Configuring Permissions for Exchange 2000/2003
Configure the following permissions before adding the Exchange connector.
Configuring Exchange System Manager permissions
In the Exchange System Manager, the ShowSecurityPage to be turned on. For instructions, consult the Microsoft Knowledge Base Article How to enable the Security tab for the organization object in Exchange 2000 and in Exchange 2003.
Configuring permissions for the service account
The Exchange Administrator must assign to the service account the role of Exchange Administrator View Only at the Exchange Organization Level. The service account needs this permission in order to open the Exchange System Manager in the system running the AccuRoute Server.
To assign the Role of Exchange Administrator View only
-
Login to the system running Exchange System Manager using the login credentials of the Exchange Administrator.
-
Click Start > All Programs > Microsoft Exchange > System Manager.
-
Right click the Exchange Organization Level.
-
Right click and select Delegate control from the drop down menu. The Exchange Administration Delegation wizards opens.
-
Click Next.
-
On Users or Groups page, click Add.
-
In the Delegate Control page that opens, click Browse.
-
In the Select Users, Computers or Groups page, browse and select the appropriate user whom you want to add.
-
Click OK.
-
Under Roles in the Delegate Control page, click one of the following administrative permissions: Exchange Full Administrator or Exchange Administrator.
The users added are listed in the group.
Configuring permissions to access the mailbox store
To configure permissions for the Omtool service account to access the Exchange mailbox store:
-
Go to any system where Exchange System Manager is installed and log in using a Windows user account that is assigned the Exchange Full Administrator role.
-
Start System Manager and go to Administrative Groups > First Administrative Group > Servers > [server] > First Storage Group.
-
Right-click Mailbox Store and select Properties.
-
Go to the Security tab.
-
Add the Omtool service account user with Full Control permission enabled.
-
Click Apply and then click OK.
Configuring permissions for Routing group
The Omtool service account user must also have Full Control permissions of the Routing Group (requires ShowSecurityPage). This permission is necessary without which the user cannot create Exchange connectors.
Configuring Active Directory permissions
When you configure the permissions for Exchange 2003/2000 as listed in the sections above, the Assign DID and Assign Profile features of the Exchange connector will not work if you are logged in as the Omtool service account user.
To use the Assign DID and Assign Profile features, you can do one of the following:
-
Login as a Domain Admin and use the features.
-
Give the AccuRoute fax account the permissions to read and write PROPERTIES (not just objects) in ADSI. Edit the container the users are in like the domain admin has.