Prerequisite 5: Give the Security Group Exchange Rights

Open Exchange System Manager and give administrative permissions to the Security Group and make sure those rights inherit to the Mailboxes and Public Folders.

We are adding the Security Group so it will inherit the permissions to your entire organization and so administrative rights will not have to be given manually to each user.

Note: The Security tab is not enabled by default.  Included in the FolderMatic download zip file is the ExchangeRegistrySecurity.exe helper program.  This program automatically adds the registry key that Microsoft recommends in the tip above to add manually.  Run this on the Cloning Server and it will add the necessary registry entry for the current user to be able to see the Exchange Security Page in Exchange System Manager.  For more detailed information on what this program does, or to add the tab manually, please reference Microsoft's instructions at:   Http://support.microsoft.com/default.aspx?scid=kb;EN-US;264733

Note: If you are using Add2Exchange: Former versions of Add2Exchange required configuration of the Service Account (as opposed to the Security Group) on the Mailbox Stores.  This configuration is deprecated and the Service Account must be removed from any mailbox store permissions.  Only the Security Group should appear in the Security tab.

Note: In most Exchange installations, adding the Security Group automatically applies all of the appropriate administrative permissions to the Mailbox Store and Public Folder Store.  It does not give Client Ownership and Folder Contact, which are client permissions. Also , in some cases, you may not have inherited permissions to Public folders or mailboxes and you will have to add it specifically to the Mailbox Store or individual mailboxes or allow inheritance (which is generally a more accepted way to administer your Exchange Server). Tip: Make a note to discuss with your Exchange Administrator or Computer Service provider why your Exchange Server does not have inheritance.

If the Security Group is not listed in the Mailbox Security properties, your organization does not have inheritance turned on in your Exchange Server hierarchy.  You can either add the Security Group there now or enable inheritance.  For the purpose of this installation, it is sufficient to just add the Security Group with full rights now.

Tip: If when making an Relationship you are unable to see any folders in a specific mailbox while building the Relationship, this is an indication that the Service Account does not have the proper permissions. In fact, it is still explicitly listed in the permissions of the mailboxes or a parent object or has the incorrect memberships or the memberships were incorrectly applied. Make sure you take careful note to apply the correct permissions to the folders and mailboxes.

Enabling Inheritance

If, after careful consideration, you decide to enable inheritance for your Exchange Organization and the Objects it contains, follow these steps:

If you have inheritance enabled all the way up to the top organizational level (where we configured the Security Group), then you will see the Security Group has been added to the permissions of the Mailbox Store.