Skip to content

New-Managementroleassignment Is Not Recognized 2007

Configuring permissions to update OWA signatures and settings

By default, Exclaimer Signature Manager Outlook Edition updates OWA signatures and settings from each client desktop computer using ExSync. However, if you have users who access their email only by OWA and rarely log on to your domain, you can choose to update signatures and settings from the server.

In this case, specific permissions are required for the user account used to update the signatures & settings. Required permissions will vary depending on the version of Microsoft® Exchange your mailbox server is using:

Microsoft® Exchange 2003 / Microsoft® Windows® Small Business Server 2003

The user account used must have the Exchange Administrator role. To achieve this, please follow the steps below on a Microsoft® Exchange server within your organization:

  1. Click Start > All Programs > Microsoft Exchange > System Manager:

  2. Right-click the organization or the Administrative Group where you want to delegate administrative permissions, and then click Delegate control:

  3. The Exchange Administration Delegation Wizard starts. Click Next.

  4. On the Users or Groups page, click Add.

  5. In the Delegate Control window, click Browse.

  6. In the Select Users, Computers, or Groups window, click the appropriate location in the Look in box and click the name of the user that you wish to use:

  7. In the Delegate Control dialog box, choose Exchange Administrator as the Role and then click OK:

  8. The user that you added is displayed in the Users and Groups list.

  9. Click Next.

  10. Click Finish. The user account you wish to use now has the required permission. 

If you have multiple Administrative Groups you will need to repeat the steps above for each one.

Microsoft® Exchange 2007 / Microsoft® Windows® Small Business Server 2008

The specified user account must have the Store Admin permission. To achieve this, please follow the steps below.

  1. Click Start > All Programs > Microsoft Exchange Server 2007 > Exchange Management Shell:

  2. A black PowerShell window is displayed. Type the following command and press ENTER:
    (Replacing with the user account that you wish to use.)


  3. The user account you wish to use now has the required permission.

Microsoft® Exchange 2010 / Microsoft® Exchange 2013 and above / Microsoft® Windows® Small Business Server 2011

The specified user account must have the Store Admin permission and also the Application Impersonation role. To achieve this, please follow the steps below.

  1. Click Start > All Programs > Microsoft Exchange Server 2010 > Exchange Management Shell:

  2. A black PowerShell window is displayed. Type the following command and press ENTER:
    (Replacing with the user account you wish to use.)


  3. Type the following command and press ENTER:

  4. Type the following command and press ENTER:
    (Replacing with the user account you wish to use.)


  5. Close the PowerShell window.

  6. The user account that you wish to use now has the required permission.

Microsoft Office 365

If your mailboxes are hosted on Microsoft Office 365, you need to grant permissions to allow a user to update the signature for everyone in your organization. To do this, follow the steps below on a computer within your organization with Windows PowerShell:

  1. Open Windows PowerShell.

  2. Enter the following command to connect to Office 365:

    Import-PSSession (New-PSSession -ConfigurationName Microsoft.Exchange -Credential $null -ConnectionURI https://ps.outlook.com/powershell -Authentication Basic -AllowRedirection) -AllowClobber

  3. When prompted to enter credentials, type the email address and password for your Office 365 Administrator account.

  4. Enter the following command to setup the required credentials, replacing "Username here" with the user account that you wish to use:

    New-ManagementRoleAssignment -Role ApplicationImpersonation -User (Get-User -Identity "Username here" | Select-Object).Identity

    If you receive an error reading: ”New-ManagementRoleAssignment is not recognized as the name of a cmdlet, function, script file, or operable program” please contact Exclaimer Support for assistance.

  5. Close the PowerShell window. The user account you wish to use now has the required permission

 

If you are trying to run the new MailboxExportRequest and getting above error here is what will help you to resolve the issue.

  • You can't use the Exchange Management Console (EMC) to create a mailbox export request. You must use the Shell. ( too bad I wish this was an option from GUI as well)
  • You have to install SP1 or newer on your Exchange 2010 Server
  • Create Shared folder with fallowing permissions “grant Exchange Trusted Subsystem read/write permission”
  • This is Simple File Sharing permissions ( NOT NTFS) see the picture
  • You have to run New-ManagementRoleAssignment first , otherwise you will get the error above
  • Once you run the commons close tour PS and re-open it

Example

Assign Role

******user name "BakinJM" change this to your own****

New-ManagementRoleAssignment –Role “Mailbox Import Export” –User “BakinJM”

Export Run

New-MailboxExportRequest -Mailbox BakinJM -FilePath "\\PC1\pst$\BakinJM.pst

Monitor Process

Get-MailboxExportRequest | Get-MailboxExportRequestStatistics

Clear the previous Request

Get-MailboxExportRequest | Remove-MailboxExportRequest

Import PST

The most comprehensive and easy to fallow  post in this regard IMO…..

Henrik Walther

  • A look at the Import/Export Mailbox improvements in Exchange 2010 Service Pack 1 (Part 2

Steve Goodman

  • Create a Mailbox Export Request

http://technet.microsoft.com/en-us/library/ff459227.aspx

  • Set Permissions for Shared Folders

http://technet.microsoft.com/en-us/library/cc726004.aspx

Respectfully,
Oz Casey, Dedeal ( MVP north America)
MCITP (EMA), MCITP (SA)
MCSE 2003, M+, S+, MCDST
Security+, Project +, Server +
http://smtp25.blogspot.com/ (Blog)
http://telnet25.wordpress.com/ (Blog)