A custom application cannot pull information from Exchange Server

Article translations Article translations
Article ID: 2568094 - View products that this article applies to.
Expand all | Collapse all

Symptoms

Note This article is applicable in a dedicated deployment of the Microsoft Business Productivity Online Suite.

You may have a custom application whose purpose is to pull information from Microsoft Exchange Server. This includes information such as Out of Office and Free/Busy data. However, the custom application cannot perform functions of this kind.

Cause

This issue occurs because the custom application has not been provisioned yet or is provisioned incorrectly. To perform functions of this kind, the custom application has to have Exchange Web Services (EWS) impersonation rights.

Resolution

When your dedicated environment of the Microsoft Business Productivity Online Suite was deployed, a specific role group was set up to let you implement EWS impersonation rights. In the Self-Service Guide for Exchange Online, this role group is defined as follows.
Collapse this tableExpand this table
Impersonation Rights for Exchange Web Service ApplicationsE2010-MSO Self Service - EWS Application ImpersonationSG members (Service Accounts) will be granted impersonation rights to all mailboxes in the Exchange organization for use with Exchange Web Service applications.

If this role group was not provisioned for you, you have to file a new Change Request to have the role group provisioned.

This is how the role group will look on the Microsoft provisioning side:

get-rolegroup "XF-CUS-EWS App Imp" | fl name,*linked*
Name: XF-CUS-EWS App Imp
LinkedGroup: DOMAIN\E2010-MSO Self Service - EWS Application Impersonation
The role group corresponds to a security group that you provision on your side. That group is the E2010-MSO Self Service - EWS Application Impersonation security group. After the role group is provisioned on the Microsoft side, you must make sure that the service account that the application is using is a member of the E2010-MSO Self Service - EWS Application Impersonation security group in your environment.

More information

For more information about how to configure Exchange Server 2010 impersonation rights, visit the following Microsoft TechNet website:
http://technet.microsoft.com/en-us/library/ff793352.aspx

Properties

Article ID: 2568094 - Last Review: June 21, 2014 - Revision: 3.0
Applies to
  • Microsoft Business Productivity Online Dedicated
  • Microsoft Exchange Online Dedicated
  • Microsoft Business Productivity Online Suite Federal
  • Microsoft Exchange Server 2010 Standard
  • Microsoft Exchange Server 2010 Service Pack 1
Keywords: 
vkbportal226 KB2568094

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com