Follow

Settings permissions for Exchange

Setting Exchange Permissions

Below you'll find a description on how to give a service account application impersonation permission within Exchange 2010/2013/Office365.

Note - please ensure  that you set the password for the Service account never to expire. If that isn't possible, then it is the responsibility of the customer to ensure that the password is always updated in Exchange and in Pronestor before it expires.

Please note: Setting of permissions on Exchange can have some latency before the permissions are set and available. Please allow up to 30 min. for Exchange to have the permissions committed.

Setting Application Impersonation

Exchange 2013

http://technet.microsoft.com/en-us/library/dd776119(v=exchg.150).aspx

Exchange 2010

http://technet.microsoft.com/en-us/library/ff793352(v=office.14).aspx

Example:

New-ManagementRoleAssignment -Name PronestorServiceGroup -Role applicationImpersonation -User service@pronestor.com

Exchange 2007

https://msdn.microsoft.com/en-us/library/bb204095(v=exchg.80).aspx

Office365

  • Go to web portal - with administrator permissions
  • Create a new user (ex. "service")
  • Go to Exchange Admin Center
  • Choose Permissions in left menu
  • Choose "Admin Roles"
  • Create a new "Role Group"
    • Name : Pronestor Service Group
    • Roles : add "ApplicationImpersonation"
    • Members : add the "service"-user from above

 

 

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

  • Avatar
    Support

    Setting Throttling Policy (NOT required per default)

    Use Exchange Management Shell
    Create new policy
    Ex. New-ThrottlingPolicy -Name nothrottlepolicy
    Set throttling on ews
    Ex. Set-ThrottlingPolicy nothrottlepolicy -ewsmaxconcurrency $null
    Set-ThrottlingPolicy nothrottlepolicy -ewsmaxsubscriptions $null
    Associate service account to policy 
    Ex. Set-ThrottlingPolicyAssociation -Identity service@pronestor.com -ThrottlingPolicy nothrottlepolicy
    An association can be listed and verified with:
    Ex. Get-ThrottlingPolicyAssociation service@pronestor.com

    It should show a throttlingpolicyid = nothrottle

     

    For more information on throttling - please see the following KB from Microsoft - click here

  • Avatar
    Support

    How to set application impersonation on a group for users/resources
    http://www.sharepointsapiens.com/blog/how-to-configure-applicaiton-impersonation-exchange/

Powered by Zendesk