|
Permissions requirements for the service account on Exchange Server 2007 are:
To assign the service account the required permissions at the Exchange Server level, follow these steps:
| 1. | Open the Exchange Management Shell and connect to Exchange Server.
|
| 2. | Type the following line, and then press ENTER:
Get-MailboxServer <Exchange2007> | Add-ADPermission -User <Account> -AccessRights GenericRead, GenericWrite -ExtendedRights Receive-As
where <Exchange2007> is the name of the Exchange Server and <Account> is the name of the service account to which the permissions will be assigned. |
If inheritance to the individual stores is not enabled, to set the required permissions at the store level, follow these steps:
| 1. | Start the Exchange Management Shell.
|
| 2. | Type the following line, and then press ENTER:
Get-MailboxDatabase <MailboxDatabase> | Add-ADPermission -User <Account> -AccessRights GenericRead, GenericWrite -ExtendedRights Receive-As
where <MailboxDatabase> is the name of the mailbox database and <Account> is the name of the service account to which the permissions will be assigned. If <MailboxDatabase> is omitted, the rights will be assigned to all databases in your organisation. |
Note The service account must be a member of the Domain Users group only. Membership of the Domain Admins group or any of the built-in Exchange security groups may deny required permissions.
|