We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
Accept
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda Campus Barracuda Campus

Step 5 - Create Service Account

  • Last updated on
This step refers to Microsoft Exchange deployments only.

Create an Office 365 Exchange Online Service Account

Click here to see more

Requirements

  • Windows 8 or 8.1

  • Windows Server 2012 or Windows Server 2012 R2

  • Windows 7 Service Pack 1 (SP1)

  • Windows Server 2008 R2 SP1

  • Microsoft .NET Framework 4.5 or 4.5.1 and either the Windows Management Framework 3.0 or the Windows Management Framework 4.0

  • Verify the service account has a mailbox, and is not hidden in the Global Address list

Microsoft Exchange Online

Microsoft Exchange Online message throttling policies set bandwidth limits and restrict the number of processed messages. Throttling is enabled by default in Microsoft Exchange Online. Currently you cannot set policies to disable throttling in Exchange Online; for details, refer to the Microsoft Outlook dev blog. Barracuda is working on a solution to provide this option in the future.

Step 1. Connect to Office 365 Exchange Online

  1. Open Windows PowerShell, enter the following command, and then press Enter:
    $UserCredential = Get-Credential
  2. In the Windows PowerShell Credential Request dialog box, enter your Exchange Online user name and password, and then click OK.

  3. Enter the following command, and then press Enter:
    $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection

    For more information, refer to the Microsoft TechNet article Connect to Exchange Online using remote PowerShell.

  4. Enter the following command, and then press Enter:
    Import-PSSession $Session

  5. Enter the following command, and then press Enter:
    Get-Mailbox -ResultSize unlimited | Add-MailboxPermission -User ServiceAccount@domain.com -AccessRights fullaccess -InheritanceType all -Automapping $false

    Permissions are assigned on existing mailboxes only; if additional mailboxes are added to your organization, you must rerun this command.

    For more information on adding mailbox permissions, see Add-MailboxPermission in the Microsoft TechNet. For information on testing mailbox rights, see Get-MailboxPermission in the Microsoft TechNet.

Step 2. Import from Office 365 Exchange Online

When setting up the Exchange import job in the web interface:

  • Use the GUID@domain-style hostname available when setting up an Outlook profile or use https://testconnectivity.microsoft.com/

Automatically Discover Settings
  1. Log in to the Barracuda Cloud Archiving Service as the admin, and go to Mail Sources > Exchange Integration.
  2. Click Start New Action. In the Select Action page, click Email Import.
  3. In the Select Server page, click Add New Server.
  4. In the Add New Server dialog box, enter a Configuration Name, the email address for the service account and the service account password.
  5. Click Autodiscover
  6. If autodiscover is unable to identify your settings, use the steps in the section that follows, Manually Configure Settings.
Manually Configure Settings

Use the steps in this section only if autodiscover is unable to identify your settings as described above in the section Automatically Discover Settings.

Click here to see more

Step 1. Manually Obtain Exchange Hostname Using PowerShell

  1. Open Windows PowerShell, and connect to Office 365 Exchange Online.
  2. Enter the following command, and then press Enter: 
    $UserCredential = Get-Credential
  3. In the Windows PowerShell Credential Request dialog box, enter your Exchange Online admin username and password, and then click OK.

  4. Enter the following command, and then press Enter:
    $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection

    For more information, refer to the Microsoft TechNet article Connect to Exchange Online using remote PowerShell.

  5. Enter the following command, and then press Enter:
    Import-PSSession $Session  

  6. Enter the following command, and then press Enter:
    Get-Mailbox -Identity <username for service account> | Format-List ExchangeGuid, PrimarySMTPAddress

  7. To determine the Exchange Hostname, combine the ExchangeGuid with the domain portion of the PrimarySMTPAddress in the form ExchangeGuid@domain.com powershell_cmd01.png
  8. To close out the remote PowerShell session, enter the following command, and then press Enter:
    Remove-PSSession $Session

Step 2. Manually Configure Server Settings for Email Import

  1. Log in to the Barracuda Cloud Archiving Service as the admin, and go to Mail Sources > Exchange Integration.
  2. Click Start New Action. In the Select Action page, click Email Import.
  3. In the Select Server page, click Add New Server.
  4. In the Add New Server dialog, click Configure Manually; enter the Exchange details:
    1. Configuration Name – Enter a name to identify the configuration. For example, type: testdomain
    2. Exchange Hostname – Enter the ExchangeGUID@Domain from Step 1 Manually Obtain Exchange Hostname Using PowerShell. For example, type: 2ee256dd-35d2-44e9-89c9-3df7987f93@domain.com
    3. Username – Enter the service account username. For example, type: ServiceAccount@testdomain.com
    4. Password – Enter the password associated with the username.
    5. Exchange 2013 – Select Yes.
    6. Advanced Options – In the Proxy Server field type outlook.office365.com and leave the Global Catalog Server field blank.
  5. Click Save to add your configuration and close the dialog box.

  6. In the Configure Action page, click Continue.

  7. In the View Summary page, select All Users from the Source drop-down menu.

  8. Specify the desired Date and Schedule settings. Click Continue.

  9. Verify the configuration settings in the View Summary page, and then click Submit to add the Email Import to the Scheduled Actions table.

Configure a Microsoft Exchange Server 2010, 2013, and Newer Email Service Account

Read First

Recommended
Microsoft Exchange Server 2010, 2013, and newer set bandwidth limits and restrict the number of processed messages by default which can impact job performance. Barracuda recommends disabling throttling for the service account after following these steps. For details, see:

 

Service Account Password Setting

When configuring the service account, you must set the password to never expire. To set this option in Active Directory (AD), go to the Properties dialog box for the service account, click the Account tab, and in the Account options section, select Password never expires. Click OK to save your settings.

To create an email service account:

  • Verify the service account has a mailbox, and is not hidden in the Global Address List (GAL).
  • (Optional but highly recommended) Establish a user account through Outlook Web Access (OWA) or other source before setting up the email service account.


Use the following steps to set the permissions on Exchange 2010, 2013, or newer where database name is the name of the Microsoft Exchange Server and CUDASVC is the name of the Barracuda service account:

  1. Open your Exchange Management Shell.
  2. At the command prompt, enter the following command, and then press Enter:
    Get-MailboxDatabase | Add-ADPermission -User "CUDASVC" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin
  3. Next, enter the following command, and then press Enter:
    Add-RoleGroupMember "Organization Management" -Member "CUDASVC"

Use the following steps to apply permissions for the service account to a specific MailStore database rather than all databases:

  1. Open your Exchange Management Shell.
  2. At the command prompt, enter the following command, and then press Enter:
    Get-MailboxDatabase -Identity database name | Add-ADPermission -User "CUDASVC" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin

Continue with Microsoft Exchange Server Operations based on your Exchange Server:

Configure a Microsoft Exchange Server 2007 Service Account

Read First

Recommended
Microsoft Exchange Server 2007 sets bandwidth limits and restrict the number of processed messages by default which can impact job performance. Barracuda recommends disabling throttling for the service account after following these steps. For details, see:

Service Account Password Setting

When configuring the service account, you must set the password to never expire. To set this option in Active Directory (AD), go to the Properties dialog box for the service account, click the Account tab, and in the Account options section, select Password never expires. Click OK to save your settings.

To create an email service account:

  • Verify the service account has a mailbox, and is not hidden in the Global Address List (GAL).
  • (Optional but highly recommended) Establish a user account through Outlook Web Access (OWA) or other source before setting up the email service account.
  1. Log in to the Exchange Server as the administrator.
  2. From the Start menu, go to Start > Programs > Microsoft Exchange Server 2007 > Exchange Management Shell.
  3. At the command prompt, enter the following command where Exchange2007  is the name of the Microsoft Exchange 2007 Server and CUDASVC  is the name of the Barracuda service account, and then press Enter:
    get-mailboxserver Exchange2007 | add-adpermission -user CUDASVC -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

  4. In the Exchange Management Shell, enter the following command to add View-Only Administrator permissions, replacing CUDASVC with the name of the Barracuda service account:
    add-exchangeadministrator CUDASVC -role ViewOnlyAdmin

    Important
     If inheritance to the individual mail stores is not enabled on a custom mailbox database, to set the Send As, Receive As, and Administer Information Store permissions at the store level, you must enter the following command in the Exchange Management Shell:
     Add-ADPermission -identity " custom database name " -user " CUDASVC " -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin

    To verify the Send As, Receive As, and Administer Information Store permissions, enter the following command in the Exchange Management Shell, where Exchange2007 is the name of the Microsoft Exchange 2007 Server, dbname is the name of the Exchange mail database, and CUDASVC is the name of the Barracuda service account:
    get-mailboxdatabase Exchange2007\dbname | get-ADpermission -user CUDASVC | Format-List

Continue with Microsoft Exchange Server 2007 Operations

 

O365

 
Last updated on
Previous Article Next Article