Configuring permissions to update OWA signatures and settings

By default, Exclaimer Signature Manager Outlook Edition updates OWA signatures and settings from each client desktop computer using ExSync. However, if you have users who access their email only by OWA and rarely log on to your domain, you can choose to update signatures and settings from the server.

In this case, specific permissions are required for the user account used to update the signatures & settings. Required permissions will vary depending on the version of Microsoft® Exchange your mailbox server is using:

• Microsoft® Exchange 2003 / Microsoft® Windows® Small Business Server 2003

• Microsoft® Exchange 2007 / Microsoft® Windows® Small Business Server 2008

• Microsoft® Exchange 2010 / Microsoft® Exchange 2013 and above / Microsoft® Windows® Small Business Server 2011

Microsoft® Exchange 2003 / Microsoft® Windows® Small Business Server 2003

The user account used must have the Exchange Administrator role. To achieve this, please follow the steps below on a Microsoft® Exchange server within your organization:

1. Click Start > All Programs > Microsoft Exchange > System Manager:
   
   

2. Right-click the organization or the Administrative Group where you want to delegate administrative permissions, and then click Delegate control:
   
   

3. The Exchange Administration Delegation Wizard starts. Click Next.

4. On the Users or Groups page, click Add.

5. In the Delegate Control window, click Browse.

6. In the Select Users, Computers, or Groups window, click the appropriate location in the Look in box and click the name of the user that you wish to use:
   
   

7. In the Delegate Control dialog box, choose Exchange Administrator as the Role and then click OK:
   
   

8. The user that you added is displayed in the Users and Groups list.

9. Click Next.

10. Click Finish. The user account you wish to use now has the required permission. 

If you have multiple Administrative Groups you will need to repeat the steps above for each one.

Microsoft® Exchange 2007 / Microsoft® Windows® Small Business Server 2008

The specified user account must have the Store Admin permission. To achieve this, please follow the steps below.

1. Click Start > All Programs > Microsoft Exchange Server 2007 > Exchange Management Shell:
   
   

2. A black PowerShell window is displayed. Type the following command and press ENTER:

Get-MailboxDatabase | Add-ADPermission -User <Username here> -AccessRights ExtendedRight -ExtendedRights ms-Exch-Store-Admin
   (Replacing <Username here> with the user account that you wish to use.)
   
   

3. The user account you wish to use now has the required permission.

Microsoft® Exchange 2010 / Microsoft® Exchange 2013 and above / Microsoft® Windows® Small Business Server 2011

The specified user account must have the Store Admin permission and also the Application Impersonation role. To achieve this, please follow the steps below.

1. Click Start > All Programs > Microsoft Exchange Server 2010 > Exchange Management Shell:
   
   

2. A black PowerShell window is displayed. Type the following command and press ENTER:

Get-MailboxDatabase | Add-ADPermission -User <Username here> -AccessRights ExtendedRight -ExtendedRights ms-Exch-Store-Admin
   (Replacing <Username here> with the user account you wish to use.)
   
   

3. Type the following command and press ENTER:

$ExchangeServer = Get-ExchangeServer | where {$_.IsClientAccessServer -eq $true} | where {$_.IsValid -eq $true} | where {$_.IsExchange2007OrLater -eq $true} | where { $_.AdminDisplayVersion.Major -ge 14 }
 

4. Type the following command and press ENTER:

$ExchangeServer | ForEach-Object { New-ManagementRoleAssignment -Role ApplicationImpersonation -User (Get-User -Identity "<Username here>" | select-object).identity }
   (Replacing <Username here> with the user account you wish to use.)
   
   

5. Close the PowerShell window.

6. The user account that you wish to use now has the required permission.