Microsoft Exchange collection
Collection methods
We collect Exchange data primarily via LDAP connections to Active Directory domain controllers - this typically ensures we have a consistent dataset for an entire organization.
Note that in an environment where domain controllers host non-federated forests or domains, we want to ensure we have access to all domain controllers.
If that LDAP collection fails, we will try to perform direct Powershell connections to Exchange servers and pull the necessary data.
CAL determination
During collection, we use the following logic to determine if an Enterprise CAL is required:
- are Unified Messaging features enabled? (here we check the
msExchUMEnabledFlags
field) - does a mailbox participate in a journaling rule, either directly or via group membership?
- are the following Active Sync feature flags enabled?
msExchMobileAllowBluetooth
msExchMobileApprovedApplicationList
msExchMobileUnapprovedInROMApplicationList
- does a mailbox template include in a managed folder policy?
If any one of the above are true, an Enterprise CAL is required. If they are all false, then a Standard CAL will suffice.