How to configure permissions to update Outlook Web Access signatures and settings

Relevant Products: Signature Manager Outlook Edition

You wish to update Microsoft® Outlook Web Access (OWA) signatures and settings from the server. By default, Exclaimer Signature Manager updates the OWA signatures and settings from each client desktop computer using ExSync.exe. This 'server' method of signature deployment can be used if you have users who access their email only by OWA and rarely log on to your domain. Specific permissions are required for the user account used to update the signatures & settings. This also applies to Office 365.

Description

The permissions required vary depending on the version of Microsoft® Exchange your mailbox server is using:

• Exchange 2007 and Small Business Server 2008
• Exchange 2010, Exchange 2013, Exchange 2016 and Small Business Server 2011.
• Microsoft Office 365

Please follow the steps in the appropriate subsequent section to set up the correct permissions.

Exchange 2007 and Small Business Server 2008

To achieve this, please follow these steps:

1. Click Start > All Programs > Microsoft Exchange Server 2007 > Exchange Management Shell:
   
   
   A black PowerShell window is displayed.
   
   
2. Enter the following command and press [ENTER]:
   
   Get-MailboxDatabase | Add-ADPermission -User -AccessRights ExtendedRight -ExtendedRights ms-Exch-Store-Admin
   
   (Replacing with the user account you wish to use)
   
   
   
3. The user account you wish to use now has the required permission.

Exchange 2010, Exchange 2013, Exchange 2016 and Small Business Server 2011

1. Click Start > All Programs > Microsoft Exchange Server 2010/2013/2016 > Exchange Management Shell:
   
   A black PowerShell window is displayed.
   
   
2. Enter the following command and press [ENTER]:
   
   Get-MailboxDatabase | Add-ADPermission -User -AccessRights ExtendedRight -ExtendedRights ms-Exch-Store-Admin
   
   (Replacing with the user account you wish to use)
   
   
   
3. Enter the following command and press [ENTER]:
   
   $ExchangeServer = Get-ExchangeServer | where {$_.IsClientAccessServer -eq $true} | where {$_.IsValid -eq $true} | where {$_.IsExchange2007OrLater -eq $true} | where { $_.AdminDisplayVersion.Major -ge 14 }
4. Enter the following command and press [ENTER]:
   
   $ExchangeServer | ForEach-Object { New-ManagementRoleAssignment -Role ApplicationImpersonation -User (Get-User -Identity "" | select-object).identity }
   
   
   
   
5. Close the PowerShell window.
   
   
6. The user account you wish to use now has the required permission.

Microsoft® Office 365

1. Run the following Powershell script:
   
   $credential = (get-credential)
   
   When prompted, please enter account details for an Office 365 administrator.
   
   
2. Run the following Powershell script:
   
   Import-PSSession (New-PSSession -ConfigurationName Microsoft.Exchange -Credential $credential -ConnectionURI https://ps.outlook.com/powershell -Authentication Basic -AllowRedirection) -AllowClobber
3. Log on using an Office 365 administrator account and enter the following command:
   
   New-ManagementRoleAssignment -Role ApplicationImpersonation -User (Get-User -Identity "EMAIL ADDRESS" | Select-Object).Identity

    

   Replace "EMAIL ADDRESS" with the email address of the account you would like to use for the OWA signature updates on Office 365.