Documentation forAccess Rights Manager

Advanced settings for Exchange in the configuration files

Some settings can not be made in the graphical configuration application. Advanced settings must be adjusted in the configuration files.

The settings described below will only take effect once a new scan is performed.

 

Change the attribute for the creation of mailbox categories

By default Access Rights Manager sorts mailboxes into categories, upwards of 1,000 mailboxes, according to the Active Directory property "sn".

The selected property can be changed to any desired text attribute from Active Directory, via the configuration file.

 

Configuration file

pnJob.config.xml

 

Computer

Collector server which is configured for the Exchange Scan.

 

Path

%ProgramData%\protected-networks.com\8MAN\cfg

If the file is not available, copy the "template" from the following path, delete the content and enter the code.

old: %ProgramFiles%\Protected Networks\8MAN\etc

new: %ProgramFiles%\solarwinds\ARM\etc

 

Code

<?xml version="1.0" encoding="utf-8"?>
<config>
  <collector.scanner.exchange.sortingProperty  Type="System.String">sn</collector.scanner.exchange.sortingProperty>
</config>

 

Possible Values

Replace "sn" with any desired AD text (single line) attribute.

 

Change the cut-off rules for the mailbox categories

By default the category descriptions are generated from the first 10 characters of the first and last mailbox. You can change the length of utilized descriptions.

 

Configuration file

pnServer.config.xml

 

Computer

Access Rights Manager-Server

 

Path

%ProgramData%\Protected Networks\8MAN\cfg

 

Code

<?xml version="1.0" encoding="utf-8"?>
<config>
  <exchange.CategoryLength type="System.Int32">10</exchange.CategoryLength>
</config>

 

Possible values

1 to 500

 

Prevent the formation of mailbox categories

By default Access Rights Manager sorts mailboxes into categories, upwards of 1,000 mailboxes. You can turn off the creation of categories.

 

Configuration file

pnServer.config.xml

 

Computer

Access Rights Manager-Server

 

Path

%ProgramData%\Protected Networks\8MAN\cfg

 

Code

<?xml version="1.0" encoding="utf-8"?>
<config>
  <exchange.makeMailBoxCategories type="System.Boolean">false</exchange.makeMailBoxCategories>
</config>

 

Possible values

false - no categories (flat list of mailboxes in the resource view)

true - use categories

 

Adjust the throttling factor

The Exchange Web-Service is used for the scanning of delegations. The scan works with the given throttling settings of the Exchange server.

The scan can be accelerated with an optimal throttling setting.

For additional information see the article Set-ThrottlingPolicy. (© 2020 Microsoft, https://docs.microsoft.com/en-us/powershell/module/exchange/server-health-and-performance/Set-ThrottlingPolicy?view=exchange-ps, obtained on January 29, 2020)

 

The setting "EWSMaxConcurrency" is important. It affects the number of parallel requests used by the scan to read delegations.

By default Access Rights Manager uses the maximum number of possible parallel requests allowed by the throttling policy. If the throttling policy allows for an unlimited number of parallel requests, then the number of processors is multiplied by 8. You are able to change this value.

 

Configuration file

pnJob.config.xml

Computer

Collector server that is configured for the Exchange scan.

Path

%ProgramData%\Protected Networks\8MAN\cfg

 

Code

<?xml version="1.0" encoding="utf-8"?>
<config>
  <collector.scanner.exchange.processormultiplierForUnlimitedThrottling type="System.Int32">8</collector.scanner.exchange.processormultiplierForUnlimitedThrottling>
</config>

 

Possible values

Replace the value "8" with your desired number. The entered number will be multiplied with the number of processors.