Enterprise Vault™ Discovery Accelerator Installation Guide
- Introducing Discovery Accelerator
- Preparing to install Discovery Accelerator
- Configuration options for Discovery Accelerator
- Supported versions of Enterprise Vault in Discovery Accelerator environments
- Prerequisites for Discovery Accelerator
- Configuring Outlook to enable the processing of items with many attachments or many recipients
- Setting the Windows and ASP.NET Temp folder permissions
- Security requirements for temporary folders
- Disabling networking facilities that can disrupt a Discovery Accelerator environment
- Disabling the Windows Search Service on the Discovery Accelerator server
- Ensuring that the Windows Server service is running on the Discovery Accelerator server
- Configuring the SQL Server Agent service
- Assigning SQL Server roles to the Vault Service account
- Installing and configuring the SQL full-text search indexing service
- Verifying that Enterprise Vault expands distribution lists
- Installing Discovery Accelerator
- Installing the Discovery Accelerator server software
- Allowing Enterprise Vault to communicate with Discovery Accelerator through the Windows firewall
- Creating the configuration database and customer databases
- Setting up a Custodian Manager website
- Uploading the Discovery Accelerator report templates
- Configuring Discovery Accelerator for use in a SQL Server Always On environment
- Installing Discovery Accelerator in a clustered environment
- Maximizing security in your Discovery Accelerator databases
- Installing the Discovery Accelerator client software
- Installing the Discovery Accelerator server software
- Appendix A. Ports that Discovery Accelerator uses
- Appendix B. Troubleshooting
- Error messages appear in the event log when upgrading to Discovery Accelerator 14.5
- Enterprise Vault Accelerator Manager service not created
- Enterprise Vault Accelerator Manager service does not start
- "Access is denied" message is displayed when you try to create a customer database on a UAC-enabled computer
- Cannot create or upgrade Discovery Accelerator customer databases when Symantec Endpoint Protection is running
- Permissions error when uninstalling the Discovery Accelerator client from a UAC-enabled computer
- Uninstalling the Discovery Accelerator client from a shared location may prevent other users from starting the client
- Appendix C. Installing and configuring the Enhanced Auditing feature
- Overview
- Prerequisites for the Enhanced Auditing feature
- Installing the Enhanced Auditing feature
- Post installation steps
- Upgrading the Enhanced Auditing setup
- Modifying the Enhanced Auditing setup
- Repairing the Enhanced Auditing setup
- Uninstalling the Enhanced Auditing setup
- Managing access from Discovery Accelerator
Assigning SQL Server roles to the Vault Service account
The Vault Service account is the account that Enterprise Vault services and tasks use when accessing Enterprise Vault databases. You must assign a number of SQL Server roles to this account to perform various activities with Discovery Accelerator. The two required roles are as follows:
dbcreator (database creator). The facility to create configuration and customer databases with Discovery Accelerator is dependent on the Vault Service account having this role.
sysadmin (system administrator). Discovery Accelerator provides the facility to create schedules with which you can conduct searches repeatedly or at some future time. These schedules are SQL Server Agent jobs and, by default, Discovery Accelerator assumes that you want to make a user with the sysadmin role the creator and owner of them.
In addition, you require the sysadmin role to enable Discovery Accelerator cases for analytics.
Note:
The dbcreator and sysadmin roles are server-wide roles that may grant more security privileges to the Vault Service account than you are comfortable with. If this is the case, you can give the Vault Service account the minimum required permissions by following the instructions in this article on the Veritas Support website:
https://www.veritas.com/docs/100038151
Then, after you have installed the Discovery Accelerator client, you must change the value of the security configuration option "Use SQL Server SysAdmin Server Role for Schedules". For instructions on how to do this, see the Administrator's Guide.
To assign SQL Server roles to the Vault Service account
- On the SQL Server computer, start SQL Server Management Studio.
- In the left pane of the SQL Server Management Studio window, expand the tree to display first the required SQL Server and then the Security folder.
- Under the Security folder, double-click Logins to display the users in the right pane.
- In the Logins list, right-click the Vault Service account, and then click Properties.
- In the Login Properties dialog box, select the Server Roles page.
- In the Server roles box, make sure that dbcreator and sysadmin are selected.
- Click OK.