Integrating Handle with Exchange

Transcription

1 Integrating Handle with Exchange Compatibility Handle will integrate with the following versions of Exchange. Exchange 2007 Exchange 2010 Exchange 2013 Office365 If your exchange server not hosted in house or by JDO, please verify that your Exchange Host will allow impersonation scripts to be run on our behalf. Questions Please send the answers to the following questions to 1. Where is your Exchange server hosted? Note: if your Exchange server is hosted by JDO, you will need to send an to Jason Boedeker at JDO. They will handle all the configuration. 2. What Version? a b c d. Office Which service packs are installed? 4. What is your Exchange server URL or IP address? 1 5. What domain is your Exchange server on? 6. What time zone is the server set to? 1 must be accessible from the Handle server 1

2 Instructions If you are using Exchange 2007 Get-ExchangeServer where {$_.IsClientAccessServer -eq $TRUE} ForEach-Object {Add-ADPermission -Identity $_.distinguishedname -User (Get-User -Identity CtraxMailAdmin select-object).identity -extendedright ms-exch-epi-impersonation} Get-MailboxDatabase ForEach-Object {Add-ADPermission -Identity $_.DistinguishedName -User CtraxMailAdmin -ExtendedRights ms-exch-epi-may- Impersonate 3. Run the following script for each user account. The "user name" is the Name value of the Exchange user screen, NOT the exchange address. For example, John Doe not Add-ADPermission -Identity "user name" -User CtraxMailAdmin -extendedright ms-exch- EPI-May-Impersonate 2

3 If you are using Exchange 2010 New-ManagementRoleAssignment -Name "Handle Impersonation" - Role:ApplicationImpersonation -User CtraxMailAdmin@domain.com (Note: where domain.com is the domain of the customer.) Run the following script to verify that the previous script has been executed correctly Get-ManagementRoleAssignment -Role:ApplicationImpersonation - RoleAssigneeType:User Format-List * Get-ManagementRoleAssignment -Identity:"Handle Impersonation" Format-List * Only run the following script if you wish to remove impersonation from the server Remove-ManagementRoleAssignment "Handle Impersonation" 3

4 If you are using Exchange 2013 Run the following script from Exchange Shell on the Exchange server: New-ManagementRoleAssignment -Name "Handle Impersonation" - Role:ApplicationImpersonation -User CtraxMailAdmin@domain.com (Note: where domain.com is the domain of the customer.) Run the following scripts to verify that the previous script has been executed correctly Get-ManagementRoleAssignment -Role:ApplicationImpersonation - RoleAssigneeType:User Format-List * Get-ManagementRoleAssignment -Identity:"Handle Impersonation" Format-List * Only run the following script if you wish to remove impersonation from the server Remove-ManagementRoleAssignment "Handle Impersonation" 2. To collect data from Exchange 2013, the credentials used to collect Exchange data must have Application Impersonation rights for the mailboxes from which you are collecting. To set impersonation for the collection credentials: a. Open the web-based Exchange Admin Center (EAC) for your Exchange 2013 server. b. Click Permissions. c. Scroll down the list and double-click Impersonate. d. Enter a name for the new role group, such as Impersonation. e. Under Roles, click +. f. Select Impersonation and click add->. g. Click OK. h. Under Users, click +. i. Select the account that will be the impersonation for Exchange 2013 and click OK. j. Click Save. 4

5 If you are using Office365 New-ManagementRoleAssignment Name:impersonationAssignmentName role:applicationimpersonation User:CtraxMailAdmin 5