Applying Application Impersonation permissions

Relevant Products: Signature Manager Exchange Edition | Mail Disclaimers | Mail Archiver | Signature Manager Outlook Edition | Signature Manager Office 365 Edition

So you wish to manually apply the Application Impersonation permissions to your Admin account. Whether this is for the Signature Manger Office 365/Outlook Edition Admin, or your Local account to run the Sent Items Update or even the Exchange Mailbox Access account in Mail Archiver, this can be achieved following the steps below.

Description

The permissions required vary depending on the version of Microsoft® Exchange your mailbox server is using:

• Microsoft® Exchange 2007 and Microsoft® Windows® Small Business Server 2008.
• Microsoft® Exchange 2010, Microsoft® Exchange 2013, Microsoft® Exchange 2016 and Microsoft® Windows® Small Business Server 2011.
• Microsoft Office 365

Please follow the steps in the appropriate subsequent section to setup the correct permissions.

Microsoft® Exchange 2007 and Microsoft® Windows® Small Business Server 2008

The user account used must have the 'Store Admin' permission. To achieve this, please follow these steps:

1. Click Start, click All Programs, click Microsoft Exchange Server 2007, and then click Exchange Management Shell:

2. A black PowerShell window will appear. Enter the following command and press ENTER:

(Replacing with the user account you wish to use.)

3. The user account you wish to use now has the required permission.

Microsoft® Exchange 2010, Microsoft® Exchange 2013, Microsoft® Exchange 2016 and Microsoft® Windows® Small Business Server 2011

1. Click Start, click All Programs, click Microsoft Exchange Server 2010/2013, and then click Exchange Management Shell:

2. A black PowerShell window will appear. Enter the following command and press ENTER:

(Replacing with the user account you wish to use.)

3. Enter the following command and press ENTER:

4. Enter the following command and press ENTER:

(Replacing with the user account you wish to use.)

5. Close the PowerShell window.

6. The user account you wish to use now has the required permission

Microsoft Office 365

If your mailboxes are hosted on Microsoft Office 365, you need to grant permissions to allow a user to update the signature for everyone in your organization. To do this, follow the steps below on a computer within your organization with Windows PowerShell:

1. Open Windows PowerShell.

2. Enter the following command to connect to Office 365:

3. Import-PSSession (New-PSSession -ConfigurationName Microsoft.Exchange -Credential $null -ConnectionURI https://ps.outlook.com/powershell -Authentication Basic -AllowRedirection) -AllowClobber

4. When prompted to enter credentials, type the email address and password for your Office 365 Administrator account.

5. Enter the following command to setup the required credentials, replacing "Username here" with the user account that you wish to use:

New-ManagementRoleAssignment -Role ApplicationImpersonation -User (Get-User -Identity "Username here" | Select-Object).Identity

6. Close the PowerShell window. The user account you wish to use now has the required permission