Enterprise Vault™ Administrator's Guide
- About this guide
- Managing administrator security
- Roles-based administration
- Working with predefined RBA roles
- Customizing RBA roles
- Day-to-day administration
- About Exchange mailbox archiving reports
- About starting or stopping tasks or services
- Monitoring journal mailboxes
- About monitoring disks
- About maintaining the SQL databases
- Using SQL AlwaysOn availability groups
- About managing vault store groups and sharing
- About managing safety copies
- About managing partition rollover
- About expiry and deletion
- Working with retention categories and retention plans
- Setting up retention folders
- Enabling archiving for new mailboxes
- About moving archives
- How Move Archive works
- About moving mailbox archives within a site
- About moving mailbox archives between sites
- About configuring Move Archive
- Running Move Archive
- Monitoring Move Archive
- PowerShell cmdlets for managing archives
- Using Enterprise Vault for records management
- Setting the default record type for users
- Common configuration scenarios
- Searching archives for items marked as records
- Automatically filtering events
- Managing indexes
- About the indexing wizards
- Managing indexing exclusions
- About the indexing PowerShell cmdlets
- Advanced Domino mailbox and desktop policy settings
- Editing the advanced settings for Domino mailbox and desktop policy
- Domino mailbox policy advanced settings
- Archiving General: Domino mailbox policy
- Archiving General: Domino mailbox policy
- Domino desktop policy advanced settings
- Advanced Exchange mailbox and desktop policy settings
- Editing the advanced Exchange mailbox and desktop settings
- Exchange mailbox policy advanced settings
- Archiving General (Exchange mailbox policy advanced settings)
- Archiving General (Exchange mailbox policy advanced settings)
- Exchange desktop policy advanced settings
- Office Mail App (Exchange desktop policy advanced settings)
- Outlook (Exchange desktop policy advanced settings)
- OWA versions before 2013 (Exchange desktop policy advanced settings)
- Vault Cache (Exchange desktop policy advanced settings)
- Virtual Vault (Exchange desktop policy advanced settings)
- Advanced Exchange journal policy settings
- Archiving General (Exchange journal policy advanced settings)
- Advanced Exchange public folder policy settings
- Archiving General (Exchange public folder policy advanced settings)
- Advanced SMTP policy settings
- Site properties advanced settings
- Editing site properties advanced settings
- Site properties advanced settings
- Content Conversion (site properties advanced settings)
- File System Archiving (site properties advanced settings)
- IMAP (site properties advanced settings)
- Indexing (site properties advanced settings)
- Skype for Business (site properties advanced settings)
- SQL Server (site properties advanced settings)
- SMTP (site properties advanced settings)
- Storage (site properties advanced settings)
- Content Conversion (site properties advanced settings)
- Computer properties advanced settings
- Editing computer properties advanced settings
- Computer properties advanced settings
- Agents (computer properties advanced settings)
- IMAP (computer properties advanced settings)
- Indexing (computer properties advanced settings)
- Storage (computer properties advanced settings)
- Task properties advanced settings
- Advanced Personal Store Management properties
- Classification policy advanced settings
- Managing the Storage queue
- Automatic monitoring
- About monitoring using Enterprise Vault Operations Manager
- About monitoring using MOM
- About monitoring using SCOM
- Managing extension content providers
- Exporting archives
- Enterprise Vault message queues
- Customizations and best practice
- Mailbox archiving strategies
- Notes on archiving based on quota or age and quota
- Notes on archiving items from Exchange Server 2010 managed folders
- About performance tuning
- Mailbox archiving strategies
- Failover in a building blocks configuration
- Appendix A. Ports used by Enterprise Vault
- Appendix B. Useful SQL queries
- Appendix C. Troubleshooting
- Installation problems
- Microsoft SQL Server problems
- Server problems
- Client problems
- Problems enabling or processing mailboxes
- Problems with Vault Cache synchronization
- Identifying and resolving Vault Cache issues on the Enterprise Vault server
- Identifying and resolving Vault Cache issues on an end-user computer
- Problems with Enterprise Vault components
- Troubleshooting: All tasks and services
- Troubleshooting: Directory service
- Troubleshooting: Exchange archiving or Journaling tasks
- Troubleshooting: Storage service
- Troubleshooting: Shopping service
- Troubleshooting: Web Access application
- Troubleshooting: All tasks and services
- Techniques to aid troubleshooting
- How to modify registry settings
- About moving an Indexing service
- Appendix D. Enterprise Vault accounts and permissions
Changing the Vault Service account
If you need to change the Vault Service account, this section describes how to proceed.
Note:
You are recommended not to change the account name if possible, because of the amount of work involved, and the potential for introducing mistakes that take time to rectify.
Before you change the account, ensure that the following apply:
The new Vault Service account is part of the Administrators group, with permission Full Control (All), on each Enterprise Vault computer in the Enterprise Vault Site.
If Exchange Server archiving is implemented, the new account has full permissions on the Microsoft Exchange Server.
The Microsoft Message Queue security has been set up to grant the Administrators group access to the Enterprise Vault queues.
The new account has database creator access on the SQL server.
If you use File System Archiving, you must ensure that the new account has the required permissions and privileges on the following:
All target Windows file servers.
Other Windows servers on which the FSA Agent is installed. For example, any FSA Reporting proxy servers for non-Windows file servers.
If you do not make the Vault Service account a member of the local Administrators group on the file server, you must grant the account a set of minimum permissions and privileges. See the appendix "Permissions and privileges required for the Vault Service account on Windows file servers" in Setting up File System Archiving.
For servers on which the FSA Agent is installed, you can use the EVFSASetRightsAndPermissions utility to help you set the required permissions and privileges. See "EVFSASetRightsAndPermissions" in the Utilities guide.
If SharePoint Server archiving is implemented, add the new Vault Service account to the SharePoint sites, or to the group that contains the old Vault Service account. The new account must be a local administrator on the SharePoint Servers.
For instructions on how to set permissions for the Vault Service account, see Enterprise Vault required software and settings in Installing and Configuring.
Note the following:
Always use the Administration Console to specify a new password for the Vault Service account or to change the Vault Service account itself. Do not use the Windows Services MMC snap-in to edit the logon credentials for an Enterprise Vault service unless you are instructed to do so.
If you change only the password of the Vault Service account, and you have installed the FSA Agent on any computers, you must update the logon credentials that the FSA Agent services use.
See "Updating the logon credentials of the FSA Agent services" in Setting up File System Archiving.
To change the Vault Service account
- Start the Administration Console as the existing Vault Service account.
- In the Administration Console, open Directory Properties and click the Service Account tab.
- Change the Vault Service account details to reference the new account.
- On SharePoint servers, run the Enterprise Vault SharePoint Configuration wizard and specify the new Vault Service account credentials.
- If you have installed any Enterprise Vault add-ons, you may need to change the Vault Service account credentials in the add-on. See the documentation that accompanies the add-on for information on how to do this.
- Restart all Enterprise Vault services on all Enterprise Vault servers in the Enterprise Vault Site.
- Restart the Enterprise Vault services on any other computers that have Enterprise Vault services installed. This includes the FSA Agent services on any computers that have the FSA Agent installed.
See the following technical note for a summary of the various accounts and permissions that are required by Enterprise Vault: