To ensure the connectivity of Microsoft Exchange Server, you must specify a user account that has access permission for all Microsoft Exchange Server mailboxes in your organization. Ensure that the certificate for the URL is valid.

The user account for the EWS (Exchange Web Services) connector should be the same user account that you used to install d.velop documents.

You must ensure that the user account has the necessary permissions for Microsoft Exchange Server, particularly the right Exchange Impersonation (role Exchange Impersonation). This right can be used to perform actions on all the mailboxes on behalf of the relevant owner.

You only require a Microsoft Exchange mailbox for the user account for the impersonation if you are using d.ecs content crawler. For d.velop documents in Microsoft Outlook, a Microsoft Exchange mailbox for the impersonation is not required.

You can change the permissions with the following PowerShell command:

New-ManagementRoleAssignment –Name <impersonationAssignmentName> –Role ApplicationImpersonation -User <impersonationAssignmentUser>

If you only want to grant rights for specific mailboxes to the user account, you can restrict the permissions using a filter for a regular, filtered recipient scope (RecipientRestrictionFilter).

For example, you can enter a PowerShell command to grant an Exchange impersonation for the service account to mailboxes 1 and 2.

Example

New-ManagementScope -Name d3oneImpersonationScope -RecipientRestrictionFilter { (Name -eq "Mailbox1") -or (Name -eq "Mailbox2") }
New-ManagementRoleAssignment -Name d3oneImpersonation -Role ApplicationImpersonation -User "serviceAccount" -CustomRecipientWriteScope d3oneImpersonationScope

Alternatively, you can configure the Exchange impersonation in Office 365 or Microsoft Exchange Online under Exchange Admin Center > Permissions.

You can find more information about filtering under “Understanding management role scope filters” in the Exchange Server 2013 documentation on the Microsoft Docs website.

To ensure that d.velop documents in Microsoft Outlook works in combination with Microsoft Exchange Server, you must create and assign a special throttling policy for the service user with the role ApplicationImpersonation on the server with Microsoft Exchange Server.

Microsoft Exchange Version 2013 or higher

Create the following policy in the Microsoft Exchange management console.

New-ThrottlingPolicy -Name d3onepolicy -ThrottlingPolicyScope Regular -IsServiceAccount -MessageRateLimit unlimited -RcaCutoffBalance Unlimited -RcaMaxBurst unlimited -RcaRechargeRate unlimited -RcaMaxConcurrency unlimited -RecipientRateLimit unlimited -EwsMaxConcurrency unlimited -CpaMaxConcurrency unlimited -EwsCutoffBalance unlimited -EwsMaxSubscriptions unlimited 

Assign the policy to the service user.

Set-ThrottlingPolicyAssociation -Identity "user name" -ThrottlingPolicy d3onepolicy