Enterprise Vault.cloud™ Folder Sync 1.11 Administration Guide
- Folder Sync Overview
- Requirements for Folder Sync
- Steps to set up Folder Sync
- Preparing the Folder Sync service account
- Configuring sufficient concurrent MAPI sessions for Folder Sync
- Installing or upgrading Folder Sync
- Configuring Folder Sync
- Running and scheduling Folder Sync synchronizations
- Performing a "Run Now" Folder Sync synchronization
- Monitoring and managing Folder Sync
- Troubleshooting Folder Sync
Setting the permissions for the Folder Sync service account on Exchange 2010 and Exchange 2013
You must set the required permissions for the Folder Sync service account on each Exchange 2010 and Exchange 2013 server that Folder Sync is to process.
You can use the Exchange Management Console and the Exchange Management Shell to set the required properties on an Exchange 2010 or 2013 server.
To set the permissions for the Folder Sync service account on Exchange 2010 and 2013
- Log in using administrator credentials.
- Start the Exchange Management Console, and from its Toolbox open the Roles Based Access Control (RBAC) User Editor.
Use the RBAC User Editor to add the Folder Sync service account to the View-Only Organization Management role group.
- Close the Exchange Management Console.
- Start the Exchange Management Shell.
- Enter the following shell commands to give the Folder Sync service account the correct permissions for all of the mailboxes within your Exchange environment:
Get-MailboxDatabase | Add-ADPermission -AccessRights GenericRead -User "Service Account"
Get-MailboxDatabase | Add-ADPermission -AccessRights ExtendedRight -User "Service Account"
If you add more mailboxes at a later date, re-run the commands in step 5. Alternatively you can run the following commands to set the permissions for all of the mailboxes that are associated with a named mailbox database:
Add-ADPermission -Identity "mailbox database name" -AccessRights GenericRead -User "Service Account"
Add-ADPermission -Identity "mailbox database name" -AccessRights ExtendedRight -User "Service Account"