Veritas Alta™ Archiving : Folder Sync 1.14.0 Administration Guide

Last Published:
Product(s): Veritas Alta Archiving (1.0)
  1. About Folder Sync
    1.  
      About this guide
    2.  
      About Exchange Online folder synchronization
    3.  
      About Folder Sync
    4.  
      About support for multiple instances of Folder Sync
    5.  
      Changes introduced in version 1.14.0
    6.  
      Changes introduced in version 1.13.3
    7.  
      Changes introduced in version 1.13
    8.  
      Folder Sync revision history
  2. Requirements for Folder Sync
    1.  
      Compatibility with Microsoft Exchange
    2.  
      Folder Sync Microsoft SQL Server requirements
    3.  
      Where to install Folder Sync
    4. Requirements for the servers on which Folder Sync is installed
      1.  
        Installing the Azure Active Directory module for Windows PowerShell
  3. Preparing the service and admin accounts for Folder Sync
    1.  
      Service account and administration account requirements for Folder Sync
    2.  
      Creating the Folder Sync service account
    3.  
      Preparing the administration account for Exchange 2016 or 2013
    4.  
      Preparing the administration account for Exchange 2010
    5.  
      Preparing the administration account for Exchange 2007
    6.  
      Preparing an administration account for Office 365
  4. Installing or upgrading Folder Sync
    1.  
      About installing or upgrading Folder Sync
    2.  
      Performing a new installation of Folder Sync 1.14.0
    3.  
      Upgrading from the Folder Sync 1.13 original release or later
    4.  
      Upgrading from Folder Sync 1.12
    5.  
      Upgrading from Folder Sync 1.11 or earlier versions
  5. Configuring the Folder Sync task
    1.  
      Configuring the settings for the Folder Sync task
    2.  
      Restarting the Folder Sync task
  6. Running and scheduling Folder Sync synchronizations
    1.  
      About performing and scheduling Folder Sync synchronizations
    2. Performing a "Run Now" Folder Sync synchronization
      1.  
        About the Reset Mailbox(es) option
    3.  
      Configuring scheduled Folder Sync synchronizations
    4.  
      About Folder Sync scheduling and choosing a scheduling strategy
    5.  
      Creating scheduled Folder Sync synchronization events
    6.  
      Selecting the mailboxes to target for scheduled Folder Sync synchronizations
    7.  
      Changing the iterative restart period for scheduled Folder Sync synchronization events
  7. Monitoring and managing Folder Sync
    1.  
      About monitoring and managing Folder Sync
    2. Viewing the All Mailboxes table
      1.  
        Contents of the All Mailboxes table
    3. Viewing the Folder Sync job list
      1.  
        Contents of the Folder Sync job list
    4. Viewing the Folder Sync mailbox report
      1.  
        Contents of the Folder Sync mailbox report
    5. Viewing the Folder Sync status report
      1.  
        Contents of the Folder Sync status report
    6.  
      Disabling or enabling Folder Sync from the Veritas Alta View Compliance and Governance Management Console
    7.  
      Viewing the Folder Sync synchronization status of an account from the Veritas Alta View Compliance and Governance Management Console
  8. Troubleshooting Folder Sync
    1.  
      About the Folder Sync event log errors and log files
    2.  
      Folder Sync fails to work for some mailboxes
    3.  
      Troubleshooting occasional time-outs of the Folder Sync service

Preparing an administration account for Office 365

When you configure Folder Sync for Office 365 folder synchronization you must provide the credentials of a Microsoft Office 365 account with the required permissions.

Note:

You must not use the account that Veritas Alta Archiving Office 365 Sync uses for Office 365 account synchronization.

If you install Folder Sync on multiple servers for load sharing or redundancy, each instance of Folder Sync requires its own Office 365 service account. Create a separate Office 365 service account for each installation.

The Office 365 account must have the following role assignments:

  • The account must be assigned to the following Office 365 administrator roles: Exchange administrator, Service administrator, User management administrator.

  • In the Office 365 Exchange admin center, the account must be a member of an Exchange management role group that includes the management roles ApplicationImpersonation, View-Only Configuration, and View-Only Recipients.

The following procedure describes how you can create an account with these required permissions from the Office 365 Admin center.

To prepare an administration account for Office 365

  1. Sign in to Microsoft Office 365 as a global administrator.
  2. Click the Admin app to open the Office 365 Admin center.
  3. Under Users > Active Users, click + Add a user.
  4. Complete the New user dialog, including the following role assignment:

    Expand Roles, select Customized administrator, and then select the following roles:

    • Exchange administrator

    • Service administrator

    • User management administrator

    Then click Add to add the new user.

  5. In the left menu bar of the Office 365 Admin center, expand Admin centers (Admin in the old admin center), and select Exchange.
  6. In the left navigation pane of the Exchange admin center, click permissions.
  7. On the admin roles page, click the + icon to create a new role group.
  8. In the new role group window, enter a suitable role group name in the Name field, such as Folder Sync App Impersonation.
  9. In the Roles section of the new role group window, click the + icon.
  10. In the Select a Role window, select each of the following roles from the list, and click add to add them to the role group:

    • ApplicationImpersonation

    • View-Only Configuration

    • View-Only Recipients

  11. Click OK to close the Select a Role window and to return to the new role group window.
  12. In the Members section of the new role group window, click the + icon.
  13. In the Select Members window, select the new account that you are using as the Office 365 service account, and then click Add.
  14. Click OK to close the Select Members window and to return to the new role group window.
  15. Click Save to save the new role group.

    The new role group now appears in the list of Admin Role Groups on the admin roles page.

    Note:

    If you do not see the new role group, wait several minutes and then refresh the page.

  16. Select the new role group in the admin roles list. Confirm that the three required roles are shown as assigned roles, and that the account that is to act as the Office 365 service account is listed as a member.

    Note:

    A long propagation time may be required for an account to acquire any new or changed role settings. You can also use PowerShell commands such as get-managementroleassignment and get-rolegroupmember to confirm that the new settings have taken effect. For more information on PowerShell commands see Microsoft's support documentation.