Prerequisites

Microsoft Outlook Requirements

Microsoft Outlook 2007, 2010, or 2013.
Either of the following:
- For Microsoft Outlook 32-bit installation, install the 32-bit version of the agent.
- For Microsoft Outlook 64-bit installation, install the 64-bit version of the agent.
  Notes
  - Use only the traditional Windows Installer-based (MSI) method to install Microsoft Office. Other methods, such as Click-to-Run, are not supported.
  - If you archive PST files, you must install the 64-bit version of the agent.

If you locate the agent on an off-host proxy computer, do the following:

Make sure that the proxy computer is added to the same domain where the Exchange server is located.
Install Microsoft Outlook 2007 or later on the off-host proxy computer so that the software drivers that are required for the agent to function in an off-host proxy configuration are installed.

Note

If you use Exchange 2010/2013/2016, you must install Microsoft Outlook 2013 SP1 or later service packs on the off-host proxy computer. Microsoft recommends that Microsoft Outlook not to be installed on Exchange servers, as now access nodes are required on a proxy server rather than directly on the Exchange servers.

Assigning Full Access to Service Accounts

Applies to: Exchange 2007 and later

The service account must have full access rights to all mailboxes on the server.

The service account must be a member of:

The Organization Management group (Exchange 2010 or later) or the Exchange Organization Administrators group (Exchange 2007).
The Local Administrator Group on the proxy servers.

If the agent is located on an off-host proxy computer, the service account must be in the Local Administrator Group on the proxy computer.

Note

Disclaimer: This procedure is performed using the Microsoft ADSI Edit snap-in. The snap-in is subject to change without notice. Consult the Microsoft documentation before you perform this procedure.

Procedure

From the ADSIEDIT snap-in, connect to the domain controller.
In Connection Settings, click Select a well known Naming Context and select Configuration from the list.
Expand Services > Microsoft Exchange.
Right-click the appropriate organization name, and then click Properties.

The Properties dialog box appears.
Click the Security tab.
Under Permissions, verify that all the permissions for the Organization Management group (Exchange 2010 or later) or the Organization Administrators group (Exchange 2007) are set to Allow.

Tip

Selecting the Allow for Full Control check box selects Allow for all the permissions. The Deny check box for all permissions must be cleared.
Click OK, and then wait for replication.
To grant Receive As permissions to the service account, open Exchange Management Shell (Exchange PowerShell), and then type the following cmdlet:
```
 
Get-MailboxDatabase | Add-ADPermission -user "<service account>" -ExtendedRights Receive-As
```
You must include the Receive As permissions to protect archive mailboxes and journal mailboxes.

Exchange Server Requirements

Exchange Server 2013 or Later

Before you run backups, verify that Microsoft Outlook is running on the client computer and that it is configured to use the same user that is specified in the mailbox agent properties.
On each Exchange server with a Client Access Server (CAS) role:
1. In PowerShell, run the following command:
```
 
Set-OutlookAnywhere –identity "<Exchange Client Access Server name>\rpc (Default Web Site)" -InternalClientAuthenticationMethod ntlm
```
2. In Windows, open the Command Prompt window, and then run IISRESET.
To manage the performance of your Exchange environment and to enforce connection bandwidth limits, set the following throttling policy:
1. In Windows, on the taskbar, click Start, and then click All Programs > Microsoft Exchange Server version_number.
2. Click Exchange Management Shell.
3. Run the following commands:
```
New-ThrottlingPolicy CVThrottlingPolicy
```
```
Set-ThrottlingPolicy CVThrottlingPolicy -RCAMaxConcurrency unlimited -RcaMaxBurst unlimited -RcaRechargeRate unlimited -RcaCutoffBalance unlimited –IsServiceAccount:$true
```
```
 
Set-Mailbox <service account> -ThrottlingPolicy CVThrottlingPolicy
```
  Where:
  
  service account is the Exchange Administrator Service Account.
For the throttling policy to take effect immediately, restart the Exchange RPC service.

Note

If the Exchange Remote Procedure Call (RPC) service is not restarted, it might take the throttling policy up to two hours to take effect.

Exchange Server 2010

To manage the performance of your Exchange environment and enforce connection bandwidth limits, set the throttling policy.

Procedure

On the Exchange Server, from the Windows Start menu, click All Programs > Microsoft Exchange Server 2010.
Click Exchange Management Shell.

Type the following commands:

New-ThrottlingPolicy –name CVThrottlingPolicy

Set-ThrottlingPolicy –identity CVThrottlingPolicy –RCAMaxConcurrency $null –RCAPercentTimeInAD $null –RCAPercentTimeInCAS $null –RCAPercentTimeInMailboxRPC $null

Set-Mailbox –Identity <service account> –ThrottlingPolicy CVThrottlingPolicy

Where:

service account is the Exchange Administrator Service Account.

For the throttling policy to take effect immediately, restart the Exchange Remote Procedure Call (RPC) service.

Note

If the Exchange RPC service is not restarted, it might take the throttling policy up to two hours to take effect.

Disabling MAPI Over HTTP

Applies to: Exchange 2013 or later

For Exchange 2013 or later, backups require RPC over HTTP. If you have MAPI over HTTP enabled, you must disable it before you configure accounts for Exchange 2013 or later.

Procedure

Log on as the service account to the access node.
In Windows on the client computer, click Start, and then type regedit in the Search programs and files box.
Press Enter.

The Registry Editor appears.
Expand HKEY_CURRENT_USER > Software > Microsoft > Exchange.
Right-click Exchange, and then click New > DWORD.

A new DWORD entry appears in the right pane.
Right-click the new DWORD entry, and then click Rename.
1. Type MapiHttpDisabled.
2. Right-click the MapiHttpDisabled entry, and then click Modify.
  
  The Edit DWORD Value dialog box appears.
3. In the Value box, type 00000001, and then click OK.
Right-click Exchange, and then click New > DWORD.
Right-click the new DWORD entry, and then click Rename.
1. Type AlwaysUseMSOAuthForAutoDiscover.
2. Right-click the AlwaysUseMSOAuthForAutoDiscover entry, and then click Modify.
  
  The Edit DWORD Value dialog box appears.
3. In the Value box, type 00000001, and then click OK.
Close the Registry Editor.
Verify that the protocol has been changed to RPC over HTTP.
1. Restart Microsoft Outlook.
2. Press Ctrl and right-click the Microsoft Outlook icon in the notification area at the far right of the task bar.
3. Click Connection Status.
  
  The Microsoft Exchange Connection Status dialog box appears.
4. Verify that the value in the Protocol column is RPC/HTTP.
5. If the value is HTTP, delete the Microsoft Outlook profile, and then recreate it using the same service account.