, multiple KES servers, and a Kazeon IS1200 cluster.
Deployment Hardware and Software Requirements
The following hardware and software requirements are necessary to install Kazeon’s
Connector for Microsoft Exchange Server on your Microsoft Exchange Servers.
zAn Active Directory Server configured for all users of the Exchange Server and
|An administrative username and password—stored as an identity on the
IS1200—the IS1200 can use to access all user Exchange email accounts
zIS1200 with version 3.0.3 or better
|Configured with direct network access to both the AD and Exchange servers
zA Kazeon Exchange Services (KES) server, configured with:
|Windows 2003 SP2, IIS 6.0, ASP.NET 2.0
Note: The Kazeon Exchange Services (KES) server platform hardware is not provided
as part of the Microsoft Exchange Connector and must be provided by the user.
zExchange Servers configured with one of the following versions:
|Exchange 2007 SP1
|Exchange 2003, SP2 or SP3
|Exchange 2000, SP4
Exchange Server Connector Installation Procedures
The following procedures should be followed to install and configure the KES server
hardware and software requirements.

Chapter 2: Establishing Communications Between Exchange and IS1200
8EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Installation Overview
To install the Kazeon Exchange Connector, the following basic steps are required:
1. Start with functional Active Directory (AD), Microsoft Exchange, and Kazeon
IS1200 servers.
|The AD server must be setup to Microsoft standards,
see the Microsoft documentation for details.
|The Microsoft Exchange server must be setup to Microsoft standards as well,
and use the same AD server for email user authentication, see the Microsoft
documentation for details.
|The IS1200 must be able to communicate with the KES server over the
network.
|The KES server and the Exchange server must be in the same domain.
2. Create a service account on the AD server for the IS1200, see “Creating the
IS1200 Service Account on the AD Server” on page 9 for details.
3.
Setup the KES server and install the Kazeon Exchange Services Agent (ES Agent) .
See “Installing and Configuring the KES Platform” on page 15 for details.
4. Configure the KES server to use the account (setup in step 2above) to access the
Exchange Servers. See “Configuring the KES Server to Use the Service Account
to Access the Exchange Server” on page 16 for details.
5. Test the KES server. See “Testing the KES Server Configuration” on page 19
below for details.
6. Setup and test the IS1200 for communications with the KES server. See “Testing
the IS1200 Connection to the KES Server” on page 21 for details.
Once the communication requirements are in place, metadata repositories for the
Exchange Servers must be created and registered with the IS1200, the Exchange
servers themselves must be registered, and then the Exchange servers must be
classified before searches and reports can be run on the files and email they contain.
The minor workflow differences, between registering, classifying, and searching or
reporting on Exchange Servers and doing the same on standard file systems are
covered in “Chapter 4: Workflow Changes for Exchange Servers” on page 27.

Exchange Server Connector Installation Procedures
9
EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Creating the IS1200 Service Account on the AD Server
From the Active Directory (AD) server that services the Exchange server’s domain:
1. Open Programs>Administrative Tools>Active Directory Users and Computers,
the Active Directory Users and Computers dialog opens.
2. Click Create a New User ... in the dialog toolbar.
The New Object - User dialog opens
3. Enter information in the dialog fields, and follow the prompts to create a new user
with the following attributes:
|User called kazAdmin (as shown in the dialog above)
|A password of your choice (and the same options as checked below)

Chapter 2: Establishing Communications Between Exchange and IS1200
10 EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
|Ensure “Create an Exchange Mailbox” is unchecked in the dialog below
4. After you click Finish to create the new user, open the user group properties for
“Domain Users” and add the new user
kazAdmin to the Domain Users group.
Configuring the Exchange Server
Once the kazAdmin user has been added to the AD server, the Exchange server must
be configured to accept it. Procedures depend on which Exchange Server you have,
2003 or 2007. If you have a 2007 server, skip ahead to “Configuring a 2007 Server”
on page 14.
Configuring a 2003 Server
Do the following:
1. From the Exchange System Manager, give control to
kazAdmin by giving it the
"Exchange view only Administrator" role by doing the following from the
Exchange server:
a. Launch the System Manager,
Click Start>Programs>Microsoft Exchange>System Manager
b. Right click First Organization and choose Delegate Control

Exchange Server Connector Installation Procedures
11
EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
c. When the Welcome to Exchange Administration Delegation Wizard opens,
click Next.
d. When the Exchange Administration Delegation Wizard dialog opens,
click the Add button.
e. When the Delegate Control dialog opens, click the Browse button.
f. In the “Enter the object name to select” field of the Select Users, Computers
or Groups dialog, enter kazAdmin and then click the Check Names button.
The name is checked and re-entered in the field.

Chapter 2: Establishing Communications Between Exchange and IS1200
12 EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
g. Click the OK button, the Delegate Control dialog re-opens and the kazAdmin
user name appears in the Group (recommended) or User field.
h. Select Exchange View Only Administrator from the Role drop-down menu
and click OK.
i. Click Next and Finish in the following dialogs to complete the delegation.
2. From the Exchange System Manager, under Exchange server security, grant
kazAdmin rights to "Send As" and "Receive As".
a. From the Exchange System Manager window, expand the servers listing by
clicking the plus sign, and right-click your Exchange server name and select
Properties.
b. From the ServerName Properties dialog, click the Security tab.

Exchange Server Connector Installation Procedures
13
EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
c. From the Group or user names list, select the kazAdmin user, then scroll the
Permissions for KazAdmin list (almost to the bottom) and check both Send As
and Receive As.
d. Click the Apply button.
3. Verify that
kazAdmin can access any mailbox in the exchange server by invoking
Outlook Web Access (OWA) with the following URL
http://<exchange-server>/exchange/<user>.
When prompted for a username and password, enter domain\kazAdmin and the
password. If Microsoft OWA can display mail, the account configuration is correct.

Chapter 2: Establishing Communications Between Exchange and IS1200
14 EMC SourceOne eDiscovery - Kazeon IS1200 Microsoft Exchange Connector User Guide
Configuring a 2007 Server
Note: Exchange 2007 SP1 must be installed to use the following.
Do the following:
1. On the Exchange 2007 server, open the Exchange Management Console.
2. Locate the following information using the Exchange Management Console
|Exchange 2007 server name
|Storage Group
|Mailbox Database
3. From the exchange management shell, execute the following.
| C:\>Get-Mailbox -database "<server-name>\<storage group>\
<mailbox database>" | Remove-MailboxPermission -user
'<domainName>\KazAdmin' -Deny -InheritanceType 'All' -
AccessRights 'FullAccess'
| C:\>Get-Mailbox -database "<server-name>\<storage group>\
<mailbox database>" | Add-MailboxPermission -user
'<domainName>\KazAdmin' -InheritanceType 'All' -AccessRights
'FullAccess'
Executing the two commands above gives the service account "KazAdmin" read
only privileges to all the users in the specified exchange server/storage group/
mailbox database.