Enterprise Vault™ Setting up File System Archiving (FSA)
- About this guide
- About File System Archiving
- About File System Archiving
- About using FSA with clustered file servers
- About setting up File System Archiving
- About FSA policies
- About target volumes, folders, and archive points
- About client access to FSA-archived items
- About archived file permissions
- About FSA shortcut files
- About the FSA Agent
- About retention folders
- About FSA Reporting
- About FSAUtility
- Steps to configure File System Archiving
- Adding a Windows file server to File System Archiving
- Adding a Windows file server to File System Archiving
- Using FSA with the Windows Encrypting File System (EFS)
- About archiving from Windows Server 2012 or later file servers
- Account requirements for managing FSA with Windows file servers
- Permissions and privileges required by the Vault Service account on Windows file servers
- Configuring a file server's firewall for FSA
- Adding a Windows file server as an archiving target
- Adding a NetApp filer to File System Archiving
- Adding a NetApp C-Mode Vserver to File System Archiving
- Adding a NetApp C-Mode Vserver to File System Archiving
- Permissions and privileges required by the Vault Service account on NetApp C-mode Vservers
- Granting the required permission on each Vserver
- Configuring the FPolicy server details
- Adding a NetApp C-Mode Vserver as an archiving target
- Points to note about File System Archiving on NetApp C-Mode file servers
- Adding a Celerra/VNX device to File System Archiving
- Adding a Dell EMC Unity 4.3 device to File System Archiving
- Configuring FSA with clustered file servers
- About configuring FSA with clustered file servers
- Steps to configure FSA with clustered file servers
- Preparing to set up FSA services in a cluster
- Adding the Vault Service account to the non-secure VCS cluster for FSA high availability
- Adding the virtual file server as an FSA target
- Configuring or reconfiguring the FSA resource
- Removing the FSA resource from all cluster groups
- Troubleshooting the configuration of FSA with clustered file servers
- Installing the FSA Agent
- Defining volume and folder policies
- About defining FSA volume and folder policies
- Creating FSA volume policies and folder policies
- About FSA volume policy and folder policy properties
- About selecting the shortcut type for an FSA policy
- About FSA policy archiving rules
- About options for archiving files that have explicit permissions, and files under DAC
- Configuring the deletion of archived files on placeholder deletion
- Configuring target volumes, target folders, and archive points
- About adding target volumes, target folders, and archive points for FSA
- Adding a target volume for FSA
- Adding a target folder and archive points for FSA
- About managing archive points
- Archive point properties
- Effects of modifying, moving, or deleting folders
- About deleting target folders, volumes, and file servers
- Configuring pass-through recall for placeholder shortcuts
- Configuring and managing retention folders
- Configuring and running FSA tasks
- About configuring and running FSA tasks
- Adding a File System Archiving task
- Scheduling a File System Archiving task
- Setting the FSA folder permissions synchronization schedule
- Scheduling the deletion of archived files on placeholder deletion for Dell EMC Celerra/VNX
- Configuring FSA version pruning
- Using Run Now to process FSA targets manually
- About File System Archiving task reports
- About scheduling storage expiry for FSA
- Configuring file system filtering
- Managing the file servers
- PowerShell cmdlets for File System Archiving
- Appendix A. Permissions and privileges required for the Vault Service account on Windows file servers
- About the permissions and privileges required for the Vault Service account on Windows file servers
- Group membership requirements for the Vault Service account
- DCOM permissions required by the Vault Service account
- WMI control permissions required by the Vault Service account
- Local security user rights required by the Vault Service account
- Permissions required by the Vault Service account for the FSA Agent
- Permissions required by the Vault Service account to support the FSA resource on clustered file servers
- FSA target share and folder permissions required by the Vault Service account
Permissions and privileges required by the Vault Service account on Windows file servers
The FSA Agent and other FSA processes run on target Windows file servers under the Vault Service account. To perform the required tasks, the Vault Service account requires certain permissions and privileges on the file server:
The Vault Service account can run as a member of the built-in local Print Operators group on the file server, with an additional set of minimal permissions and privileges.
Alternatively, the Vault Service account can run as a member of the local Administrators group on the file server. The Administrator rights allow the account to perform the additional tasks of installing the FSA Agent and configuring the resource for a file server cluster. However, granting local Administrator rights to the Vault Service account on a file server may not always be advisable. For example:
Your company may forbid the granting of local Administrator rights to computer service accounts.
If the file server is a domain controller, you should not make the Vault Service account a local Administrator. An account that is a member of the local Administrators group on a domain controller is promoted to a Domain Administrator. We recommend that you do not make the Vault Service account a Domain Administrator.
If the Vault Service account is not a member of the local Administrators group, you must use a suitable account that is a member of that group when you install the FSA Agent, or if you configure the FSA resource for a Windows Server failover cluster.
See Account requirements for managing FSA with Windows file servers.
Note the following:
When you install the FSA Agent, either from the Administration Console or manually, Enterprise Vault adds the Vault Service account to the Print Operators group on the file server, and configures the additional set of minimal permissions and privileges.
If you do not install the FSA Agent on a file server, you must grant the required permissions and privileges to the Vault Service account manually.
See Granting permissions to the Vault Service account if you do not install the FSA Agent.
To support the FSA resource on VCS-clustered file servers, you must make the Vault Service account a member of the local Administrators group on the VCS cluster nodes.
An appendix to this guide lists the permissions and privileges that the Vault Service account requires on a Windows file server.
See About the permissions and privileges required for the Vault Service account on Windows file servers.