Add2Exchange Installation Guide > Preparing to Install Add2Exchange > Creating the zAdd2Exchange Account

Exchange 2007/2010

This step is accomplished with the following commands on Exchange 2007 and Exchange 2010. The rest of this section only applies to Exchange 2003 and can be skipped.

In Exchange Management Shell, execute the following command:

Get-MailboxDatabase | Add-ADPermission -User "zAdd2Exchange" -AccessRights ExtendedRight -ExtendedRights Send-As, Receive-As, ms-Exch-Store-Admin

Registry Security Utility

1.	The Security tab in Exchange System Manager is not enabled by default. To enable the tab, run the Add2Exchange Registry Security.exe included in the Add2Exchange zip file.

Technical Details

For details on how the security utility works, see:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;264733.

2.	Open Exchange System Manager and give administrative permissions to the Security Group as follows:

Exchange System Manager

3.	Open Exchange System Manager. Right-click the top level of the organization and select Properties.

Adding the Add2Exchange Security Group

4.	Select the Security tab, click Add and select the Add2Exchange Security Group. Leave the permissions as assigned by default and click OK.

Verifying Inheritance to the Mailbox Store

Note

You do not need to verify Public Folder Stores yet.

5.	Expand the first Storage Group. Right-click the first Mailbox Store and select Properties.

Mailbox Store Security Tab

Note

All permissions for the Security Group except Special Permissions and Associated external account (if present) should have the Allow setting checked.

6.	Select the Security tab and verify that the Add2Exchange Security Group appears with full permissions.

7.	Repeat this process for each Mailbox Store in each Storage Group.

If the Security Group is not listed, it is likely that inheritance is turned off somewhere between the mailbox store and the top of the Exchange system tree. If so, either:

•	follow the Enabling Inheritance procedure below

- or, if you do not want to enable inheritance -

•	add the Security Group to the Server or to all Mailbox and Public Folder stores directly

Click to enlarge

Enabling Inheritance

Skip this section if...

you were able to verify permissions for the Security Group on the Mailbox Store.

If you have decided to enable inheritance, follow these steps:

Mailbox Store Security Tab Advanced Button

1.	Click Advanced.

Security Inheritance Settings

2.	Check the "Allow inheritable permissions..." checkbox. This will enable inheritance at this level in the Exchange system tree. Repeat this step for each other store (public and mailbox), as well as at the Server level.

Mailbox Store Security Tab

3.	Once inheritance is configured properly, the Security Group will appear with gray checkboxes at each store.

Page url: http://www.diditbetter.com/manuals/Add2Exchange/Add2Exchange Enterprise Guide/index.html?essential_prerequisite_5_give_the_security_group_exchange_rights.htm