From 93e7ecf796a23a4528e04fe810f0e979804b1d90 Mon Sep 17 00:00:00 2001 From: Ben Hayman Date: Wed, 9 Sep 2026 12:19:33 +0100 Subject: [PATCH 1/7] Split Exchange instructions into Graph and EWS instructions --- ...changemailbox.md => exchangemailboxews.md} | 24 ++++----- .../addsource/exchangemailboxgraph.md | 50 +++++++++++++++++++ ...exchangeserver.md => exchangeserverews.md} | 23 +++++---- .../addsource/exchangeservergraph.md | 50 +++++++++++++++++++ .../addsource/sharepointonline.md | 2 +- 5 files changed, 125 insertions(+), 24 deletions(-) rename docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/{exchangemailbox.md => exchangemailboxews.md} (84%) create mode 100644 docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md rename docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/{exchangeserver.md => exchangeserverews.md} (87%) create mode 100644 docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailbox.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md similarity index 84% rename from docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailbox.md rename to docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md index fb4bb787ab..e53aa9d5b0 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailbox.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md @@ -1,18 +1,18 @@ --- -title: "Exchange Mailbox" -description: "Exchange Mailbox" +title: "Exchange Mailbox (EWS)" +description: "Exchange Mailbox (EWS)" sidebar_position: 30 --- # Exchange Mailbox -Use the **Exchange Mailbox** source to enable the crawling and classification of content stored in a -single Exchange mailbox on the on-premises Exchange server or Exchange Online. +Use the **Exchange Mailbox (EWS)** source to enable the crawling and classification of content stored in a +single Exchange mailbox on the on-premises Exchange server or Exchange Online using the Exchange Web services (EWS). **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. -**Step 2 –** Select **Exchange Mailbox** source type and in the properties window specify the +**Step 2 –** Select the **Exchange Mailbox (EWS)** source type and in the properties window specify the necessary settings. ## Authentication type: Modern authentication @@ -22,11 +22,11 @@ specify the following: | Option | Description | | ---------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Authentication type | Select **Modern (Exchange Online)** | +| Authentication type | Select **Modern (O365)** | | Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it to crawl Exchange. | | Tenant ID | Enter the **Tenant ID** you obtained at [Step 5: Obtain Tenant ID](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-5-obtain-tenant-id). | | Certificate thumbprint | Enter the certificate thumbprint you prepared at [Step 4: Configure Certificates & secrets](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md). | -| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (you can find it in the Azure AD app properties >**Overview**). | +| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (it can be found in the Azure AD app properties >**Overview**). | ![exchangeonline_cfg_modern_auth_thumb_0_0](/images/dataclassification/5.7/admin/sources/exchangemailbox/exchangeonline_cfg_modern_auth_thumb_0_0.webp) @@ -36,7 +36,7 @@ If you plan to use this authentication type, you will need to specify the follow | Option | Description | Comments | | ------------------------ | ------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Email Address / Password | **Administrator** account that has been assigned both: 1. **Impersonation** right 2. **Discovery Management** role | See [Configure Microsoft Exchange for Crawling and Classification](/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md) for details on the rights assignment. | +| Email Address / Password | An **Administrator** account that has been assigned both: 1. **Impersonation** right 2. **Discovery Management** role | See [Configure Microsoft Exchange for Crawling and Classification](/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md) for details on the rights assignment. | ## Other configuration settings @@ -47,13 +47,13 @@ By default, only basic settings are displayed. To view advanced options, click t | ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Basic settings** | | | | Mailbox | Mailbox to be crawled. | When using impersonation, the settings can be like the following example: | -| Crawl Range | Define what portions of data should be retrieved from the Exchange server: | | +| Crawl Range | Define the time period to be crawled: | | | Crawl In-Place Archive | Select this option if you want to crawl Exchange Online in-place archive mailboxes. | Applies to Exchange Online. | -| OCR Processing Mode | Set the processing mode for document images: | The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images don't contain text. | -| Source Group | Select the source group (if any). | | +| OCR Processing Mode | Set the processing mode for document images: | The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images do not contain text. | +| Source Group | Select the source group to add this source to (if any exist). If no source groups exist, a new source group will be automatically created | | | Pause source on creation | Select if you want to make other configuration changes before data collection occurs. | | | **Advanced settings** | | | | Build Search Index | Select if you want search index to be created. | | | Re-Index Period | Specify how often the source should be checked for changes. Default is **7** days. | Netwrix recommends using default values. | | Priority | Set priority for this data source to be crawled. Select the priority level from the list values: | | -| Document Type | Specify a value that you can use to restrict queries when using the Netwrix Data Classification search index. | | +| Document Type | Specify a value which can be used to restrict queries when utilizing the Netwrix Data Classification search index. | | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md new file mode 100644 index 0000000000..3be5f0bc5c --- /dev/null +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md @@ -0,0 +1,50 @@ +--- +title: "Exchange Mailbox (Graph)" +description: "Exchange Mailbox (Graph)" +sidebar_position: 30 +--- + +# Exchange Mailbox (Graph) + +Use the **Exchange Mailbox (Graph)** source to enable the crawling and classification of content stored in a +single Exchange mailbox on Exchange Online. + +**Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click +**Add**. + +**Step 2 –** Select **Exchange Mailbox (Graph)** source type and in the properties window specify the +necessary settings. + +## Authentication + +You must specify the following: + +| Option | Description | +| ---------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it in order to crawl Exchange. | +| Tenant ID | Enter the **Tenant ID** you obtained at [Step 5: Obtain Tenant ID](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-5-obtain-tenant-id). | +| Certificate thumbprint | Enter the certificate thumbprint you prepared at [Step 4: Configure Certificates & secrets](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md). | +| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (it can be found in the Azure AD app properties >**Overview**). | + +![exchangeonline_cfg_modern_auth_thumb_0_0](/images/dataclassification/5.7/admin/sources/exchangemailbox/exchangeonline_cfg_modern_auth_thumb_0_0.webp) + +## Other configuration settings + +By default, only basic settings are displayed. To view advanced options, click the "wrench" icon at +**Settings** in the bottom. + +| Option | Description | Comments | +| ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| **Basic settings** | | | +| Cloud Environment | Select the Azure instance the Exchange Online server is hosted on. | | +| Mailbox | Mailbox to be crawled. | When using impersonation, the settings can be like the following example: | +| Crawl Range | Define what portions of data should be retrieved from the Exchange server: | | +| Crawl In-Place Archive | Select this option if you want to crawl Exchange Online in-place archive mailboxes. | | +| OCR Processing Mode | Set the processing mode for document images: | The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images do not contain text. | +| Source Group | Select the source group (if any). | | +| Pause source on creation | Select if you want to make other configuration changes before data collection occurs. | | +| **Advanced settings** | | | +| Build Search Index | Select if you want search index to be created. | | +| Re-Index Period | Specify how often the source should be checked for changes. Default is **7** days. | Netwrix recommends using default values. | +| Priority | Set priority for this data source to be crawled. Select the priority level from the list values: | | +| Document Type | Specify a value which can be used to restrict queries when utilizing the Netwrix Data Classification search index. | | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserver.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md similarity index 87% rename from docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserver.md rename to docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md index 672ebb45df..b5d8a5d71e 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserver.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md @@ -1,30 +1,31 @@ --- -title: "Exchange Server" -description: "Exchange Server" +title: "Exchange Server (EWS)" +description: "Exchange Server (EWS)" sidebar_position: 40 --- # Exchange Server -Use the Exchange Server source configuration screen to enable the crawling and classification -of multiple Exchange mailboxes from the same Exchange server. +The Exchange Server (EWS) source configuration screen allows you to enable the crawling and classification +of multiple Exchange mailboxes from the same Exchange server using the Exchange Web services (EWS). -**IMPORTANT** Automatic detection, crawling, and classification of multiple Exchange mailboxes from +**IMPORTANT!** Automatic detection, crawling and classification of multiple Exchange mailboxes from the same Exchange server (and, respectively, _Exchange Server_ content source configuration) is only supported for Exchange Server 2013 or later due to limitations in the Microsoft APIs. For earlier versions, consider using _Exchange Mailbox_ content source. You can use Match Rules to include and exclude the certain mailboxes. -To configure an Exchange Server source, follow these steps. +Follow the steps to configure an Exchange Server (EWS) source. **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. -**Step 2 –** Select **Exchange** source type and in the properties window specify the necessary +**Step 2 –** Select **Exchange (EWS)** source type and in the properties window specify the necessary settings. -**Step 3 –** To display all settings, click the "wrench" icon next to **Settings**. +**Step 3 –** Remember to click the "wrench" icon next to **Settings** in the bottom-left corner to +display all settings. ## Authentication type: Modern authentication @@ -40,10 +41,10 @@ If you plan to use this authentication type, specify the following: | Option | Description | | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Authentication type | Select **Modern (Exchange Online)** | -| Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it to crawl Exchange. | +| Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it in order to crawl Exchange. | | Tenant ID | Enter the **Tenant ID** you obtained at [Step 5: Obtain Tenant ID](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-5-obtain-tenant-id). | | Certificate thumbprint | Enter the certificate thumbprint you prepared at [Step 4: Configure Certificates & secrets](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md). | -| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (you can find it in the Azure AD app properties >**Overview**). | +| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (it can be found in the Azure AD app properties >**Overview**). | ![exchangeonline_cfg_modern_auth_thumb_0_0](/images/dataclassification/5.7/admin/sources/exchangemailbox/exchangeonline_cfg_modern_auth_thumb_0_0.webp) @@ -61,7 +62,7 @@ The following settings are also required in both cases: | Option | Description | | ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Exchange API URL | By default, the crawling engine will attempt to locate the necessary URL of Exchange Web Services API by using the _Exchange AutoDiscover_ functionality. So, typically, you can leave this field blank. If, however, the _Exchange AutoDiscover_ isn't available, then you should specify the Exchange API URL explicitly as follows: `https:///EWS/Exchange.asmx`. | +| Exchange API URL | By default, the crawling engine will attempt to locate the necessary URL of Exchange Web Services API by using the _Exchange AutoDiscover_ functionality. So, typically, you can leave this field blank. If, however, the _Exchange AutoDiscover_ is not available, then you should specify the Exchange API URL explicitly as follows: `https:///EWS/Exchange.asmx`. | | Crawl Range | Define what portions of data should be retrieved from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each artifact.
| | Match Rules | Define which mailboxes will be crawled as part of an Exchange Server source. Examples: 1. `.*@netwrix.com`— enter the wildcard (\*) and the domain (here `netwrix.com`) to restrict crawling to a set of domain mailboxes 2. `.*`—enter if you want all mailboxes to be crawled | | Detection Period | Specify how often the source should be checked for changes. Default period is 1 day. | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md new file mode 100644 index 0000000000..4fdbddef3f --- /dev/null +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md @@ -0,0 +1,50 @@ +--- +title: "Exchange Server (Graph)" +description: "Exchange Server (Graph)" +sidebar_position: 40 +--- + +# Exchange Server (Graph) + +The Exchange Server (Graph) source configuration screen allows you to enable the crawling and classification +of multiple Exchange mailboxes from the same Exchange server. + +You can use Match Rules to include and exclude the certain mailboxes. + +Follow the steps to configure an Exchange Server source. + +**Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click +**Add**. + +**Step 2 –** Select **Exchange (Graph)** source type and in the properties window specify the necessary +settings. + +**Step 3 –** Remember to click the "wrench" icon next to **Settings** in the bottom-left corner to +display all settings. + +## Authentication + +You must specify the following: + +| Option | Description | +| ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it in order to crawl Exchange. | +| Tenant ID | Enter the **Tenant ID** you obtained at [Step 5: Obtain Tenant ID](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-5-obtain-tenant-id). | +| Certificate thumbprint | Enter the certificate thumbprint you prepared at [Step 4: Configure Certificates & secrets](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md). | +| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (it can be found in the Azure AD app properties >**Overview**). | + +![exchangeonline_cfg_modern_auth_thumb_0_0](/images/dataclassification/5.7/admin/sources/exchangemailbox/exchangeonline_cfg_modern_auth_thumb_0_0.webp) + +## Other configuration settings + +The following settings are also required: + +| Option | Description | +| ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | +| Cloud Environment | Select the Azure instance the Exchange Online server is hosted on. | +| Crawl Range | Define what portions of data should be retrieved from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each artifact.
| +| Match Rules | Define which mailboxes will be crawled as part of an Exchange Server source. Examples: 1. `.*@netwrix.com`— enter the wildcard (\*) and the domain (here `netwrix.com`) to restrict crawling to a set of domain mailboxes 2. `.*`—enter if you want all mailboxes to be crawled | +| Detection Period | Specify how often the source should be checked for changes. Default period is 1 day. | + + +Having specified all the necessary settings, click the **Save** button. diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md index c6a746c0fc..18fd8d3017 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md @@ -27,7 +27,7 @@ Complete the following fields: | Option | Description | | ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| SharePoint URL | The root of the site collections to be added, by clicking the “(Multiple Urls)” link you can add multiple SharePoint Online Site Collections to be crawled against the same credentials. | +| Cloud Environment | Select the Azure instance the Exchange Online server is hosted on. | | Username | Enter username in the following formats: DOMAIN\USERNAME and USERNAME@DOMAIN. | | Password | Enter your password for SharePoint Online. | | Match Rules | Enter the site collections' path for crawling the documents. At least one match rule must be included. Match rules are regular expressions, for example, https:\/\/example.sharepoint.com\/sites\/. | From acc1c2dd21ab802c58f0945c8660e88975b234ab Mon Sep 17 00:00:00 2001 From: Ben Hayman Date: Wed, 9 Sep 2026 12:23:33 +0100 Subject: [PATCH 2/7] Added service stop step to upgrade instructions --- docs/dataclassification/5.7/introduction/upgrade.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/dataclassification/5.7/introduction/upgrade.md b/docs/dataclassification/5.7/introduction/upgrade.md index 41f3381356..5353538806 100644 --- a/docs/dataclassification/5.7/introduction/upgrade.md +++ b/docs/dataclassification/5.7/introduction/upgrade.md @@ -31,6 +31,8 @@ Classification resides. If not, download it from Microsoft website: - Locate the folder containing index files (the default location is _C:\Program Files\Netwrix\Data Classification\Index_) and back it up. +**Step 4 -** Stop all NDC services. If upgrading a DQS Environment, make sure all services on all instances are stopped before upgrading any instance. If the services are running while the upgrade occurs, database schema updates may fail to apply correctly. If this occurs, Netwrix recommends contacting Netwrix Support for assistance with remediation. + :::note For versions of 5.7 before 5.7.10, all NDC services and the NDC IIS Application Pool had to run as the same service account. For 5.7.10 onwards this is no longer necessary, but if upgrading from an earlier version of 5.7, complete the upgrade to 5.7.10 _before_ changing the service account to prevent any possible issues with the upgrade process. ::: From 0389455f3682e0fa6e8f9fe5c01b37ff6b048e65 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Wed, 9 Sep 2026 11:42:11 +0000 Subject: [PATCH 3/7] fix(vale): auto-fix style issues (Vale + Dale) --- .../addsource/exchangemailboxews.md | 26 +++++------ .../addsource/exchangemailboxgraph.md | 24 +++++------ .../addsource/exchangeserverews.md | 43 ++++++++++--------- .../addsource/exchangeservergraph.md | 22 +++++----- .../addsource/sharepointonline.md | 16 +++---- .../5.7/introduction/upgrade.md | 22 +++++----- 6 files changed, 77 insertions(+), 76 deletions(-) diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md index e53aa9d5b0..43d830a113 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md @@ -6,7 +6,7 @@ sidebar_position: 30 # Exchange Mailbox -Use the **Exchange Mailbox (EWS)** source to enable the crawling and classification of content stored in a +Use the **Exchange Mailbox (EWS)** source to crawl and classify content stored in a single Exchange mailbox on the on-premises Exchange server or Exchange Online using the Exchange Web services (EWS). **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click @@ -26,34 +26,34 @@ specify the following: | Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it to crawl Exchange. | | Tenant ID | Enter the **Tenant ID** you obtained at [Step 5: Obtain Tenant ID](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-5-obtain-tenant-id). | | Certificate thumbprint | Enter the certificate thumbprint you prepared at [Step 4: Configure Certificates & secrets](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md). | -| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (it can be found in the Azure AD app properties >**Overview**). | +| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (you can find it in the Azure AD app properties >**Overview**). | ![exchangeonline_cfg_modern_auth_thumb_0_0](/images/dataclassification/5.7/admin/sources/exchangemailbox/exchangeonline_cfg_modern_auth_thumb_0_0.webp) ## Authentication type: Basic -If you plan to use this authentication type, you will need to specify the following: +To use this authentication type, specify the following: | Option | Description | Comments | | ------------------------ | ------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Email Address / Password | An **Administrator** account that has been assigned both: 1. **Impersonation** right 2. **Discovery Management** role | See [Configure Microsoft Exchange for Crawling and Classification](/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md) for details on the rights assignment. | +| Email Address / Password | An **Administrator** account with both: 1. **Impersonation** right 2. **Discovery Management** role | See [Configure Microsoft Exchange for Crawling and Classification](/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md) for details on the rights assignment. | ## Other configuration settings -By default, only basic settings are displayed. To view advanced options, click the "wrench" icon at +By default, only basic settings appear. To view advanced options, click the "wrench" icon at **Settings** in the bottom. | Option | Description | Comments | | ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Basic settings** | | | -| Mailbox | Mailbox to be crawled. | When using impersonation, the settings can be like the following example:
  • Email Address
  • administrative account granted Impersonation right, e.g. _administrator@cs.com_
  • Mailbox
  • target mailbox, e.g. _test@cs.com_.
| -| Crawl Range | Define the time period to be crawled:
  • Select **Date Range** to crawl a static set of data within the specified interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date onwards, taking into account the last crawl date for each object.
| | +| Mailbox | The mailbox to crawl. | When using impersonation, the settings can be like the following example:
  • Email Address
  • administrative account granted Impersonation right, e.g. _administrator@cs.com_
  • Mailbox
  • target mailbox, e.g. _test@cs.com_.
| +| Crawl Range | Define the time period to crawl:
  • Select **Date Range** to crawl a static set of data within the specified interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date onwards, taking into account the last crawl date for each object.
| | | Crawl In-Place Archive | Select this option if you want to crawl Exchange Online in-place archive mailboxes. | Applies to Exchange Online. | -| OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • document images will not be processed
  • **Default**
  • defaults to the global setting
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images do not contain text. | -| Source Group | Select the source group to add this source to (if any exist). If no source groups exist, a new source group will be automatically created | | +| OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • skip processing document images
  • **Default**
  • defaults to the global setting
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images don't contain text. | +| Source Group | Select the source group to add this source to (if any exist). If no source groups exist, Netwrix Data Classification automatically creates one | | | Pause source on creation | Select if you want to make other configuration changes before data collection occurs. | | | **Advanced settings** | | | -| Build Search Index | Select if you want search index to be created. | | -| Re-Index Period | Specify how often the source should be checked for changes. Default is **7** days. | Netwrix recommends using default values. | -| Priority | Set priority for this data source to be crawled. Select the priority level from the list values:
  • Highest
  • High
  • Normal
  • Low
  • Lowest
| | -| Document Type | Specify a value which can be used to restrict queries when utilizing the Netwrix Data Classification search index. | | +| Build Search Index | Select to create a search index. | | +| Re-Index Period | Specify how often to check the source for changes. Default is **7** days. | Netwrix recommends using default values. | +| Priority | Set the crawl priority for this data source. Select the priority level from the list values:
  • Highest
  • High
  • Normal
  • Low
  • Lowest
| | +| Document Type | Specify a value to restrict queries when using the Netwrix Data Classification search index. | | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md index 3be5f0bc5c..486acb7f5e 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md @@ -6,7 +6,7 @@ sidebar_position: 30 # Exchange Mailbox (Graph) -Use the **Exchange Mailbox (Graph)** source to enable the crawling and classification of content stored in a +Use the **Exchange Mailbox (Graph)** source to crawl and classify content stored in a single Exchange mailbox on Exchange Online. **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click @@ -21,30 +21,30 @@ You must specify the following: | Option | Description | | ---------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it in order to crawl Exchange. | +| Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it to crawl Exchange. | | Tenant ID | Enter the **Tenant ID** you obtained at [Step 5: Obtain Tenant ID](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-5-obtain-tenant-id). | | Certificate thumbprint | Enter the certificate thumbprint you prepared at [Step 4: Configure Certificates & secrets](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md). | -| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (it can be found in the Azure AD app properties >**Overview**). | +| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (you can find it in the Azure AD app properties >**Overview**). | ![exchangeonline_cfg_modern_auth_thumb_0_0](/images/dataclassification/5.7/admin/sources/exchangemailbox/exchangeonline_cfg_modern_auth_thumb_0_0.webp) ## Other configuration settings -By default, only basic settings are displayed. To view advanced options, click the "wrench" icon at +By default, only basic settings appear. To view advanced options, click the "wrench" icon at **Settings** in the bottom. | Option | Description | Comments | | ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Basic settings** | | | -| Cloud Environment | Select the Azure instance the Exchange Online server is hosted on. | | -| Mailbox | Mailbox to be crawled. | When using impersonation, the settings can be like the following example:
  • Email Address
  • administrative account granted Impersonation right, e.g. _administrator@cs.com_
  • Mailbox
  • target mailbox, e.g. _test@cs.com_.
| -| Crawl Range | Define what portions of data should be retrieved from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each object.
| | +| Cloud Environment | Select the Azure instance hosting the Exchange Online server. | | +| Mailbox | The mailbox to crawl. | When using impersonation, the settings can be like the following example:
  • Email Address
  • administrative account granted Impersonation right, e.g. _administrator@cs.com_
  • Mailbox
  • target mailbox, e.g. _test@cs.com_.
| +| Crawl Range | Define which portions of data to retrieve from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each object.
| | | Crawl In-Place Archive | Select this option if you want to crawl Exchange Online in-place archive mailboxes. | | -| OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • document images will not be processed
  • **Default**
  • defaults to the source setting (if configuring a path) or the global setting (if configured on a source)
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images do not contain text. | +| OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • skip processing document images
  • **Default**
  • defaults to the source setting (if configuring a path) or the global setting (if configured on a source)
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images don't contain text. | | Source Group | Select the source group (if any). | | | Pause source on creation | Select if you want to make other configuration changes before data collection occurs. | | | **Advanced settings** | | | -| Build Search Index | Select if you want search index to be created. | | -| Re-Index Period | Specify how often the source should be checked for changes. Default is **7** days. | Netwrix recommends using default values. | -| Priority | Set priority for this data source to be crawled. Select the priority level from the list values:
  • Highest
  • High
  • Normal
  • Low
  • Lowest
| | -| Document Type | Specify a value which can be used to restrict queries when utilizing the Netwrix Data Classification search index. | | +| Build Search Index | Select to create a search index. | | +| Re-Index Period | Specify how often to check the source for changes. Default is **7** days. | Netwrix recommends using default values. | +| Priority | Set the crawl priority for this data source. Select the priority level from the list values:
  • Highest
  • High
  • Normal
  • Low
  • Lowest
| | +| Document Type | Specify a value to restrict queries when using the Netwrix Data Classification search index. | | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md index b5d8a5d71e..5813230434 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md @@ -6,17 +6,19 @@ sidebar_position: 40 # Exchange Server -The Exchange Server (EWS) source configuration screen allows you to enable the crawling and classification -of multiple Exchange mailboxes from the same Exchange server using the Exchange Web services (EWS). - -**IMPORTANT!** Automatic detection, crawling and classification of multiple Exchange mailboxes from -the same Exchange server (and, respectively, _Exchange Server_ content source configuration) is only -supported for Exchange Server 2013 or later due to limitations in the Microsoft APIs. For earlier -versions, consider using _Exchange Mailbox_ content source. +Use the Exchange Server (EWS) source configuration screen to crawl and classify +multiple Exchange mailboxes from the same Exchange server using the Exchange Web services (EWS). + +:::warning +Automatic detection, crawling, and classification of multiple Exchange mailboxes from +the same Exchange server (and, respectively, the _Exchange Server_ content source configuration) works +only with Exchange Server 2013 or later, due to limitations in the Microsoft APIs. For earlier +versions, consider using the _Exchange Mailbox_ content source. +::: -You can use Match Rules to include and exclude the certain mailboxes. +You can use Match Rules to include or exclude specific mailboxes. -Follow the steps to configure an Exchange Server (EWS) source. +To configure an Exchange Server (EWS) source: **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. @@ -30,9 +32,8 @@ display all settings. ## Authentication type: Modern authentication :::note -For Email Address / Password, the Administrator account that has been assigned the right -of the Discovery Management role and be given the Mailbox Search and MailboxSearchApplication -permissions. +For Email Address / Password, use an Administrator account that has the Discovery Management +role and the Mailbox Search and MailboxSearchApplication permissions. ::: @@ -41,20 +42,20 @@ If you plan to use this authentication type, specify the following: | Option | Description | | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Authentication type | Select **Modern (Exchange Online)** | -| Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it in order to crawl Exchange. | +| Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it to crawl Exchange. | | Tenant ID | Enter the **Tenant ID** you obtained at [Step 5: Obtain Tenant ID](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-5-obtain-tenant-id). | | Certificate thumbprint | Enter the certificate thumbprint you prepared at [Step 4: Configure Certificates & secrets](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md). | -| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (it can be found in the Azure AD app properties >**Overview**). | +| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (you can find it in the Azure AD app properties >**Overview**). | ![exchangeonline_cfg_modern_auth_thumb_0_0](/images/dataclassification/5.7/admin/sources/exchangemailbox/exchangeonline_cfg_modern_auth_thumb_0_0.webp) ## Authentication type: Basic -If you plan to use this authentication type, you will need to specify the following: +To use this authentication type, specify the following: | Option | Description | | ------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Email Address / Password | Administrator account that has been assigned the right of Impersonation as well as the Discovery Management role. See [Configure Microsoft Exchange for Crawling and Classification](/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md) for details on the rights assignment. | +| Email Address / Password | Administrator account with the Impersonation right and the Discovery Management role. See [Configure Microsoft Exchange for Crawling and Classification](/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md) for details on the rights assignment. | ## Other configuration settings @@ -62,10 +63,10 @@ The following settings are also required in both cases: | Option | Description | | ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Exchange API URL | By default, the crawling engine will attempt to locate the necessary URL of Exchange Web Services API by using the _Exchange AutoDiscover_ functionality. So, typically, you can leave this field blank. If, however, the _Exchange AutoDiscover_ is not available, then you should specify the Exchange API URL explicitly as follows: `https:///EWS/Exchange.asmx`. | -| Crawl Range | Define what portions of data should be retrieved from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each artifact.
| -| Match Rules | Define which mailboxes will be crawled as part of an Exchange Server source. Examples: 1. `.*@netwrix.com`— enter the wildcard (\*) and the domain (here `netwrix.com`) to restrict crawling to a set of domain mailboxes 2. `.*`—enter if you want all mailboxes to be crawled | -| Detection Period | Specify how often the source should be checked for changes. Default period is 1 day. | +| Exchange API URL | By default, the crawling engine uses the _Exchange AutoDiscover_ functionality to locate the Exchange Web Services API URL, so you can typically leave this field blank. If _Exchange AutoDiscover_ isn't available, specify the Exchange API URL explicitly: `https:///EWS/Exchange.asmx`. | +| Crawl Range | Define which portions of data to retrieve from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each artifact.
| +| Match Rules | Define which mailboxes to crawl as part of an Exchange Server source. Examples: 1. `.*@netwrix.com`— enter the wildcard (\*) and the domain (here `netwrix.com`) to restrict crawling to a set of domain mailboxes 2. `.*`—enter to crawl all mailboxes | +| Detection Period | Specify how often to check the source for changes. Default period is 1 day. | -Having specified all the necessary settings, click the **Save** button. +After specifying all the necessary settings, click **Save**. diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md index 4fdbddef3f..9ed740f36b 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md @@ -6,12 +6,12 @@ sidebar_position: 40 # Exchange Server (Graph) -The Exchange Server (Graph) source configuration screen allows you to enable the crawling and classification -of multiple Exchange mailboxes from the same Exchange server. +Use the Exchange Server (Graph) source configuration screen to crawl and classify +multiple Exchange mailboxes from the same Exchange server. -You can use Match Rules to include and exclude the certain mailboxes. +You can use Match Rules to include or exclude specific mailboxes. -Follow the steps to configure an Exchange Server source. +To configure an Exchange Server (Graph) source: **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. @@ -28,10 +28,10 @@ You must specify the following: | Option | Description | | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it in order to crawl Exchange. | +| Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it to crawl Exchange. | | Tenant ID | Enter the **Tenant ID** you obtained at [Step 5: Obtain Tenant ID](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-5-obtain-tenant-id). | | Certificate thumbprint | Enter the certificate thumbprint you prepared at [Step 4: Configure Certificates & secrets](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md). | -| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (it can be found in the Azure AD app properties >**Overview**). | +| Application ID | Enter the app ID you got at application registration at [Step 2: Create and Register a new app in Azure AD](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-2-create-and-register-a-new-app-in-azure-ad) (you can find it in the Azure AD app properties >**Overview**). | ![exchangeonline_cfg_modern_auth_thumb_0_0](/images/dataclassification/5.7/admin/sources/exchangemailbox/exchangeonline_cfg_modern_auth_thumb_0_0.webp) @@ -41,10 +41,10 @@ The following settings are also required: | Option | Description | | ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Cloud Environment | Select the Azure instance the Exchange Online server is hosted on. | -| Crawl Range | Define what portions of data should be retrieved from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each artifact.
| -| Match Rules | Define which mailboxes will be crawled as part of an Exchange Server source. Examples: 1. `.*@netwrix.com`— enter the wildcard (\*) and the domain (here `netwrix.com`) to restrict crawling to a set of domain mailboxes 2. `.*`—enter if you want all mailboxes to be crawled | -| Detection Period | Specify how often the source should be checked for changes. Default period is 1 day. | +| Cloud Environment | Select the Azure instance hosting the Exchange Online server. | +| Crawl Range | Define which portions of data to retrieve from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each artifact.
| +| Match Rules | Define which mailboxes to crawl as part of an Exchange Server source. Examples: 1. `.*@netwrix.com`— enter the wildcard (\*) and the domain (here `netwrix.com`) to restrict crawling to a set of domain mailboxes 2. `.*`—enter to crawl all mailboxes | +| Detection Period | Specify how often to check the source for changes. Default period is 1 day. | -Having specified all the necessary settings, click the **Save** button. +After specifying all the necessary settings, click **Save**. diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md index 18fd8d3017..77229d10c3 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md @@ -7,13 +7,13 @@ sidebar_position: 100 # SharePoint Online Office 365 customers can configure the collector service to automatically detect and queue their -employees SharePoint Online sites hosted in Office 365. An account with Tenant administration rights -must be supplied, and the frequency of the detection of new SharePoint Online sites must be set. It -is also possible to provide a filter expression to ensure that certain SharePoint Online paths are -included and others excluded as required. +employees SharePoint Online sites hosted in Office 365. You must supply an account with Tenant +administration rights and set how often the service detects new SharePoint Online sites. You can +also provide a filter expression to include certain SharePoint Online paths and exclude others as +required. -Optionally, you can set up the resources necessary to ensure Netwrix Data -Classification is enabled and configured on the detected SharePoint Online sites. Templating allows +Optionally, you can set up the resources needed to enable and configure Netwrix Data +Classification on the detected SharePoint Online sites. Templating allows an administrator to preconfigure classification settings for site collections. For more information, review the associated templating guide. @@ -27,10 +27,10 @@ Complete the following fields: | Option | Description | | ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Cloud Environment | Select the Azure instance the Exchange Online server is hosted on. | +| Cloud Environment | Select the Azure instance hosting the Exchange Online server. | | Username | Enter username in the following formats: DOMAIN\USERNAME and USERNAME@DOMAIN. | | Password | Enter your password for SharePoint Online. | -| Match Rules | Enter the site collections' path for crawling the documents. At least one match rule must be included. Match rules are regular expressions, for example, https:\/\/example.sharepoint.com\/sites\/. | +| Match Rules | Enter the site collections' path for crawling the documents. You must include at least one match rule. Match rules are regular expressions, for example, https:\/\/example.sharepoint.com\/sites\/. | | Classification template | Specify the required Classification template for writing classifications. See the [Enable Write Classifications](/docs/dataclassification/5.7/contentconfigurationoverview/taxonomies/enablewriteclassifications.md) and [Working with SharePoint templates](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/manage/introduction/workwithtemplates.md) topics for more information. | | Detection Period | Specify how often you will detect new site collections. Default period is 1 day. | diff --git a/docs/dataclassification/5.7/introduction/upgrade.md b/docs/dataclassification/5.7/introduction/upgrade.md index 5353538806..3fb5b4f284 100644 --- a/docs/dataclassification/5.7/introduction/upgrade.md +++ b/docs/dataclassification/5.7/introduction/upgrade.md @@ -31,39 +31,39 @@ Classification resides. If not, download it from Microsoft website: - Locate the folder containing index files (the default location is _C:\Program Files\Netwrix\Data Classification\Index_) and back it up. -**Step 4 -** Stop all NDC services. If upgrading a DQS Environment, make sure all services on all instances are stopped before upgrading any instance. If the services are running while the upgrade occurs, database schema updates may fail to apply correctly. If this occurs, Netwrix recommends contacting Netwrix Support for assistance with remediation. +**Step 4 -** Stop all NDC services. If upgrading a Distributed Query Server (DQS) environment, stop all services on all instances before upgrading any instance. If the services are running while the upgrade occurs, database schema updates may fail to apply correctly. If this occurs, Netwrix recommends contacting Netwrix Support for help. :::note -For versions of 5.7 before 5.7.10, all NDC services and the NDC IIS Application Pool had to run as the same service account. For 5.7.10 onwards this is no longer necessary, but if upgrading from an earlier version of 5.7, complete the upgrade to 5.7.10 _before_ changing the service account to prevent any possible issues with the upgrade process. +For versions of 5.7 before 5.7.10, all NDC services and the NDC IIS Application Pool had to run as the same service account. For 5.7.10 onwards this is no longer necessary, but if upgrading from an earlier version of 5.7, complete the upgrade to 5.7.10 _before_ changing the service account to avoid upgrade issues. ::: ## Upgrade Process You can upgrade directly to Netwrix Data Classification 5.7 only from versions 5.5 and newer. -To upgrade your deployment, after taking the preceding preparatory steps, run the product -setup and follow the wizard steps. When finished, all solution components will be running. +After taking the preceding preparatory steps, run the product setup and follow the wizard +steps. When the upgrade finishes, all solution components are running. -If you need to upgrade from an earlier version, you will need to perform a staged upgrade: first upgrade -to version 5.5, then perform a second upgrade to version 5.7. +To upgrade from an earlier version, perform a staged upgrade: first upgrade to version 5.5, then +upgrade to version 5.7. ## Upgrading a DQS Environment When upgrading an NDC environment which uses the **Distributed Query Server** (DQS) functionality to 5.7.10 or later, -the primary server must be upgraded before upgrading the secondary instances. Secondary instances will -attempt to resynchronize with the primary instance during the upgrade process, which will fail if the primary -instance has not been upgraded. +upgrade the primary server before the secondary instances. Secondary instances +attempt to resynchronize with the primary instance during the upgrade process, which fails if you haven't +upgraded the primary instance. When upgrading to 5.7.10 or later from an earlier version of 5.7, you should run the installer as the NDC service account if possible so that the installer can synchronize the DQS instances automatically. -If this isn't done, you will need to perform a DQS resynchronization when upgrading each secondary DQS instance. For further details on this process, +If you don't, you must resynchronize DQS when upgrading each secondary DQS instance. For further details on this process, see the [Configuring NDC Servers Cluster and Load Balancing with DQS Mode](/docs/dataclassification/5.7/introduction/deployment/ndcserverandclient/dqsmode.md) page. ## After the Upgrade During the upgrade from previous versions, Netwrix Data Classification preserves its configuration, so you can classify your data right after finishing the upgrade. However, -there are several steps you may need to take after upgrading. +you may need to take several steps after upgrading. To update taxonomies manually: From 8c85f4d86fcd63a6614b0a4c07c3d318fdc0f9e3 Mon Sep 17 00:00:00 2001 From: Ben Hayman Date: Wed, 9 Sep 2026 13:43:29 +0100 Subject: [PATCH 4/7] Suggested docs improvements --- .../addsource/exchangemailboxews.md | 6 +++--- .../addsource/exchangemailboxgraph.md | 6 +++--- .../introduction/addsource/exchangeserverews.md | 17 ++++++++--------- .../addsource/exchangeservergraph.md | 11 +++++------ .../introduction/addsource/sharepointonline.md | 3 ++- .../5.7/introduction/upgrade.md | 10 +++++++++- 6 files changed, 30 insertions(+), 23 deletions(-) diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md index 43d830a113..1cdbcef5de 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md @@ -4,7 +4,7 @@ description: "Exchange Mailbox (EWS)" sidebar_position: 30 --- -# Exchange Mailbox +# Exchange Mailbox (EWS) Use the **Exchange Mailbox (EWS)** source to crawl and classify content stored in a single Exchange mailbox on the on-premises Exchange server or Exchange Online using the Exchange Web services (EWS). @@ -49,8 +49,8 @@ By default, only basic settings appear. To view advanced options, click the "wre | Mailbox | The mailbox to crawl. | When using impersonation, the settings can be like the following example:
  • Email Address
  • administrative account granted Impersonation right, e.g. _administrator@cs.com_
  • Mailbox
  • target mailbox, e.g. _test@cs.com_.
| | Crawl Range | Define the time period to crawl:
  • Select **Date Range** to crawl a static set of data within the specified interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date onwards, taking into account the last crawl date for each object.
| | | Crawl In-Place Archive | Select this option if you want to crawl Exchange Online in-place archive mailboxes. | Applies to Exchange Online. | -| OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • skip processing document images
  • **Default**
  • defaults to the global setting
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images don't contain text. | -| Source Group | Select the source group to add this source to (if any exist). If no source groups exist, Netwrix Data Classification automatically creates one | | +| OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • document images will not be processed
  • **Default**
  • defaults to the global setting
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images do not contain text. | +| Source Group | Select the source group to add this source to. If no source groups exist, the product creates one automatically, named after the source. | | | Pause source on creation | Select if you want to make other configuration changes before data collection occurs. | | | **Advanced settings** | | | | Build Search Index | Select to create a search index. | | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md index 486acb7f5e..0e855c6cd1 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md @@ -1,13 +1,13 @@ --- title: "Exchange Mailbox (Graph)" description: "Exchange Mailbox (Graph)" -sidebar_position: 30 +sidebar_position: 35 --- # Exchange Mailbox (Graph) Use the **Exchange Mailbox (Graph)** source to crawl and classify content stored in a -single Exchange mailbox on Exchange Online. +single Exchange mailbox on Exchange Online. Use this source type for Exchange Online mailboxes. For on-premises Exchange mailboxes, use Exchange Mailbox (EWS). **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. @@ -37,7 +37,7 @@ By default, only basic settings appear. To view advanced options, click the "wre | ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Basic settings** | | | | Cloud Environment | Select the Azure instance hosting the Exchange Online server. | | -| Mailbox | The mailbox to crawl. | When using impersonation, the settings can be like the following example:
  • Email Address
  • administrative account granted Impersonation right, e.g. _administrator@cs.com_
  • Mailbox
  • target mailbox, e.g. _test@cs.com_.
| +| Mailbox | The mailbox to crawl. | E.g. _test@cs.com_. | | Crawl Range | Define which portions of data to retrieve from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each object.
| | | Crawl In-Place Archive | Select this option if you want to crawl Exchange Online in-place archive mailboxes. | | | OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • skip processing document images
  • **Default**
  • defaults to the source setting (if configuring a path) or the global setting (if configured on a source)
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images don't contain text. | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md index 5813230434..0f0330982b 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md @@ -4,30 +4,29 @@ description: "Exchange Server (EWS)" sidebar_position: 40 --- -# Exchange Server +# Exchange Server (EWS) Use the Exchange Server (EWS) source configuration screen to crawl and classify -multiple Exchange mailboxes from the same Exchange server using the Exchange Web services (EWS). +multiple Exchange mailboxes from the same Exchange server using the Exchange Web Services (EWS). :::warning Automatic detection, crawling, and classification of multiple Exchange mailboxes from -the same Exchange server (and, respectively, the _Exchange Server_ content source configuration) works +the same Exchange server (and, respectively, the _Exchange Server (EWS)_ content source configuration) works only with Exchange Server 2013 or later, due to limitations in the Microsoft APIs. For earlier -versions, consider using the _Exchange Mailbox_ content source. +versions, consider using the _Exchange Mailbox (EWS)_ content source. ::: You can use Match Rules to include or exclude specific mailboxes. -To configure an Exchange Server (EWS) source: +To configure an Exchange Server (EWS) source, follow these steps. **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. -**Step 2 –** Select **Exchange (EWS)** source type and in the properties window specify the necessary +**Step 2 –** Select the **Exchange Server (EWS)** source type and in the properties window specify the necessary settings. -**Step 3 –** Remember to click the "wrench" icon next to **Settings** in the bottom-left corner to -display all settings. +**Step 3 –** To display all settings, click the 'wrench' icon next to Settings in the bottom-left corner. ## Authentication type: Modern authentication @@ -41,7 +40,7 @@ If you plan to use this authentication type, specify the following: | Option | Description | | ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -| Authentication type | Select **Modern (Exchange Online)** | +| Authentication type | Select **Modern (O365)** | | Admin Username | Specify the administrative account for the required Exchange Online organization. The user must have a mailbox connected to it to crawl Exchange. | | Tenant ID | Enter the **Tenant ID** you obtained at [Step 5: Obtain Tenant ID](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md#step-5-obtain-tenant-id). | | Certificate thumbprint | Enter the certificate thumbprint you prepared at [Step 4: Configure Certificates & secrets](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md). | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md index 9ed740f36b..a3d50d8c78 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md @@ -1,17 +1,17 @@ --- title: "Exchange Server (Graph)" description: "Exchange Server (Graph)" -sidebar_position: 40 +sidebar_position: 45 --- # Exchange Server (Graph) Use the Exchange Server (Graph) source configuration screen to crawl and classify -multiple Exchange mailboxes from the same Exchange server. +multiple Exchange mailboxes from the same Exchange server. The Graph source type applies to Exchange Online only. To crawl mailboxes on an on-premises Exchange server, use Exchange Server (EWS). You can use Match Rules to include or exclude specific mailboxes. -To configure an Exchange Server (Graph) source: +To configure an Exchange Server (Graph) source, follow these steps. **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. @@ -19,10 +19,9 @@ To configure an Exchange Server (Graph) source: **Step 2 –** Select **Exchange (Graph)** source type and in the properties window specify the necessary settings. -**Step 3 –** Remember to click the "wrench" icon next to **Settings** in the bottom-left corner to -display all settings. +**Step 3 –** To display all settings, click the 'wrench' icon next to Settings in the bottom-left corner. -## Authentication +## Authentication You must specify the following: diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md index 77229d10c3..a659bca030 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md @@ -27,7 +27,8 @@ Complete the following fields: | Option | Description | | ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Cloud Environment | Select the Azure instance hosting the Exchange Online server. | +| SharePoint URL | The root of the site collections to be added, by clicking the “(Multiple Urls)” link you can add multiple SharePoint Online Site Collections to be crawled against the same credentials. | +| Cloud Environment | Select the Azure instance hosting the SharePoint Online server. | | Username | Enter username in the following formats: DOMAIN\USERNAME and USERNAME@DOMAIN. | | Password | Enter your password for SharePoint Online. | | Match Rules | Enter the site collections' path for crawling the documents. You must include at least one match rule. Match rules are regular expressions, for example, https:\/\/example.sharepoint.com\/sites\/. | diff --git a/docs/dataclassification/5.7/introduction/upgrade.md b/docs/dataclassification/5.7/introduction/upgrade.md index 3fb5b4f284..d77105f3f0 100644 --- a/docs/dataclassification/5.7/introduction/upgrade.md +++ b/docs/dataclassification/5.7/introduction/upgrade.md @@ -24,10 +24,18 @@ Classification resides. If not, download it from Microsoft website: - In the Object Explorer, right-click the database and select **Tasks** > **Back Up**. - Wait for the process to complete. -**Step 3 –** Back up the Index files. Netwrix recommends the following: +**Step 3 –** Stop all NDC services. Netwrix recommends the following: - On the computer where Netwrix Data Classification is installed, start the Netwrix Data Classification Service Viewer tool. Select **Stop** next to each service. +- If upgrading a Distributed Query Server (DQS) environment, make sure all services on all instances are stopped before upgrading any instance. + +:::warning +If any services are running while the upgrade occurs, database schema updates may fail to apply correctly. If this occurs, Netwrix recommends contacting Netwrix Support for assistance with remediation. +::: + +**Step 4 –** Back up the Index files. Netwrix recommends the following: + - Locate the folder containing index files (the default location is _C:\Program Files\Netwrix\Data Classification\Index_) and back it up. From 36be8b713260d0082849a5285984a6485369af23 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Wed, 9 Sep 2026 12:49:45 +0000 Subject: [PATCH 5/7] fix(vale): auto-fix style issues (Vale + Dale) --- .../introduction/addsource/exchangemailboxews.md | 4 ++-- .../introduction/addsource/exchangemailboxgraph.md | 2 +- .../introduction/addsource/sharepointonline.md | 4 ++-- docs/dataclassification/5.7/introduction/upgrade.md | 6 +++--- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md index 1cdbcef5de..f3ce02ba06 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md @@ -46,10 +46,10 @@ By default, only basic settings appear. To view advanced options, click the "wre | Option | Description | Comments | | ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Basic settings** | | | -| Mailbox | The mailbox to crawl. | When using impersonation, the settings can be like the following example:
  • Email Address
  • administrative account granted Impersonation right, e.g. _administrator@cs.com_
  • Mailbox
  • target mailbox, e.g. _test@cs.com_.
| +| Mailbox | The mailbox to crawl. | When you use impersonation, the settings can be like the following example:
  • Email Address
  • administrative account granted Impersonation right, e.g. _administrator@cs.com_
  • Mailbox
  • target mailbox, e.g. _test@cs.com_.
| | Crawl Range | Define the time period to crawl:
  • Select **Date Range** to crawl a static set of data within the specified interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date onwards, taking into account the last crawl date for each object.
| | | Crawl In-Place Archive | Select this option if you want to crawl Exchange Online in-place archive mailboxes. | Applies to Exchange Online. | -| OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • document images will not be processed
  • **Default**
  • defaults to the global setting
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images do not contain text. | +| OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • skip processing document images
  • **Default**
  • defaults to the global setting
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images don't contain text. | | Source Group | Select the source group to add this source to. If no source groups exist, the product creates one automatically, named after the source. | | | Pause source on creation | Select if you want to make other configuration changes before data collection occurs. | | | **Advanced settings** | | | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md index 0e855c6cd1..633153c7c6 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md @@ -7,7 +7,7 @@ sidebar_position: 35 # Exchange Mailbox (Graph) Use the **Exchange Mailbox (Graph)** source to crawl and classify content stored in a -single Exchange mailbox on Exchange Online. Use this source type for Exchange Online mailboxes. For on-premises Exchange mailboxes, use Exchange Mailbox (EWS). +single Exchange mailbox on Exchange Online. For on-premises Exchange mailboxes, use Exchange Mailbox (EWS). **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md index a659bca030..32fd127cfa 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md @@ -27,12 +27,12 @@ Complete the following fields: | Option | Description | | ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| SharePoint URL | The root of the site collections to be added, by clicking the “(Multiple Urls)” link you can add multiple SharePoint Online Site Collections to be crawled against the same credentials. | +| SharePoint URL | The root of the site collections to add. Click the “(Multiple Urls)” link to add multiple SharePoint Online Site Collections that use the same credentials for crawling. | | Cloud Environment | Select the Azure instance hosting the SharePoint Online server. | | Username | Enter username in the following formats: DOMAIN\USERNAME and USERNAME@DOMAIN. | | Password | Enter your password for SharePoint Online. | | Match Rules | Enter the site collections' path for crawling the documents. You must include at least one match rule. Match rules are regular expressions, for example, https:\/\/example.sharepoint.com\/sites\/. | | Classification template | Specify the required Classification template for writing classifications. See the [Enable Write Classifications](/docs/dataclassification/5.7/contentconfigurationoverview/taxonomies/enablewriteclassifications.md) and [Working with SharePoint templates](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/manage/introduction/workwithtemplates.md) topics for more information. | -| Detection Period | Specify how often you will detect new site collections. Default period is 1 day. | +| Detection Period | Specify how often to detect new site collections. Default period is 1 day. | After configuring the settings, click the **Save** button. diff --git a/docs/dataclassification/5.7/introduction/upgrade.md b/docs/dataclassification/5.7/introduction/upgrade.md index d77105f3f0..7667eee852 100644 --- a/docs/dataclassification/5.7/introduction/upgrade.md +++ b/docs/dataclassification/5.7/introduction/upgrade.md @@ -28,7 +28,7 @@ Classification resides. If not, download it from Microsoft website: - On the computer where Netwrix Data Classification is installed, start the Netwrix Data Classification Service Viewer tool. Select **Stop** next to each service. -- If upgrading a Distributed Query Server (DQS) environment, make sure all services on all instances are stopped before upgrading any instance. +- If upgrading a Distributed Query Server (DQS) environment, stop all services on all instances before upgrading any instance. :::warning If any services are running while the upgrade occurs, database schema updates may fail to apply correctly. If this occurs, Netwrix recommends contacting Netwrix Support for assistance with remediation. @@ -59,8 +59,8 @@ upgrade to version 5.7. When upgrading an NDC environment which uses the **Distributed Query Server** (DQS) functionality to 5.7.10 or later, upgrade the primary server before the secondary instances. Secondary instances -attempt to resynchronize with the primary instance during the upgrade process, which fails if you haven't -upgraded the primary instance. +attempt to resynchronize with the primary instance during the upgrade process, and this resynchronization +fails if you haven't upgraded the primary instance. When upgrading to 5.7.10 or later from an earlier version of 5.7, you should run the installer as the NDC service account if possible so that the installer can synchronize the DQS instances automatically. From c7afebf58d6b064040f4e9a51f66015afe05ebb7 Mon Sep 17 00:00:00 2001 From: Ben Hayman Date: Fri, 11 Sep 2026 14:47:47 +0100 Subject: [PATCH 6/7] Recommended docs updates --- .../introduction/addsource/addsource.md | 6 ++-- .../addsource/exchangemailboxews.md | 4 ++- .../addsource/exchangemailboxgraph.md | 13 ++++----- .../addsource/exchangeserverews.md | 15 +++++----- .../addsource/exchangeservergraph.md | 14 ++++----- .../addsource/sharepointonline.md | 6 ++-- .../introduction/exchange/exchange.md | 29 ++++++++++--------- .../5.7/introduction/upgrade.md | 6 +--- 8 files changed, 48 insertions(+), 45 deletions(-) diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addsource.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addsource.md index 05a22e0b35..2c8a65a6c0 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addsource.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addsource.md @@ -23,8 +23,10 @@ the sources: - [Add Single Database](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addsingledatabase/addsingledatabase.md) (Microsoft SQL Server, MySQL, PostgreSQL, or Oracle database) - [Add SQL Server](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addsqlserversource/addsqlserversource.md) (All Microsoft SQL Server, MySQL, PostgreSQL, or Oracle databases on a server) - [Dropbox](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/adddropbox.md) -- [Exchange Server](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserver.md) or - [Exchange Mailbox](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailbox.md) +- [Exchange Server (EWS)](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md) or + [Exchange Mailbox (EWS)](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md) +- [Exchange Server (Graph)](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md) or + [Exchange Mailbox (Graph)](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md) - [File System](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/overview.md) (includes Folder and File) - [Google Drive Source](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addgdsource.md) - [Outlook Mail Archive](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/outlookmailarchive.md) diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md index f3ce02ba06..b406fed0a9 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md @@ -7,7 +7,9 @@ sidebar_position: 30 # Exchange Mailbox (EWS) Use the **Exchange Mailbox (EWS)** source to crawl and classify content stored in a -single Exchange mailbox on the on-premises Exchange server or Exchange Online using the Exchange Web services (EWS). +single Exchange mailbox on an on-premises Exchange server or in Exchange Online using the Exchange Web Services (EWS). +Due to the imminent deprecation of EWS for connecting to Exchange Online, Netwrix recommends using [Exchange Mailbox (Graph)](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md) +for any new sources intended to crawl Exchange Online mailboxes. **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md index 633153c7c6..eb242e8557 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxgraph.md @@ -6,8 +6,7 @@ sidebar_position: 35 # Exchange Mailbox (Graph) -Use the **Exchange Mailbox (Graph)** source to crawl and classify content stored in a -single Exchange mailbox on Exchange Online. For on-premises Exchange mailboxes, use Exchange Mailbox (EWS). +Use the Exchange Mailbox (Graph) source to crawl and classify content stored in a single Exchange Online mailbox using the Microsoft Graph API. For on-premises Exchange mailboxes, [Exchange Mailbox (EWS)](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangemailboxews.md). **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. @@ -15,7 +14,7 @@ single Exchange mailbox on Exchange Online. For on-premises Exchange mailboxes, **Step 2 –** Select **Exchange Mailbox (Graph)** source type and in the properties window specify the necessary settings. -## Authentication +## Authentication You must specify the following: @@ -36,12 +35,12 @@ By default, only basic settings appear. To view advanced options, click the "wre | Option | Description | Comments | | ------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Basic settings** | | | -| Cloud Environment | Select the Azure instance hosting the Exchange Online server. | | +| Cloud Environment | Select the Azure instance hosting the Exchange Online server. | | | Mailbox | The mailbox to crawl. | E.g. _test@cs.com_. | -| Crawl Range | Define which portions of data to retrieve from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each object.
| | +| Crawl Range | Define the time period to crawl:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each object.
| | | Crawl In-Place Archive | Select this option if you want to crawl Exchange Online in-place archive mailboxes. | | -| OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • skip processing document images
  • **Default**
  • defaults to the source setting (if configuring a path) or the global setting (if configured on a source)
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images don't contain text. | -| Source Group | Select the source group (if any). | | +| OCR Processing Mode | Set the processing mode for document images:
  • **Disabled**
  • skip processing document images
  • **Default**
  • defaults to the global setting
  • **Normal**
  • process the images with normal quality settings
  • **Enhanced**
  • upscale the images further to allow more accurate results.
| The **Enhanced** mode will provide better accuracy but can lead to longer processing time if the images don't contain text. | +| Source Group | Select the source group to add this source to. If no source groups exist, the product creates one automatically, named after the source. | | | Pause source on creation | Select if you want to make other configuration changes before data collection occurs. | | | **Advanced settings** | | | | Build Search Index | Select to create a search index. | | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md index 0f0330982b..5ea08e4e63 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md @@ -7,9 +7,9 @@ sidebar_position: 40 # Exchange Server (EWS) Use the Exchange Server (EWS) source configuration screen to crawl and classify -multiple Exchange mailboxes from the same Exchange server using the Exchange Web Services (EWS). +multiple Exchange mailboxes from the same Exchange server, using the Exchange Web Services (EWS). -:::warning +:::note Automatic detection, crawling, and classification of multiple Exchange mailboxes from the same Exchange server (and, respectively, the _Exchange Server (EWS)_ content source configuration) works only with Exchange Server 2013 or later, due to limitations in the Microsoft APIs. For earlier @@ -26,14 +26,10 @@ To configure an Exchange Server (EWS) source, follow these steps. **Step 2 –** Select the **Exchange Server (EWS)** source type and in the properties window specify the necessary settings. -**Step 3 –** To display all settings, click the 'wrench' icon next to Settings in the bottom-left corner. +**Step 3 –** To display all settings, click the "wrench" icon next to Settings in the bottom-left corner. ## Authentication type: Modern authentication -:::note -For Email Address / Password, use an Administrator account that has the Discovery Management -role and the Mailbox Search and MailboxSearchApplication permissions. -::: If you plan to use this authentication type, specify the following: @@ -50,6 +46,11 @@ If you plan to use this authentication type, specify the following: ## Authentication type: Basic +:::note +For Email Address / Password, use an Administrator account that has the Discovery Management +role and the Mailbox Search and MailboxSearchApplication permissions. +::: + To use this authentication type, specify the following: | Option | Description | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md index a3d50d8c78..4bf1884e90 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md @@ -7,7 +7,7 @@ sidebar_position: 45 # Exchange Server (Graph) Use the Exchange Server (Graph) source configuration screen to crawl and classify -multiple Exchange mailboxes from the same Exchange server. The Graph source type applies to Exchange Online only. To crawl mailboxes on an on-premises Exchange server, use Exchange Server (EWS). +multiple Exchange mailboxes in the same tenant. The Graph source type can only be used to connect to Exchange Online. To crawl mailboxes on an on-premises Exchange server, use Exchange Server (EWS). You can use Match Rules to include or exclude specific mailboxes. @@ -16,10 +16,10 @@ To configure an Exchange Server (Graph) source, follow these steps. **Step 1 –** In Netwrix Data Classification management console, open the **Sources** view and click **Add**. -**Step 2 –** Select **Exchange (Graph)** source type and in the properties window specify the necessary +**Step 2 –** Select **Exchange Server (Graph)** source type and in the properties window specify the necessary settings. -**Step 3 –** To display all settings, click the 'wrench' icon next to Settings in the bottom-left corner. +**Step 3 –** To display all settings, click the "wrench" icon next to Settings in the bottom-left corner. ## Authentication @@ -36,13 +36,13 @@ You must specify the following: ## Other configuration settings -The following settings are also required: +Specify the following settings: | Option | Description | | ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| Cloud Environment | Select the Azure instance hosting the Exchange Online server. | -| Crawl Range | Define which portions of data to retrieve from the Exchange server:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each artifact.
| -| Match Rules | Define which mailboxes to crawl as part of an Exchange Server source. Examples: 1. `.*@netwrix.com`— enter the wildcard (\*) and the domain (here `netwrix.com`) to restrict crawling to a set of domain mailboxes 2. `.*`—enter to crawl all mailboxes | +| Cloud Environment | Select the Azure instance hosting the Exchange Online tenancy. | +| Crawl Range | Define which portions of data to retrieve from Exchange Online:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each artifact.
| +| Match Rules | Define rules with wildcards to limit which mailboxes are crawled. Examples: 1. `.*@netwrix.com`— enter the wildcard (\*) and the domain (here `netwrix.com`) to restrict crawling to a set of domain mailboxes 2. `.*`—enter to crawl all mailboxes. You must define at least one match rule. | | Detection Period | Specify how often to check the source for changes. Default period is 1 day. | diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md index 32fd127cfa..3748bef373 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/sharepointonline.md @@ -6,8 +6,8 @@ sidebar_position: 100 # SharePoint Online -Office 365 customers can configure the collector service to automatically detect and queue their -employees SharePoint Online sites hosted in Office 365. You must supply an account with Tenant +If you are an Office 365 customer, you can configure the collector service to automatically detect and queue your +employees' SharePoint Online sites hosted in Office 365. You must supply an account with Tenant administration rights and set how often the service detects new SharePoint Online sites. You can also provide a filter expression to include certain SharePoint Online paths and exclude others as required. @@ -28,7 +28,7 @@ Complete the following fields: | Option | Description | | ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | SharePoint URL | The root of the site collections to add. Click the “(Multiple Urls)” link to add multiple SharePoint Online Site Collections that use the same credentials for crawling. | -| Cloud Environment | Select the Azure instance hosting the SharePoint Online server. | +| Cloud Environment | Select the Azure instance that hosts your SharePoint Online tenant. | | Username | Enter username in the following formats: DOMAIN\USERNAME and USERNAME@DOMAIN. | | Password | Enter your password for SharePoint Online. | | Match Rules | Enter the site collections' path for crawling the documents. You must include at least one match rule. Match rules are regular expressions, for example, https:\/\/example.sharepoint.com\/sites\/. | diff --git a/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md b/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md index 879a987ab8..4f97f356c7 100644 --- a/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md +++ b/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md @@ -9,12 +9,12 @@ sidebar_position: 30 When preparing your Exchange Server for data classification: :::note -On-premise Exchange servers support Basic authentication for crawling accounts, while Exchange Online supports either Modern or Basic authentication. The following sections describe both scenarios. +On-premise Exchange servers support Basic authentication for crawling accounts, while Exchange Online requires Modern authentication. The following sections describe both scenarios. ::: ## Basic Authentication -This method is supported for Exchange Online and on-premise Exchange organizations. You should +This method is supported for on-premise Exchange servers. You should configure sufficient permissions that will allow the crawling account to impersonate the mailboxes that you want to crawl. This requires the setup of two permissions: @@ -23,10 +23,6 @@ that you want to crawl. This requires the setup of two permissions: - Mailbox Search—Allows the crawling account to enumerate mailboxes (automatic discovery of mailboxes) -Review the related procedure that corresponds to your Exchange deployment: - -- Exchange Online -- Exchange Server (On-Premise) ### Exchange Online @@ -40,7 +36,7 @@ Review the related procedure that corresponds to your Exchange deployment: **Step 4 –** In the Set up basics step, enter the Name and Description '_NetwrixCrawlerImpersonation_'. Click **Next**. -**Step 5 –** On the **Add Permission** step, select ApplicationImpersonation and Mailbox Search +**Step 5 –** On the **Add Permission** step, select the Microsoft.Graph Mail.Read, Mail.ReadWrite, and User.Read.All permissions. Click **Next**. **Step 6 –** Select the users to assign to this role group. They will have permissions to manage the @@ -78,21 +74,28 @@ Online organization mailboxes using Modern authentication. For that, it uses an which can use Microsoft API to connect to Exchange Online organization. :::note -To access via Modern Authentication, you need to use an admin username. +To access Exchange using Modern Authentication, you need to use an admin username. ::: +You should configure sufficient permissions that will allow the crawling account to access and read the +mailboxes that you want to crawl. The permissions required differ between the EWS and Graph implementations. + +To utilise the Graph implementation, you must grant the following permissions: + +- Mail.Read-Allows the application to read the full contents of all mailboxes +- Mail.ReadWrite—Allows the application to move and delete mail in all mailboxes - necessary for the Exchange workflow actions +- User.Read.All—Allows the application to discover all users associated with an Exchange Online server -You should configure sufficient permissions that will allow the crawling account to impersonate the -mailboxes that you want to crawl. This requires the setup of two permissions: +To utilise the EWS implementation, you must grant the following permissions: - ApplicationImpersonation—Allows the crawling account to impersonate each of the mailboxes / users configured for collection - Mailbox Search—Allows the crawling account to enumerate mailboxes (automatic discovery of mailboxes) -If you plan to implement the scenario that involves modern authentication, you should do the +If you plan to make us of modern authentication, you should do the following: 1. [Create Azure AD app for Modern Authentication](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md) -2. Configure [Exchange Server](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserver.md) source - settings. +2. Configure [Exchange Server (Graph)](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md) + or [Exchange Server (EWS)](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md) source settings. diff --git a/docs/dataclassification/5.7/introduction/upgrade.md b/docs/dataclassification/5.7/introduction/upgrade.md index 7667eee852..4eaa233a72 100644 --- a/docs/dataclassification/5.7/introduction/upgrade.md +++ b/docs/dataclassification/5.7/introduction/upgrade.md @@ -34,13 +34,9 @@ Classification resides. If not, download it from Microsoft website: If any services are running while the upgrade occurs, database schema updates may fail to apply correctly. If this occurs, Netwrix recommends contacting Netwrix Support for assistance with remediation. ::: -**Step 4 –** Back up the Index files. Netwrix recommends the following: - -- Locate the folder containing index files (the default location is _C:\Program +**Step 4 –** Back up the Index files. Locate the folder containing the index files (the default location is _C:\Program Files\Netwrix\Data Classification\Index_) and back it up. -**Step 4 -** Stop all NDC services. If upgrading a Distributed Query Server (DQS) environment, stop all services on all instances before upgrading any instance. If the services are running while the upgrade occurs, database schema updates may fail to apply correctly. If this occurs, Netwrix recommends contacting Netwrix Support for help. - :::note For versions of 5.7 before 5.7.10, all NDC services and the NDC IIS Application Pool had to run as the same service account. For 5.7.10 onwards this is no longer necessary, but if upgrading from an earlier version of 5.7, complete the upgrade to 5.7.10 _before_ changing the service account to avoid upgrade issues. ::: From 18614b3389b4d886913174d48fa22a94d64938b1 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Fri, 11 Sep 2026 14:12:11 +0000 Subject: [PATCH 7/7] fix(vale): auto-fix style issues (Vale + Dale) --- .../introduction/addsource/addsource.md | 6 +++--- .../addsource/exchangeserverews.md | 2 +- .../addsource/exchangeservergraph.md | 4 ++-- .../introduction/exchange/exchange.md | 21 +++++++++---------- .../5.7/introduction/upgrade.md | 6 +++--- 5 files changed, 19 insertions(+), 20 deletions(-) diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addsource.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addsource.md index 2c8a65a6c0..9bed3bf8d1 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addsource.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/addsource.md @@ -35,8 +35,8 @@ the sources: The **Sources** section lists all your content sources. :::note -When adding a source or managing source configuration, the most commonly used source -settings are displayed by default. However, some source types have additional configuration options -that can be displayed by clicking the Advanced Settings ("wrench" icon). You can +When adding a source or managing source configuration, the console displays the most commonly used +source settings by default. However, some source types have additional configuration options +that appear when you click the Advanced Settings ("wrench" icon). You can set the Advanced Settings to display by default in User Preferences, accessible by clicking on the username. ::: diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md index 5ea08e4e63..7b76a148d7 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeserverews.md @@ -11,7 +11,7 @@ multiple Exchange mailboxes from the same Exchange server, using the Exchange We :::note Automatic detection, crawling, and classification of multiple Exchange mailboxes from -the same Exchange server (and, respectively, the _Exchange Server (EWS)_ content source configuration) works +the same Exchange server—and therefore the _Exchange Server (EWS)_ content source—works only with Exchange Server 2013 or later, due to limitations in the Microsoft APIs. For earlier versions, consider using the _Exchange Mailbox (EWS)_ content source. ::: diff --git a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md index 4bf1884e90..4531e2c1a7 100644 --- a/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md +++ b/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md @@ -7,7 +7,7 @@ sidebar_position: 45 # Exchange Server (Graph) Use the Exchange Server (Graph) source configuration screen to crawl and classify -multiple Exchange mailboxes in the same tenant. The Graph source type can only be used to connect to Exchange Online. To crawl mailboxes on an on-premises Exchange server, use Exchange Server (EWS). +multiple Exchange mailboxes in the same tenant. The Graph source type connects only to Exchange Online. To crawl mailboxes on an on-premises Exchange server, use Exchange Server (EWS). You can use Match Rules to include or exclude specific mailboxes. @@ -42,7 +42,7 @@ Specify the following settings: | ---------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Cloud Environment | Select the Azure instance hosting the Exchange Online tenancy. | | Crawl Range | Define which portions of data to retrieve from Exchange Online:
  • Select **Date Range** to crawl a static set of data within the required interval.
  • Select **Since** if you want to periodically re-crawl content from the specified date, taking into account the last crawl date for each artifact.
| -| Match Rules | Define rules with wildcards to limit which mailboxes are crawled. Examples: 1. `.*@netwrix.com`— enter the wildcard (\*) and the domain (here `netwrix.com`) to restrict crawling to a set of domain mailboxes 2. `.*`—enter to crawl all mailboxes. You must define at least one match rule. | +| Match Rules | Define rules with wildcards to limit which mailboxes the product crawls. Examples: 1. `.*@netwrix.com`— enter the wildcard (\*) and the domain (here `netwrix.com`) to restrict crawling to a set of domain mailboxes 2. `.*`—enter to crawl all mailboxes. You must define at least one match rule. | | Detection Period | Specify how often to check the source for changes. Default period is 1 day. | diff --git a/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md b/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md index 4f97f356c7..2573ab1127 100644 --- a/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md +++ b/docs/dataclassification/5.7/introduction/introduction/exchange/exchange.md @@ -14,9 +14,9 @@ On-premise Exchange servers support Basic authentication for crawling accounts, ## Basic Authentication -This method is supported for on-premise Exchange servers. You should -configure sufficient permissions that will allow the crawling account to impersonate the mailboxes -that you want to crawl. This requires the setup of two permissions: +On-premise Exchange servers support this method. Configure sufficient permissions that allow the +crawling account to impersonate the mailboxes that you want to crawl. This requires two +permissions: - ApplicationImpersonation—Allows the crawling account to impersonate each of the mailboxes / users configured for collection @@ -62,8 +62,8 @@ this Role as well. ADMINUSERNAME :::note -If crawling Microsoft Office 365 for Small Business or many hosted Exchange systems, then -it isn't possible to set up Application Impersonation. +If you crawl Microsoft Office 365 for Small Business or many hosted Exchange systems, you can't +set up Application Impersonation. ::: @@ -71,30 +71,29 @@ it isn't possible to set up Application Impersonation. Starting with version 5.5.3, Netwrix Data Classification allows for crawling Microsoft Exchange Online organization mailboxes using Modern authentication. For that, it uses an Azure AD application -which can use Microsoft API to connect to Exchange Online organization. +that connects to the Exchange Online organization through the Microsoft API. :::note To access Exchange using Modern Authentication, you need to use an admin username. ::: -You should configure sufficient permissions that will allow the crawling account to access and read the +Configure sufficient permissions that allow the crawling account to access and read the mailboxes that you want to crawl. The permissions required differ between the EWS and Graph implementations. -To utilise the Graph implementation, you must grant the following permissions: +To use the Graph implementation, you must grant the following permissions: - Mail.Read-Allows the application to read the full contents of all mailboxes - Mail.ReadWrite—Allows the application to move and delete mail in all mailboxes - necessary for the Exchange workflow actions - User.Read.All—Allows the application to discover all users associated with an Exchange Online server -To utilise the EWS implementation, you must grant the following permissions: +To use the EWS implementation, you must grant the following permissions: - ApplicationImpersonation—Allows the crawling account to impersonate each of the mailboxes / users configured for collection - Mailbox Search—Allows the crawling account to enumerate mailboxes (automatic discovery of mailboxes) -If you plan to make us of modern authentication, you should do the -following: +If you plan to use modern authentication, do the following: 1. [Create Azure AD app for Modern Authentication](/docs/dataclassification/5.7/introduction/introduction/exchange/azureappexchangeonlinemfa.md) 2. Configure [Exchange Server (Graph)](/docs/dataclassification/5.7/contentconfigurationoverview/introduction/addsource/exchangeservergraph.md) diff --git a/docs/dataclassification/5.7/introduction/upgrade.md b/docs/dataclassification/5.7/introduction/upgrade.md index 4eaa233a72..c848e8a7e1 100644 --- a/docs/dataclassification/5.7/introduction/upgrade.md +++ b/docs/dataclassification/5.7/introduction/upgrade.md @@ -28,7 +28,7 @@ Classification resides. If not, download it from Microsoft website: - On the computer where Netwrix Data Classification is installed, start the Netwrix Data Classification Service Viewer tool. Select **Stop** next to each service. -- If upgrading a Distributed Query Server (DQS) environment, stop all services on all instances before upgrading any instance. +- If you upgrade a Distributed Query Server (DQS) environment, stop all services on all instances before upgrading any instance. :::warning If any services are running while the upgrade occurs, database schema updates may fail to apply correctly. If this occurs, Netwrix recommends contacting Netwrix Support for assistance with remediation. @@ -38,7 +38,7 @@ If any services are running while the upgrade occurs, database schema updates ma Files\Netwrix\Data Classification\Index_) and back it up. :::note -For versions of 5.7 before 5.7.10, all NDC services and the NDC IIS Application Pool had to run as the same service account. For 5.7.10 onwards this is no longer necessary, but if upgrading from an earlier version of 5.7, complete the upgrade to 5.7.10 _before_ changing the service account to avoid upgrade issues. +For versions of 5.7 before 5.7.10, all NDC services and the NDC IIS Application Pool had to run as the same service account. For 5.7.10 onwards this is no longer necessary, but if you upgrade from an earlier version of 5.7, complete the upgrade to 5.7.10 _before_ changing the service account to avoid upgrade issues. ::: ## Upgrade Process @@ -53,7 +53,7 @@ upgrade to version 5.7. ## Upgrading a DQS Environment -When upgrading an NDC environment which uses the **Distributed Query Server** (DQS) functionality to 5.7.10 or later, +When upgrading to 5.7.10 or later in an NDC environment that uses the **Distributed Query Server** (DQS) functionality, upgrade the primary server before the secondary instances. Secondary instances attempt to resynchronize with the primary instance during the upgrade process, and this resynchronization fails if you haven't upgraded the primary instance.