Siebel Server Sync Guide > Configuring Siebel Server Sync >

Configuring Exchange Service Account Credentials

The Exchange Connector uses the credentials of the user account under which it runs to interact with all of the Microsoft Exchange mailboxes in the Active Directory forest (one or more Active Directory domains that share certain characteristics and information). The Exchange Connector user account must have an active Microsoft Exchange mailbox account, and must have special mailbox access privileges to access other users' active Microsoft Exchange mailboxes. For more information about these privileges, see About the Exchange Service Account.

The task of configuring these credentials is a step in Process of Configuring SSSE.

The following procedures describe two ways of configuring the necessary credentials: a method that uses a script, and a manual method.

• Script Method. The method that uses a script is recommended if the Connector application requires access to many users' mailboxes, as would be typical during deployment of SSSE. Two scripts are provided:
  • A script for use in Microsoft Exchange 2007 environments

    For additional information, see Configuring Credentials Using a Script (Microsoft Exchange 2007).

  • A script for use in Microsoft Exchange 2000 or 2003 environments

    For additional information, see Configuring Credentials Using a Script (Microsoft Exchange 2000 or 2003).

• Manual Method. The manual method is recommended if you only have to grant access to a few users' mailboxes, such as when you want to enable synchronization for a few new employees.

  For additional information, see Configuring Credentials Manually.

NOTE:  You can run the Exchange Connector application under the same user account as the PIMSI Engine component, or under a different user account. Using different user accounts separates Siebel security settings and Microsoft Exchange security settings as much as possible.

Configuring Credentials Using a Script (Microsoft Exchange 2007)

The following procedure describes how to use a script in a Microsoft Exchange 2007 environment to configure the security settings that grant access to other users' mailboxes for the user account under which the Exchange Connector application runs.

To configure Exchange 2007 service account credentials using a script

1. Verify that the user account under which the Exchange Connector runs has an active mailbox on the Exchange Server, or create and activate one if necessary.
2. Log in to your Siebel application as an administrator and navigate to Administration - PIM Server Integration, Sync Access Control, and then User Map.
3. In the User Map list, select the users who will use SSSE, click Menu, then select Export.
4. In the Export dialog box, choose settings as described in the following table, and then click Next.

   Setting	Value
   Rows to Export	All Rows in Current Query
   Columns to Export	Visible Columns
   Output Format	Comma Separated Text File

5. In the File Download dialog box, click Save, then select an output file name and location.
6. In the Export dialog box, click Close.
7. Use a text editor to open the file you saved, delete all the columns of data except the column listing the email addresses of the SSSE users, then save the file using the ANSI encoding option.
8. Navigate to the following archive file:

   install_directory\siebsrvr\bin\ssse_exchange2k7_permissions.zip

   where install_directory is the installation directory for your Siebel implementation.

9. Extract the ssse_exchange2k7_permissions.ps1 file.
10. Use a text editor to edit the ssse_exchange2k7_permissions.ps1 file in accordance with the instructions included in the file, then save the file.
11. Run the script according to the instructions provided in the ssse_exchange2k7_permissions.ps1 file.

Configuring Credentials Using a Script (Microsoft Exchange 2000 or 2003)

The following procedure describes how to use a script in a Microsoft Exchange 2000 or 2003 environment to configure the security settings that grant access to other users' mailboxes for the user account under which the Exchange Connector application runs.

To configure Exchange 2000 or 2003 service account credentials using a script

1. Verify that the user account under which the Exchange Connector runs has an active mailbox on the Exchange Server, or create and activate one if necessary.
2. Log in to your Siebel application as an administrator and navigate to Administration - PIM Server Integration, Sync Access Control, and then User Map.
3. In the User Map list, verify that the column names appear in the following order:
   • Siebel User Login
   • PIM Server Type
   • PIM User Identifier
   • Language
   • Sync Enabled

     If necessary, use the Columns Displayed command to adjust the order of the columns.

4. In the User Map list, select the users who will use SSSE, click the Menu button and select Export.
5. In the Export dialog box, choose settings as described in the following table, and then click Next.

   Setting	Value
   Rows to Export	All Rows in Current Query
   Columns to Export	Visible Columns
   Output Format	Comma Separated Text File

6. In the File Download dialog box, click Save and select an output file name and location.
7. In the Export dialog box, click Close.
8. Use a text editor to open the file you saved, remove the column names, and then save the file using the ANSI encoding option.
9. Navigate to the following file:

   install_directory\siebsrvr\bin\ssse_exchange2k3_permissions.zip

   where install_directory is the installation directory for your Siebel implementation.

10. Extract the ssse_exchange2k3_permissions.vbs script file.
11. Using a text editor, edit the ssse_exchange2k3_permissions.vbs file in accordance with the instructions included in the file, then save the file.
12. Copy the ssse_exchange2k3_permissions.vbs file and the usermap.txt file you created in Step 6 to another location, then navigate to that location from the Command prompt.
13. Run the ssse_exchange2k3_permissions.vbs script file.

    When you run the script file, you can either grant full mailbox access permission to a specified user, or to a list of users:

    • To grant full mailbox access permission to a specified user, specify the email identifier of the user. For example:
    • ssse_exchange2k3_permissions.vbs email@domain.com
    • To grant full mailbox access permission to a list of users, specify the name of the text file you created in Step 6. For example:

    ssse_exchange2k3_permissions.vbs map.txt

Configuring Credentials Manually

The following procedure describes how to manually configure the security settings that grant access to other users' mailboxes for the user account under which the Exchange Connector application runs.

To configure Exchange service account credentials manually

1. Verify that the user account under which the Exchange Connector application runs has a mailbox on the Microsoft Exchange Server, or create one if necessary.
2. On any computer that has the Exchange System Management Tools installed (for example, the Exchange Server or any Siebel Exchange Connector computer), start the Active Directory Users and Computers console.
3. From the View menu, select Advanced Features.
4. In the Tree pane, select Users.
5. Perform the following substeps:
   1. In the Users pane, right-click the user name and choose Properties.
   2. In the user's Properties dialog box, click the Exchange Advanced tab.
   3. On the Exchange Advanced tab, click Mailbox Rights.
   4. In the Permissions for Username dialog box, click Add and enter the user account under which SSSE is running.
   5. Click Check Names.

      If there is no error message, click OK to return to the Permissions for USERNAME dialog box.

      If there is an error message, correct the user name before continuing.

   6. In the Names list, make sure the user is selected.
   7. In the Permissions list, select the Allow check box for Full mailbox access.
6. Click OK twice to close the dialog boxes and put the Properties changes into effect.
7. Repeat Step 5 and Step 6 for each user who will use SSSE.