A Microsoft Exchange organisation is quite a complex entity. Documenting it with all its details requires a lot of effort and time and doing this manually is virtually impossible. The configuration of an Exchange Server system is manifold, and it is hardly possible to stay on top of things if there are multiple servers in an organisation. Server roles may be distributed to multiple systems. While, in Exchange systems, changes do not occur as often as in other systems, it is nevertheless extremely important that all data is up-to-date. For detailed instructions on how to inventory such systems, please refer again to the Docusnap User Manual. To perform the inventory, you only need to define a user who has sufficient rights for the Exchange environment. Docusnap will do the rest for you without agents, using LDAP, WMI, and PowerShell.
When inventorying an Exchange Server, Docusnap will also retrieve the permissions structure configured for that server. Later, you can evaluate the access permissions using a permission analysis. This makes it easy to find out which permissions are set for the mailboxes and who has which explicit rights to which mailbox. Are the users in your company allowed to send and receive private e-mails? Then, the configured access rights to the mailbox data stores are of particular interest. If you archive the results of these permission analyses, you can easily provide evidence whenever needed. At a press of a button, Docusnap provides a graphical Exchange plan and an overview of the access permissions.
By scanning your Exchange Servers, you finally obtain an overview of the various mailboxes and the data stores that hold them. All this is possible without logging on to the Exchange management console. This way, a segregation of duties between IT documentation and administration can be achieved for Exchange Servers as well. So any IT staff member can check where the mailboxes are stored and query the associated access rights and sizes. You can thus ensure that all employees will be able to access this information – without the need to assign corresponding permissions to each Exchange account. This will make your Exchange admin happy.
