Enterprise Vault™ Utilities
- About this guide
- ArchivePoints
- Audit Viewer
- Backtrace
- CenteraPing
- Domino Archive Exporter
- Domino Profile Document Tool
- Domino Retention Plan Tool
- DTrace
- EVDominoExchangeMigration Tool
- Running the EVDominoExchangeMigration tool
- EVDuplicateCleaner
- EVEARemovalUtility
- EVFSASetRightsAndPermissions
- EVrights
- EVservice
- EVSPShortcutManager
- EVSVR
- About EVSVR
- About the EVSVR operation settings
- Using the output from one EVSVR operation as input for another operation
- Viewing the EVSVR output log file
- Running EVSVR in interactive mode
- FSARunNow
- FSAUndelete
- FSAUtility
- NTFS to Centera Migration
- Permissions Browser
- Policy Manager (EVPM)
- Sections and keynames in Policy Manager initialization file
- Policy Manager initialization file examples
- About using the Provisioning API to run Policy Manager scripts
- ResetEVClient
- Vault Store Usage Reporter
[Mailbox] section of the Policy Manager initialization file
Include this section if you want Policy Manager to change settings for one or more mailboxes.
Optional. Identifies a mailbox.
To apply attributes to all non-system mailboxes on the Exchange server, create a [Mailbox] section and set DistinguishedName to All.
A single [Mailbox] section can contain multiple DistinguishedName keywords, LDAPQuery keywords, or a mixture of the two.
You can run Exchange Mailbox Tasks in report mode to obtain a list of all the mailboxes. You can then copy distinguished names from the report to the initialization file.
The distinguished name value required is the legacyExchangeDN property for the mailbox in Active Directory. For example:
/o=Org1/ou=Admin Group/cn=Recipients/cn=jones
You can also view the legacyExchangeDN property using an Active Directory editor, such as the LDP (ldp.exe) tool, or Active Directory Service Interfaces (ADSI) Edit.
Optional. Lets you select mailboxes by using LDAP attributes. The value uses standard LDAP query syntax:
LDAPquery = StandardQuery
A simple query looks like the following:
LDAPquery = (attribute operator value)
Where:
attribute is the LDAP attribute, such as "department".
operator is a valid LDAP operator. This operator is normally one of the following:
&
logical and
|
logical or
!
logical not
=
equal to
When an operator follows an attribute, there must be no space between the operator and the attribute. For example, "company=" is correct, whereas "company =" is not.
You can use the asterisk wildcard (*) in string values. For example, to select all mailboxes with a surname that starts with the letter J:
LDAPquery = sn= j*
Notes:
If you specify an incorrect LDAP attribute, Policy Manager does not find the mailbox and so does not make any changes.
The following are useful attributes:
cn [common name] sn [surname] company department displayName extensionAttribute1 extensionAttribute2 extensionAttribute3 extensionAttribute4 extensionAttribute5 extensionAttribute6 extensionAttribute7 extensionAttribute8 extensionAttribute9 extensionAttribute10 extensionAttribute11 extensionAttribute12 extensionAttribute13 extensionAttribute14 extensionAttribute15 memberof
Some example queries are as follows:
To select mailboxes with LDAP attribute "department" equal to "research":
LDAPquery = department= research
To select mailboxes with LDAP attribute "department" equal to "research" and "Extension-Attribute-1" set to "10000":
LDAPquery = (& (department= research)(extensionAttribute1= 10000))
To select mailboxes belonging to the users in the IT Guys security group in the Texas organizational unit:
LDAPquery = (memberof= CN=IT Guys,OU=texas,DC=evdemo,DC=local)
Optional. Lets you select mailboxes that have been provisioned by a specific provisioning target group.
For example, to select all the mailboxes that have been provisioned by a group called "VIPs":
ProvisioningGroup=VIPs
Note:
In this example, EVPM selects only the mailboxes that have actually been provisioned by the provisioning target group. Other users may be eligible under the same group, but not provisioned because they have already been provisioned by a higher priority group. You must also run the provisioning task before running EVPM scripts that use the ProvisioningGroup setting, to ensure that provisioning is up to date.
Optional. Lets you reset the permissions on archive folders to the user's default permissions.
When it migrates the contents of a PST file to an archive, Enterprise Vault assigns the same access permissions to the imported PST folders as it does to their parent folder. The access permissions on the PST file itself are not transferred to the newly-created folders. This is in line with standard Exchange policy, but it may give rise to a possible security issue: Any user who has read permissions to the parent folder in the Exchange mailbox can potentially access the migrated items in the PST import folders. You can address this issue by resetting the permissions on the archive folders and thereby stopping unqualified users from viewing the contents of PST import folders.
Possible values:
1. (Reset the archive permissions on all folders to the user's default permissions.)
2. (As for 1, but also performs a mailbox synchronization when Policy Manager has reset the archive folder permissions.)