Enterprise Vault™ Discovery Accelerator Administrator's Guide
- Introducing Discovery Accelerator
- Introducing the Discovery Accelerator client
- Setting up and assigning roles
- Working with cases
- Setting up review marks and tags
- Using rules to mark and tag items automatically
- Using Custodian Manager
- About Custodian Manager
- Guidelines on using Custodian Manager
- Setting up custodians
- Setting up custodian groups
- Setting up custom custodian attributes
- Setting the primary custodian attribute
- Specifying the user account under which to synchronize custodians
- Synchronizing with entire Active Directory domains and Domino servers
- Setting the configuration options for Custodian Manager
- Searching for items
- About searching with Discovery Accelerator
- Creating and running Discovery Accelerator searches
- About the search criteria options
- Guidelines on conducting effective searches
- Pausing and resuming Discovery Accelerator searches
- About the Monitor Searches tab
- Selecting the archives in which to search
- Specifying the details of custom search attributes
- Restricting search results to correspond to Compliance Accelerator departments
- Defining email targets with Address Manager
- Building Discovery Accelerator search schedules
- Setting up custom message types
- Using Discovery Accelerator to search archived Skype for Business content
- Manually reviewing items
- About reviewing with Discovery Accelerator
- About the Review pane
- Filtering the items in the Review pane
- Searching within the review set
- Finding all items in the same conversation
- Assigning review marks and tags to items
- Adding comments to items
- Viewing the history of items
- Displaying printable versions of items
- Downloading the original versions of items
- Copying the item list to the Clipboard
- Deleting items from Enterprise Vault archives
- Changing how the Review pane looks
- Setting your Review pane preferences
- Working with research folders
- About research folders
- Creating research folders
- Editing the properties of research folders
- Copying items to research folders
- Reviewing the items in research folders
- Exporting items from research folders
- Giving other users access to your research folders
- Removing items from research folders
- Converting research folders into cases
- Deleting folders
- Exporting and producing items
- About exporting and producing items
- How exporting differs from producing
- Performing an export or production run
- About the limits on the number of simultaneous export and production runs
- Identifying the archives that contain duplicates of a specific item
- How to optimize export and production runs
- Making the export IDs or Bates numbers visible in Microsoft Outlook
- Creating and viewing reports
- Appendix A. Customizing Discovery Accelerator
- Specifying the Windows domains with which to synchronize employee details
- Setting Discovery Accelerator system configuration options
- Ad Hoc Searches configuration options
- Analytics Conversation Analysis configuration options
- Analytics Data Collection configuration options
- API configuration options
- Auditing configuration options
- Diagnostics configuration options
- Document Conversion configuration options
- Export/production configuration options
- General configuration options
- Home Page configuration options
- Item Prefetch Cache configuration options
- Item Prefetch Cache (Advanced) configuration options
- Legal Hold configuration options
- Policy Integration configuration options
- Privileged Delete configuration options
- Profile Synchronization configuration options
- Reviewing configuration options
- Search configuration options
- Security configuration options
- System configuration options
- Vault Directory Synchronization configuration options
- Customizing the columns in the Review pane
- Appendix B. Importing configuration data from an XML file
- Appendix C. Enterprise Vault properties for use in Discovery Accelerator searches
- About the Enterprise Vault search properties
- System properties
- Custom Enterprise Vault properties
- Custom Enterprise Vault properties for File System Archiving items
- Custom Enterprise Vault properties for SharePoint items
- Custom Enterprise Vault properties for Compliance Accelerator-processed items
- Custom properties for use by policy management software
- Custom properties for Enterprise Vault SMTP Archiving
- Appendix D. Troubleshooting
- A security warning may appear when you preview certain items in the Review pane of the Discovery Accelerator client
- Display issues when you run the Discovery Accelerator client in Windows 8 or later
- Display issues when you open a Discovery Accelerator website in Internet Explorer 10 or later
- Vault stores not displayed in the Discovery Accelerator client
- Discovery Accelerator searches return unexpected results
- Full-text search indexing is disabled by default in SQL Server
- Errors when exporting items from Discovery Accelerator
- TNEF-encoded attachments to Internet Mail (.eml) messages may not be readable after you export the messages from a review set
- Synchronization errors after you rename the SQL Server computer
- Performance counter errors when the Accelerator Manager service starts
- SQL Service Broker warning when restoring a customer database to a different server
- Issues with Custodian Manager
- Custodian Manager lets you synchronize multiple custodians with the same Active Directory account
- Custodian Manager does not list the members of a custodian group after you delete the group and then restore it by synchronizing with Active Directory
- If a custodian belongs to one Active Directory domain but is a member of a group in a second domain, Custodian Manager may not update the custodian's details when it synchronizes with the second domain
- Custodian Manager fails to synchronize with Domino LDAP users and groups whose names contain certain double-byte characters
- Issues with Discovery Accelerator reports
- Troubleshooting Privileged Delete failures
How to decrypt RMS-protected items
Discovery Accelerator exports RMS-protected SMTP journal items in the encrypted format on the Discovery Accelerator server. You need to use the command-line utility, EmlDecryptor.exe, to decrypt all RMS-protected items.
EmlDecryptor.exe decrypts the contents of the item, creates an unencrypted version of the EML file, and stores it in a separate folder at the same location as the source folder. EmlDecryptor.exe is installed as a part of the Enterprise Vault API Runtime or the Enterprise Vault services installation on the Discovery Accelerator server.
Before you run EmlDecryptor.exe, do the following:
Install the Active Directory Rights Management Services Client 2.1.
Confirm whether Discovery Accelerator has exported any RMS-protected items by generating an export or a production run report.
Ensure that the
EmlDecryptor.exeandEmlDecryptor.inifiles are located in the Enterprise Vault API Runtime installation folder.
To use EmlDecryptor.exe to decrypt RMS-protected items
- Use a text editor to edit the
EmlDecryptor.inifile with the following details:The licensing intranet URL of the rights management services (RMS) server.
The licensing extranet URL of the rights management services (RMS) server.
The unique application ID for the service principal in a tenant, which your service uses for interacting with Azure Rights Management Services.
The globally unique identifier (GUID) of the tenant. The tenant ID is tied to the Active Directory in Azure.
For example,
;This is the configuration file for the EmlDecryptor utility. ;EmlDecryptor.exe is a command-line utility, which decrypts ;all Azure RMS-protected SMTP emails available in the ;export/production location of the Discovery/Compliance ;Accelerator export/production run. ;All parameters in this ini file must be specified and should ;not be empty. ;The licensing intranet URL of the rights management services ;(RMS) server. RMSIntranetUrl=https://<RMSLicensingIntranetUrl> ;The licensing extranet URL of the rights management services ;(RMS) server. RMSExtranetUrl=https://<RMSLicensingExtranetUrl> ;The unique application ID for the service principal in a ;tenant, which your service uses for interacting with ;Azure Rights Management Services. ApplicationPrincipalId=<ApplicationPrincipalId> ;The globally unique identifier (GUID) of the tenant. The ;tenant ID is tied to the Active Directory in Azure. BposTenantId=<BposTenantId>
- Log on to the Discovery Accelerator server as a Discovery Accelerator administrator.
- Run
EmlDecryptor.exefrom the command line. For example,c:\Program Files (x86)\Enterprise Vault>EmlDecryptor.exe
EmlDecryptor.exeprompts you to enter the following details:<Source Directory Path>. Enter the location where the RMS-protected SMTP emails are exported after the export run or the production run.
<Symmetric Key>. Enter the 256-bit AES symmetric key that is used to verify the application.
EmlDecryptor.exevalidates the provided information and starts the conversion process.
When EmlDecryptor.exe executes successfully, it stores the decrypted files along with a CSV report in a separate folder within the source directory path. For example, if the source directory path is C:\Discovery Accelerator Export\customer_name, the decrypted files and the CSV report are stored in the C:\ExportRun\customer_name_decrypted<DateTime> folder.
If you encounter any issues when running the EmlDecryptor.exe utility, enable DTrace on the utility and run it again.