Discovery-Exchange.exe

As an alternative to inventory via the wizard, the autonomous discovery module can be used. This is executed directly on the Exchange Server and generates a result file, which is then imported into Docusnap via File Import.

General information about autonomous discovery modules, standard parameters, and importing result files can be found in the chapter Autonomous Discovery Modules.

The following module is available for inventorying Microsoft Exchange:

• Discovery-Exchange.exe (from version 2013 onwards)

The Discovery-Exchange.exe module can be executed either by double-clicking or via the Exchange Server command line. After the inventory is completed, a DSI file is created in the folder where Discovery-Exchange.exe is located, containing all the information.

C:\Discovery-Exchange.exe

Optionally, the Exchange Inventory Option Scope is used to define which information should be read. A detailed description including examples can be found in the English console help:

Exchange specific Options:
     -dc <domaincontroller>
           Description: Defines the domain controller to be used for Active Directory queries during
           the scan.

           Example: C:\Discovery-Exchange.exe -dc dospdc03.docusnapsports.com

     -threads <count>
           Description: Specifies the number of concurrent PowerShell threads allowed during
           execution. Valid options are 1 to 4, with the default set to 4.

Exchange Inventory Options Scope:

To modify Exchange scan defaults, explicitly set each parameter to 'true' or 'false'.
Failure to specify these may lead to default values being used, potentially resulting
in unexpected inventory results.

     -dg:   Retrieves distribution group data, on by default
     -ext:  Off by default, retrieves permissions for all objects in 'Recipient Configuration'
     -mct:  Retrieves mail contact information, on by default
     -misc:  Retrieves additional config data like certificates and OWA, on by default
     -mb:   Retrieves information on all mailbox types, on by default
     -mbf:  Retrieves mailbox folders and their access permissions, on by default
     -mbp:  Retrieves mailbox permissions, on by default
     -mbsp:  Retrieves mailbox delegation permissions, on by default
     -pf:   Retrieves public folder information, on by default
     -pfp:  Retrieves public folder structure and access permissions, on by default

           Example of executing with default settings:
            C:\Discovery-Exchange.exe -dg true -ext false -mct true -misc true -mb true
            -mbf true -mbp true -mbsp true -pf true -pfp true

           Example of executing without inventorying Mailbox and Public Folder permissions:
            C:\Discovery-Exchange.exe -dg true -ext false -mct true -misc true -mb true -mbf false
            -mbp false -mbsp false -pf true -pfp false

The Discovery-Exchange.exe.config file

The Tools folder of the Docusnap program directory contains the file Discovery-Exchange.exe.config in addition to the module. It only contains the setting enforceFIPSPolicy enabled="false", which overrides the Windows FIPS policy for this module.

The file is only required if the target system enforces the use of FIPS-compliant algorithms (group policy System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing). In this case, encrypting the collected data fails without the configuration file. Copy the file together with Discovery-Exchange.exe into the same directory on the target system.

If the FIPS policy is not active, the file has no effect – it can be copied along or omitted.