How to grant the Vault service account Send-As/Receive-As permissions in an Exchange 2007 environment

Procedure:

Procedure 1.  Using the Exchange Management Shell

Choose from the following commands depending on company security policies and run the command from the Exchange Management Shell.


Setting send-as \ receive-as permissions at the Organization level

get-organizationconfig | add-adpermission -user vsa@domain.com -extendedrights send-As,receive-As



Setting send-as \ receive-as permissions to all mailbox databases on a specified Mailbox server

get-mailboxdatabase | where-object {$_.distinguishedname -ilike "*CN=server_name*"} | add-adpermission -user vsa@domain.com -extendedrights send-As,receive-As



Setting send-as \ receive-as permissions at the server level

get-mailboxserver -Identity 'server_name' | add-adpermission -user vsa@domain.com -extendedrights send-As,receive-As



Setting send-as \ receive-as permissions to a particular mailbox database on a specified Mailbox server

get-mailboxdatabase | where-object {$_.distinguishedname -ilike "*CN=mailbox_database_name*CN=server_name*"} | add-adpermission -user vsa@domain.com -extendedrights send-As,receive-As



Procedure 2. Using ADSIEdit

1. Install the Windows Support Tools for Windows Server 2003 (Available from the Windows Server 2003 Install CD)
2. Add ADSIEdit to a custom MMC
3. Right click the root node and choose 'Connect To'
4. Choose 'Configuration' from the drop down list under 'Select a Well Know naming Context'
5. Click OK
6. Expand the 'Configuration' node
7. Expand 'CN=Configuration.......'
8. Expand 'CN=Services'
9. Expand 'CN=Microsoft Exchange'
10. Expand 'CN=Your_Organization_name'
11. If you want to set the permissions at the organization level then right click this container and choose 'Properties'.  The permissions can be set on the security tab
12. If you want to set the permissions at the server level then expand 'CN=Administrative Groups'
13. Expand 'CN=Exchange Administrative Group (FYDIBOHF23SPDLT)'
14. Expand 'CN=Servers'
15. Right click the server container you require to set permissions and choose 'Properties'.  The permissions can be set on the security tab