Permissions Requirements

Symprex Folder Permissions Manager requires you to be logged on using a domain account with appropriate permissions on Microsoft Exchange Server in order to be able to modify mailbox and public folder permissions, and to modify mailbox delegates. Two different technologies are used to accomplish this:

•The Microsoft Messaging API (MAPI) is used to logon to Exchange Server, expand address and distribution lists, open mailboxes, and read and write permissions.

•Exchange Web Services (EWS) is used to read and write mailbox delegates.

The permissions can either be granted to one interactive account or to two separate accounts, depending on the security model of your organization. To use two accounts, the permissions should be configured as follows:

•Grant the appropriate MAPI permissions to the interactive domain account for the user who will be logged on to Windows.

•Grant the appropriate EWS permissions to a non-interactive domain account; the credentials for this account are provided during logon.

The guidelines in the following sections describe how to assign the appropriate permissions.

•Permissions for Exchange Server 2007

•Permissions for Exchange Server 2010 and Higher