Permissions requirements for the service account on Exchange Server 2007 are:
To assign the service account the required permissions at the Exchange Server level, follow these steps:
1. | Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell. |
2. | Type the following line, and then press ENTER:
Get-MailboxServer <Exchange2007> | Add-ADPermission -User <Account> -AccessRights GenericRead, GenericWrite -ExtendedRights Receive-As
Where <Exchange2007> is the name of the Exchange Server and <Account> is the name of the service account to which the permissions will be assigned. |
If inheritance to the individual stores is not enabled, to set the required permissions at the store level, follow these steps:
1. | Click Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell. |
2. | Type the following line, and then press ENTER:
Get-MailboxDatabase <Exchange2007>\<StorageGroup>\<MailboxDatabase> | Add-ADPermission -User <Account> -AccessRights GenericRead, GenericWrite -ExtendedRights Receive-As
Where <Exchange2007> is the name of the Exchange Server, <StorageGroup> is the name of the storage group, <MailboxDatabase> is the name of the mailbox database, and <Account> is the name of the service account to which the permissions will be assigned. |
Note The service account must be a member of the Domain Users group only. Membership of the Domain Admins group or any of the built-in Exchange security groups may deny required permissions.
|