To have Indica connect to your Exchange Organization, the Indica service account needs read-only rights to all the mailboxes and email. To read more about configuring INDICA for this, read this page.
All Exchange versions
- Mail-enable indica service account – the indica service account must have a mailbox;
- Grant full mailbox permissions on all mailboxes (add indica service account to group 'Exchange Trusted Subsystem').
Microsoft Exchange Server 2007
Setting an Exchange 'View-Only Administrator' role
- Click Start –> Programs –> Microsoft Exchange Server 2007 –> Exchange Management Shell;
Enter the following command:
Get-MailboxDatabase | ForEach-Object {Add-ADPermission -Identity $_.DistinguishedName -User <INDICASVCACC> -ExtendedRights ms-Exch-EPI-May-Impersonate}
Press enter.
Microsoft Exchange Server 2010 and up
Setting an Exchange 'View-Only Administrator' role
- Click Start –> Programs –> Microsoft Exchange Server 2010 or 2013 –> Exchange Management Shell;
Enter the following commands:
New-ManagementRoleAssignment -Name:impersonationAssignmentName -Role:ApplicationImpersonation -User:<INDICASVCACC>
Get-ManagementRoleAssignment -RoleAssignee <INDICASVCACC> -Role ApplicationImpersonation -RoleAssigneeType user
Execute for every mailstore:
Get-MailboxDatabase -identity <DB name> | Remove-ADPermission -user <INDICASVCACC> -AccessRights GenericAll
Make sure the Exchange Virtual Directory is accessible! Read this for more information.