Search & Destroy Prerequisites

Before using Search & Destroy in the Exchange environment, take note of the following prerequisite knowledge.

Features

Feature

Description

Service account

This account performs the backend searches in the Exchange environment. Only one service account is necessary for the entire organization. Configure the service account as follows:

Ensure that the account is a member of the Exchange discovery management group
Ensure that the account never expires
Ensure that the account is a member of the Exchange Mailbox Import Export role to export search results to a.pst file
Create a mailbox for this account (Exchange Server 2013/2016 only)

For details on Exchange Management Shell Commands related to the service account, see Service Account Settings.

Discovery mailbox

This mailbox stores the search result messages. ScanMail copies messages from the end users’ mailboxes into the discovery mailbox. Configure the discovery mailbox(es) as follows:

Ensure that the discovery management group has full access permission to each discovery mailbox
Assign at least one discovery mailbox to each data center in the organization

Note

Trend Micro recommends that administrators do not place the discovery mailbox in Data Availability Groups (DAG) solutions. The discovery mailbox consumes more database space when used in a DAG solution.

For details on Exchange Management Shell Commands related to the discovery mailbox, see Discovery Mailbox Settings.

Exchange Server 2013/2016 Throttling Policy

Exchange Server 2013/2016 utilizes a throttling policy to limit the number of concurrent mailbox searches and the number of specified mailboxes each search can search. Administrators must reconfigure the throttling policy to optimize Search & Destroy mailbox searches.

For details, see Exchange Server 2013/2016 Throttling Policy Settings.

$('#title').html($('meta[name=description]').attr('content'));