This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
public:documents_and_guides:v8:obm:exchange-mail-level-backup-ews:preparation [2020/04/29 13:56] ronnie.chan |
public:documents_and_guides:v8:obm:exchange-mail-level-backup-ews:preparation [2020/04/29 14:12] ronnie.chan |
||
---|---|---|---|
Line 31: | Line 31: | ||
==== 2.1.4 AhsayOBM Installation ==== | ==== 2.1.4 AhsayOBM Installation ==== | ||
- | AhsayOBM v8.1.0.0 or above must be installed either on the Exchange Server 2016 / 2019 hosting the database or on the remote backup machine. | + | * AhsayOBM v8.1.0.0 or above must be installed either on the Exchange Server 2016 / 2019 hosting the database or on the remote backup machine. |
- | + | * AhsayOBM v8.3.0.96 or above must be installed either on the Exchange Server 2013 hosting the database or on the remote backup machine. | |
- | AhsayOBM v8.3.0.96 or above must be installed either on the Exchange Server 2013 hosting the database or on the remote backup machine. | + | |
==== 2.1.5 Microsoft Exchange Mailbox Add-On Module ==== | ==== 2.1.5 Microsoft Exchange Mailbox Add-On Module ==== | ||
Line 76: | Line 75: | ||
Scheduled backup is required if you choose to back up in DAG option on Exchange server as AhsayOBM on all DAG members will base on the scheduled backup time to start backup on all the individual DAG member at the same time. | Scheduled backup is required if you choose to back up in DAG option on Exchange server as AhsayOBM on all DAG members will base on the scheduled backup time to start backup on all the individual DAG member at the same time. | ||
- | 1. A DAG backup cycle is considered complete only when scheduled backup on all DAG members have been carried out. An email report will be generated when a complete DAG backup cycle has taken place. | + | * A DAG backup cycle is considered complete only when scheduled backup on all DAG members have been carried out. An email report will be generated when a complete DAG backup cycle has taken place. |
- | + | * Please keep in mind that manual backup will only be considered as individual Mail Level backup, and therefore will not be counted as part of the DAG backup cycle. | |
- | 2. Please keep in mind that manual backup will only be considered as individual Mail Level backup, and therefore will not be counted as part of the DAG backup cycle. | + | |
However, for backup and restore on a remote backup machine, as the operation for single node can be done either manually or automatically, a scheduled backup is not required. | However, for backup and restore on a remote backup machine, as the operation for single node can be done either manually or automatically, a scheduled backup is not required. | ||
Line 85: | Line 83: | ||
Ensure all nodes have mailbox role. This can be checked by accessing the Exchange admin center (EAC). | Ensure all nodes have mailbox role. This can be checked by accessing the Exchange admin center (EAC). | ||
+ | |||
+ | {{public:documents_and_guides:obm:exchange-mail-level-backup-ews:image066.png?800}} | ||
==== 2.1.13 Operating System ==== | ==== 2.1.13 Operating System ==== | ||
- | 1. For AhsayOBM installed on the Exchange Server 2013/2016/2019, the operating system must be Windows Server 2012/ 2012 R2/ 2016 / 2019 or above. | + | * For AhsayOBM installed on the Exchange Server 2013/2016/2019, the operating system must be Windows Server 2012/ 2012 R2/ 2016 / 2019 or above. |
- | + | * For AhsayOBM installed on the remote backup machine, the operating system must be Windows 7/ 8/ 8.1/ 10 or Windows Server 2008/ 2008 R2/ 2012/ 2012 R2/ 2016 / 2019 or above. | |
- | 2. For AhsayOBM installed on the remote backup machine, the operating system must be Windows 7/ 8/ 8.1/ 10 or Windows Server 2008/ 2008 R2/ 2012/ 2012 R2/ 2016 / 2019 or above. | + | |
==== 2.1.14 Supported Exchange Server 2013 / 2016 / 2019 Version ==== | ==== 2.1.14 Supported Exchange Server 2013 / 2016 / 2019 Version ==== | ||
- | · MS Exchange Server 2013 Cumulative Update 3 (CU3) or later is supported. | + | * MS Exchange Server 2013 Cumulative Update 3 (CU3) or later is supported. |
- | + | * MS Exchange Server 2016 Cumulative Update 4 (CU4) or later is supported. | |
- | · MS Exchange Server 2016 Cumulative Update 4 (CU4) or later is supported. | + | * MS Exchange Server 2019 Cumulative Update 1 (CU1) or later is supported |
- | + | ||
- | · MS Exchange Server 2019 Cumulative Update 1 (CU1) or later is supported | + | |
==== 2.1.15 Exchange Servers Properties ==== | ==== 2.1.15 Exchange Servers Properties ==== | ||
Line 106: | Line 103: | ||
Example: Get-ExchangeServer | Format-List Name, Edition,AdminDisplayVersion | Example: Get-ExchangeServer | Format-List Name, Edition,AdminDisplayVersion | ||
- | Please refer to the following Microsoft article for details of MS Exchange build numbers and releases: https://docs.microsoft.com/en-us/exchange/new-features/build-numbers-and-release-dates?view=exchserver-2019 | + | Please refer to the following Microsoft article for details of MS Exchange build numbers and releases: [[https://docs.microsoft.com/en-us/exchange/new-features/build-numbers-and-release-dates?view=exchserver-2019]] |
==== 2.1.16 Windows User Account Permission ==== | ==== 2.1.16 Windows User Account Permission ==== | ||
Line 112: | Line 109: | ||
The Windows user account used for the backup must be a member of the following security groups. | The Windows user account used for the backup must be a member of the following security groups. | ||
- | Exchange Server 2013/2016/2019 | + | <WRAP indent> |
+ | === Exchange Server 2013/2016/2019 === | ||
- | * Discovery Management (including ApplicationImpersonation and Mailbox Search) | + | * Discovery Management (including ApplicationImpersonation and Mailbox Search) \\ {{public:documents_and_guides:obm:exchange-mail-level-backup-ews:image068.png?800}} |
+ | * Organization Management \\ {{public:documents_and_guides:obm:exchange-mail-level-backup-ews:image070.png?800}} | ||
+ | * Public Folder Management \\ {{public:documents_and_guides:obm:exchange-mail-level-backup-ews:image072.png?800}} \\ \\ Login to the Exchange admin center, under **permissions, admin roles**. Assign the user to be running the backup as member of the following **admin roles**: | ||
+ | * Discovery Management (including the following **Roles**): | ||
+ | * ApplicationImpersonation | ||
+ | * Mailbox Search | ||
+ | * Organization Management | ||
+ | * Public Folder Management | ||
- | * Organization Management | + | === Exchange Server 2013 === |
- | * Public Folder Management | + | * Microsoft Exchange Security \ Organization Management |
+ | * Users \ Administrator | ||
+ | * Users \ Domain Admins | ||
+ | * Users \ Enterprise Admins \\ {{public:documents_and_guides:obm:exchange-mail-level-backup-ews:image074.png?800}} | ||
- | Login to the Exchange admin center, under permissions, admin roles. Assign the user to be running the backup as member of the following admin roles: | + | === Steps to check the current settings === |
- | * Discovery Management (including the following Roles): | + | 1. Click Start > **Control Panel** > **Administrative Tools**, and then click **Active Directory Users and Computers**. |
- | o ApplicationImpersonation | + | 2. Browse to the organization unit containing the corresponding operating system account. |
- | o Mailbox Search | + | 3. Right click on the user, and select **Properties**. |
- | + | ||
- | * Organization Management | + | |
- | + | ||
- | * Public Folder Management | + | |
- | + | ||
- | Exchange Server 2013 | + | |
- | + | ||
- | * Microsoft Exchange Security \ Organization Management | + | |
- | + | ||
- | * Users \ Administrator | + | |
- | + | ||
- | * Users \ Domain Admins | + | |
- | + | ||
- | * Users \ Enterprise Admins | + | |
- | + | ||
- | Ex2013_permission-resize.PNG | + | |
- | + | ||
- | Steps to check the current settings | + | |
- | + | ||
- | 1. Click Start > Control Panel > Administrative Tools, and then click Active Directory Users and Computers. | + | |
- | + | ||
- | 2. Browse to the organization unit containing the corresponding operating system account. | + | |
- | + | ||
- | 3. Right click on the user, and select Properties. | + | |
Select the Member Of tab to check on the membership setting. | Select the Member Of tab to check on the membership setting. | ||
+ | </WRAP> | ||
==== 2.1.17 Enabling Mailbox ==== | ==== 2.1.17 Enabling Mailbox ==== | ||
The Windows user account must have an Exchange Server mailbox. Refer to the URL below for more information. | The Windows user account must have an Exchange Server mailbox. Refer to the URL below for more information. | ||
+ | <WRAP indent> | ||
- | Exchange Server 2013/2016/2019 | + | === Exchange Server 2013/2016/2019 === |
- | Refer to the following article from Microsoft for more details on how to check if an account is mailbox enabled and how to enable it: | + | {{public:documents_and_guides:obm:exchange-mail-level-backup-ews:image076.png?800}} |
- | https://docs.microsoft.com/en-us/Exchange/recipients/create-user-mailboxes?view=exchserver-2019 | + | Refer to the following article from Microsoft for more details on how to check if an account is mailbox enabled and how to enable it: [[https://docs.microsoft.com/en-us/Exchange/recipients/create-user-mailboxes?view=exchserver-2019]] |
- | Exchange Server 2013 | + | === Exchange Server 2013 === |
Refer to the following article from Microsoft for more details on how to check if an account is mailbox enabled. | Refer to the following article from Microsoft for more details on how to check if an account is mailbox enabled. | ||
- | https://docs.microsoft.com/en-us/exchange/create-user-mailboxes-exchange-2013-help | + | [[https://docs.microsoft.com/en-us/exchange/create-user-mailboxes-exchange-2013-help]] |
- | Grant Mailbox Access Permission (Full Access) | + | === Grant Mailbox Access Permission (Full Access) === |
Enter the following command in the Exchange Management Shell | Enter the following command in the Exchange Management Shell | ||
Line 175: | Line 161: | ||
Get-Mailbox | Add-MailboxPermission –User “%os_username%” –AccessRights FullAccess | Get-Mailbox | Add-MailboxPermission –User “%os_username%” –AccessRights FullAccess | ||
- | Example: granting permission to “administrator” account | + | **Example:** granting permission to “administrator” account |
Get-Mailbox | Add-MailboxPermission –User “administrator” –AccessRights FullAccess | Get-Mailbox | Add-MailboxPermission –User “administrator” –AccessRights FullAccess | ||
+ | </WRAP> | ||
==== 2.1.18 Login Name Format Requirement ==== | ==== 2.1.18 Login Name Format Requirement ==== | ||
Line 186: | Line 173: | ||
Ensure that the “Hide from address lists” option is unchecked for all mailboxes to be selected for backup. Mailbox hidden from the address list will not be shown in the backup source selection menu. | Ensure that the “Hide from address lists” option is unchecked for all mailboxes to be selected for backup. Mailbox hidden from the address list will not be shown in the backup source selection menu. | ||
+ | |||
+ | {{public:documents_and_guides:obm:exchange-mail-level-backup-ews:image078.png?800}} | ||
==== 2.1.20 Port Configuration ==== | ==== 2.1.20 Port Configuration ==== | ||
- | As Exchange 2013 / 2016 / 2019 mail level backup and restore is implemented using Microsoft EWS API (Exchange Web Services), which enables AhsayOBM to access mailbox items such as email message, meetings, notes, calendar, contact, etc., without any additional installation or complicated setup required on the Exchange 2013 / 2016 / 2019 Server or remote backup machine, only port 443 must be configured to allow communication between AhsayOBM and Exchange server. | + | As Exchange 2013 / 2016 / 2019 mail level backup and restore is implemented using Microsoft EWS API (Exchange Web Services), which enables AhsayOBM to access mailbox items such as email message, meetings, notes, calendar, contact, etc., without any additional installation or complicated setup required on the Exchange 2013 / 2016 / 2019 Server or remote backup machine, only **port 443** must be configured to allow communication between AhsayOBM and Exchange server. |
==== 2.1.21 Exchange related Windows Services ==== | ==== 2.1.21 Exchange related Windows Services ==== | ||
- | Ensure all MS Exchange related services have been started, particularly the MS Exchange Information Store. | + | Ensure all MS Exchange related services have been started, particularly the **MS Exchange Information Store**. |
- | To verify this setting, launch the Services menu by clicking Start then typing “Services” in the search box. All Exchange related services should be started by default, in case it is not, turn it on by right clicking the item and then select Start. | + | To verify this setting, launch the Services menu by clicking Start then typing “Services” in the search box. All Exchange related services should be started by default, in case it is not, turn it on by right clicking the item and then select **Start**. |
- | Ex2013_Services-resize.PNG | + | {{public:documents_and_guides:obm:exchange-mail-level-backup-ews:image080.png?800}} |
==== 2.1.22 MS Exchange Databases ==== | ==== 2.1.22 MS Exchange Databases ==== | ||
Line 203: | Line 192: | ||
Ensure the MS Exchange Mailbox and Public Folder databases are mounted. This can be verified by Exchange Management Shell or Exchange Admin Center (EAC). | Ensure the MS Exchange Mailbox and Public Folder databases are mounted. This can be verified by Exchange Management Shell or Exchange Admin Center (EAC). | ||
- | * Type the following command in the Exchange Management Shell. | + | * Type the following command in the Exchange Management Shell. |
+ | <WRAP indent> | ||
+ | <code> | ||
Get-MailboxDatabase | Get-MailboxDatabase | ||
+ | </code> | ||
+ | |||
+ | {{public:documents_and_guides:obm:exchange-mail-level-backup-ews:image082.png?800}} | ||
+ | |||
+ | </WRAP> | ||
+ | | ||
+ | |||
- | * Exchange Admin Center (EAC) | + | * Exchange Admin Center (EAC) \\ {{public:documents_and_guides:obm:exchange-mail-level-backup-ews:image084.png?800}} |