Prepare for a Riva Server - Outlook Profile MAPI Exchange Connection

The purpose of this article is to describe how to prepare for a Riva connection to Exchange On-Premise that uses Exchange Direct Messaging API (MAPI).

Supported Exchange on-Premise Systems: Riva uses Exchange Direct MAPI to connect to the following Exchange On-Premise systems:

• Exchange 2010
• Exchange 2007 SP1 Rollup 1 or higher
• Exchange 2003 SP1 or higher

To prepare to connect to Exchange On-Premise

1. Prepare the Windows system hosting the Riva On-Premise server
2. Prepare an Exchange service account for the Riva connection
3. Prepare the user mailboxes that Riva On-Premise will sync

Step 1: Prepare the Windows System Hosting the Riva Server

Confirm that the following has been completed:

• A 32-bit version of the Outlook must be installed. Because Riva is a 32-bit application, it needs to work with a 32-bit version of Outlook even if it is installed on a 64-bit Windows system. For more information, see MAPI initialization error: System.Runtime.InteropServices.COMException (0x80004005).
• An Outlook profile for the Riva connection account to Exchange is not required.
• Ensure that local Windows and corporate firewalls are configured to permit the Riva server MAPI access to or from the Exchange CAS. See Firewall settings for Riva.

Step 2: Prepare the Riva Connection Account for Exchange

Riva On-Premise uses a single connection to Exchange On-Premise to access the user mailboxes. That connection must be configured with the credentials of an Exchange service user account mailbox that has been assigned permissions to impersonate into the user mailboxes that Riva will sync. During each sync cycle, Riva will connect to Exchange and then access each user mailbox that is assigned to an enabled Riva sync policy. The Exchange service user account is referred to as the Riva connection user.

To prepare the Riva connection user

1. Select an existing Exchange service user account mailbox, or create an AD/Exchange user (for example, svc_rivasync). For logon credentials, ensure that you know the Active Directory username that uses one of the following formats:

   • The UPN (universal principal name): ADusername@AD_Domain_Name - for example svc_rivasync@mycompany.com, or

   • The SAM username: AD_Domain_Name\ADusername - for example MYCOMPANY\svc_rivasync, and

   • The logon password

   Note: If a password change policy forces credentials to expire, ensure that the credentials are updated in Riva at the same time.

2. Configure this user as a fully enabled Exchange mailbox user that is visible on the Exchange Global Access List (GAL).

3. Exclude this account from the Domain Admins group.

4. Assign delegate full access permissions in Exchange from target user mailboxes to the Exchange service user mailbox to enable impersonation access to user mailboxes that Riva will sync. Note: Exchange "ApplicationImpersonation Role permissions" are not supported.

   • Exchange 2010 and 2007 - Configure Full Access Permissions (using Exchange Management Console), or

   • Exchange 2010 and 2007 - Configure Full Access Permissions (using Exchange Management Shell), or

   • Exchange 2003 - Configure Full Access Permissions (using Microsoft Management Console).

5. Test access to the mailboxes to be synced by the Riva connection user.

Step 3: Prepare the Target User Exchange Accounts

For each user mailbox that Riva will sync, complete the following actions:

• Primary SMTP Email Address - Ensure that the user mailbox primary SMTP reply-to email address value in Exchange matches the primary email address value of the user's CRM account email address.

• Global Access List - Ensure that the user mailbox is visible in the Global Access List (GAL). If Exchange-enabled groups will be used to add mailboxes to the sync policy, the group must also be visible in the GAL.

• Initial logon to Exchange - Ensure that the user has logged into their Exchange mailbox at least once by using Outlook or Outlook Web Access to create the mailbox folders, calendar, and address book.