Applying Application Impersonation permissions

Relevant Products: Signature Manager Exchange Edition | Mail Archiver | Signature Manager Outlook Edition 

You wish to manually apply the Application Impersonation permissions to your Admin account. Whether this is for the Signature Manager Outlook Edition Admin or your Local account to run the Sent Items Update or even the Exchange Mailbox Access account in Mail Archiver, this can be achieved by following the steps below.

Description

The permissions required vary depending on the version of Microsoft® Exchange your mailbox server is using:

• Microsoft® Exchange 2007 and Microsoft® Windows® Small Business Server 2008.
• Microsoft® Exchange 2010, Microsoft® Exchange 2013, Microsoft® Exchange 2016 and Microsoft® Windows® Small Business Server 2011.
• Microsoft Office 365

Please follow the steps in the appropriate subsequent section to set up the correct permissions.

Microsoft® Exchange 2007 and Microsoft® Windows® Small Business Server 2008

The user account used must have the Store Admin permission.

To achieve this, please follow these steps:

1. Click Start > All Programs > Microsoft Exchange Server 2007 > Exchange Management Shell:
   
   
   
   A black PowerShell window is displayed.
   
   
2. Enter the following command and press [ENTER]:
   
   Get-MailboxDatabase | Add-ADPermission -User ExclaimerEMA -AccessRights ExtendedRight -ExtendedRights ms-Exch-Store-Admin
   
   - replace 'ExclaimerEMA' with the user account you wish to use.
   
   
   
   The user account you wish to use now has the required permission.

Microsoft® Exchange 2010, Microsoft® Exchange 2013, Microsoft® Exchange 2016 and Microsoft® Windows® Small Business Server 2011

1. Click Start > All Programs > Microsoft Exchange Server 2010/2013 > Exchange Management Shell:
   
   
   
   A black PowerShell window is displayed.
   
   
2. Enter the following command and press [ENTER]:
   
   
   Get-MailboxDatabase | Add-ADPermission -User -AccessRights ExtendedRight -ExtendedRights ms-Exch-Store-Admin
   
   - replace with the user account you wish to use.
   
   
   
   
3. Enter the following command and press [ENTER]:
   
   $ExchangeServer = Get-ExchangeServer | where {$_.IsClientAccessServer -eq $true} | where {$_.IsValid -eq $true} | where {$_.IsExchange2007OrLater -eq $true} | where { $_.AdminDisplayVersion.Major -ge 14 }
4. Enter the following command and press [ENTER]:
   
   
   $ExchangeServer | ForEach-Object { New-ManagementRoleAssignment -Role ApplicationImpersonation -User (Get-User -Identity "" | select-object).identity }
   
   - replace with the user account you wish to use.
   
   
   
   
5. Close the PowerShell window.
   
   The user account you wish to use now has the required permission

Microsoft Office 365

If your mailboxes are hosted on Microsoft Office 365, you need to grant permissions to allow a user to update the signature for everyone in your organization.

To do this, follow the steps below on a computer within your organization using Windows PowerShell:

1. Open Windows PowerShell.
   
   
2. Enter the following command to connect to Office 365:
   
   

   Import-PSSession (New-PSSession -ConfigurationName Microsoft.Exchange -Credential $null -ConnectionURI https://ps.outlook.com/powershell -Authentication Basic -AllowRedirection) -AllowClobber

3. When prompted to enter credentials, type in the email address and password for your Office 365 Administrator account.
   
   

4. Enter the following command to set up the required credentials, replacing 'Username here' with the user account that you wish to use:

   New-ManagementRoleAssignment -Role ApplicationImpersonation -User (Get-User -Identity "Username here" | Select-Object).Identity
   Note: If you receive an error reading: ”New-ManagementRoleAssignment is not recognized as the name of a cmdlet, function, script file, or operable program” please contact Exclaimer Support for assistance.

5. Close the PowerShell window.
   The user account you wish to use now has the required permission.