MachPanel Knowledgebase

Azure App Configuration for Partner Center Management

zohaib.shaikh — Thu, 03 Nov 2022 12:16:55 GMT

Summary

This article provides a summary for Azure App Configuration required for Partner Center Management

Applies To

This article applies to MachPanel build version 7.0.41 and above.

Important Note:

[A new RefreshToken will be required after applying permissions in Microsoft Entra ID (AKA Azure) app.]
Please follow below article first, If you have not reviewed it yet.

https://kb.machsol.com/Knowledgebase/54511/CSP-Module-Configuration-Guide-for-MachPanel-Automation-Solution

Steps Procedure

You will be asked to fill following details while adding profile which can be captured using below section:

COLLECTING DETAILS TO ADD CSP PROFILE

Enable Permissions for 'Microsoft Partner Center' and 'Windows Azure Active Directory Portal':

Login to Microsoft Partner Center click on "Account Settings" >> "User Management.
Under User Management you can click Add User.
For CSP Service Account following "roles and permissions" are required:

Summary of Steps to perform on Microsoft Azure Portal:

Go to: https://portal.azure.com/ and login using your CSP Service Account, go to "App Services", then navigate to "Manage" >> "App Registrations" >> "New registration".

You will be presented with options to "Register an application".
Web Redirect URL shall be set as ‘localhost’ with ‘http’ protocol and any port available between 8400 and 8999 Like: ‘http://localhost:8400’
Hit Register to register this application.

Click on your desired Application, and click the option "Manifest"
Locate "requiredResourceAccess"

and replace as explained in attached "API Permissions.txt" (download the file from attachment link in this KB).
One more thing, as a new user (admin agent) account and app is configured, please make sure that API Permissions are all granted admin consent by clicking on button (need super admin account impersonation/elevation) depicted below in Microsoft Entra ID (AKA Azure).

Finally, click on "Certificates & Secrets" from Menu and create "New client secret" and save it with you as you will need this later (this (Value) of newly created Client Secret will be used later as $webAppSecret in commands below).

Summary of Steps to perform on MachPanel Control Panel Server Machine:

Execute commands below to get your - *Refresh Token: - to be inserted into MachPanel Profile settings.
Replace Values in below variables (highlighted) as per your profile and run on PowerShell.

$webAppId = '00000000-0000-0000-0000-00000000000'

$webAppSecret = 'fjrnf34ffn43oif34iofj3ifjfoi34foi34fj' | ConvertTo-SecureString -AsPlainText -Force

$tenantId = '00000000-0000-0000-0000-00000000000'

$credential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $webAppId,$webAppSecret

$Token = New-PartnerAccessToken -Scopes 'https://api.partnercenter.microsoft.com/.default' -ServicePrincipal -ApplicationId $webAppId -Credential $credential -Tenant $tenantId -UseAuthorizationCode

Enter CSP Service Account Username/Password and MFA Key when prompted during command execution to generate token.
To get token value write $token.refreshtoken and hit Enter. Copy value of Refresh token.

Once done insert all required details of MachPanel CSP Profile in Partner Center Management section.

How to add Calendar permissions in Exchange account & Mailbox?

mudesira.munir — Wed, 17 Aug 2022 16:36:31 GMT

Summary

This article provides a summary on how to add Calendar permissions in Exchange account & Mailbox.

Applies To

This article applies to MachPanel all versions.

Calendar Permissions to Exchange Account:

You can manage calendar permissions from following path: Home >> Service Director >> Exchange Hosting >> Account. Click Manage in front of Exchange Account.

Now select Calendar Permissions tab.

Select permission level for default SG and provide custom permissions.

Anonymous: Select permission level for e.g. None, Availabilty Only, contributor, Editor, Owner, Reviewer etc.
Default: Select default permission level for SG groups.
testcompany Exchange SG: Select SG Group.

Custom Permissions: It will show the Custom permissions that has been added to Groups already.

To add permissions provide below and click Add.

Select Group
Permission: Select Permission

Click Save when done or click Save and Apply on all mailboxes.

Calendar Permission For Mailbox users:

Click on Manage and then select Mailboxes tab. Select mailboxes for which you wish to enable and manage calendar permissions.
Then select Calendar Permissions.
To add new permission, click Add Permissions as shown below.

Member: Select member/mailbox
Permission Level: Select Permissions.
1. Create Items
2. Folder Owner
3. Read Items
4. Folder Contact
5. Create SubFolders
6. Folder Visible
7. Edit Own
8. Delete Own
9. Edit All
10. Delete All

Click Save when done.

Mailbox permissions enabled or changed and it gets stuck with status [syncing]

mudesira.munir — Thu, 06 Aug 2020 16:25:09 GMT

Summary

This article describes issue with “Permissions” where the mailboxes remain in “Syncing” status.

Applies To

Machpanel (Exchange mailboxes)

Details

Please note that the mailboxes being operated on “SHOULD NOT” have any Pending Jobs. If there are any pending jobs related to the mailboxes being worked on, the “Syncing” status will not change.

When Permissions on mailbox(es) are applied

and you see permissions are not getting synced, i.e. mailbox on which permission are applied is with [syncing] status for quite a while as shown above.

Solution

Check Exchange Group Actions
All jobs related to mailbox should be completed or canceled for sync to work.
Also Provisioning service must be running.

Question: What will be effect of problematic mailboxes on

Other mailboxes of the same org
Answer: will get processed without any issue
Mailboxes in other organizations
Answer: will get processed without any issue

i.e. only particular mailbox who has pending job(s) gets stuck.

Lastly, if its a case of MachPanel which has been recently updated to latest build, then there is a table that needs to be updated and all records for all mailboxes need to be synced before proper status for all mailboxes is visible in panel interface. Following query can be executed to check status of overall sync.

Select * from HB_tblExchangeMailboxSync

where sendas=0 or SendOnBehalf=0 or FullAccess=0 or CalenderPermissions=0If issue is still persisitent:

If issue is still persisitent / permissions sync not working, take following steps:

Enable Advanced logging.
Enable logging for thread: GroupActionWorkMailBoxPermissions. If there are multiple control servers, disable thread on all control servers except the one on which problem is being reviewed.
Review log files starting with:
◦ MBPermissionsSync
◦ SyncMailboxPermissions
After problem is solved, enable GroupActionWorkMailBoxPermissions thread on all servers, disable logging for Thread.
Disable Advanced logging.

To find duplicates following queries can be used:

================================================

Select UserLDAPUrl from HB_tblExchangeMailboxes

group by userldapurl having count(Userldapurl) > 1

===============================================

Select LDAPGroup from HB_tblExchangeDistributionLists

group by LDAPGroup having count(LDAPGroup) > 1

==============================================

Select ContactLDAPUrl from HB_tblExchangeMailContacts where HostedOrgId = (Select HostedOrgId from HB_tblExchangeOrganizations Where HostedOrgId=HB_tblExchangeMailContacts.HostedOrgId)

group by ContactLDAPUrl having count(ContactLDAPUrl) > 1

==============================================

If a duplicate is found, find all records against the LDAP in that table and keep 1 record against the Org.

Enable Permissions for CSP account

rehan_waseem — Thu, 26 Apr 2018 07:48:53 GMT

Summary

This article shows what permissions are required for CSP account used by MachPanel.

Applies To

This article applies to MachPanel all versions.

To complete the MachPanel CSP Module configuration and to enable permissions for "Microsoft Partner Center" and "Windows Azure Active Directory Portal", please review section "SECTION 3: COLLECTING DETAILS TO ADD CSP PROFILE" of KB article "CSP Module Configuration Guide for MachPanel Automation Solution".

Problem in changing Access Permissions on a Mailbox. (Full Access)

mudesira.munir — Wed, 09 Aug 2017 02:26:15 GMT

Summary

This article entails steps how to resolve problem in changing Access Permissions (Full Access) on a Mailbox. The operation appears to go through, however if you click away and then click back to the permissions nothing has gone through.

Applies To

MachPanel

Reason:

Missing RSAT Feature on mailbox server.

This is happening because the operation is failing on your exchange mailbox server because it does not allow AD Commands to be executed. Try executing Get-ADUsercommand on your exchange mailbox server that is integrated into your control panel and you will notice an error.

Moreover, the RSAT feature is not just a requirement of MachPanel, rather it is part of Microsoft Best Practices and should have already been installed.

Solution

You have to allow execution of AD related commands from your exchange server. If you are missing this, you can install it now by following instructions on Microsoft link below:

https://technet.microsoft.com/en-us/library/bb691354(v=exchg.150)

Commands to execute are as follows:

Install-WindowsFeature AS-HTTP-Activation, Desktop-Experience, NET-Framework-45-Features, RPC-over-HTTP-proxy, RSAT-Clustering, RSAT-Clustering-CmdInterface, RSAT-Clustering-Mgmt, RSAT-Clustering-PowerShell, Web-Mgmt-Console, WAS-Process-Model, Web-Asp-Net45, Web-Basic-Auth, Web-Client-Auth, Web-Digest-Auth, Web-Dir-Browsing, Web-Dyn-Compression, Web-Http-Errors, Web-Http-Logging, Web-Http-Redirect, Web-Http-Tracing, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Lgcy-Mgmt-Console, Web-Metabase, Web-Mgmt-Console, Web-Mgmt-Service, Web-Net-Ext45, Web-Request-Monitor, Web-Server, Web-Stat-Compression, Web-Static-Content, Web-Windows-Auth, Web-WMI, Windows-Identity-Foundation, RSAT-ADDS

This will install the required features and alert for the ones that are already installed.

Alternatively you can only install RSAT Feature using following command and avoid the rest:

Install-WindowsFeature RSAT-ADDS

Thank you for your cooperation.

Fix Security Permissions or Sync Security group

mudesira.munir — Thu, 06 Oct 2016 05:19:44 GMT

Summary

This article provides a summary on "Fix Security Permissions" also called Sync Security Group job, and tells what the fix security permissions function does in MachPanel.

Applies To

This article applies to MachPanel all Versions.

Fix Security Permissions

To perform Fix Security Permission, Navigate to Home » Customer Manager » Subscriptions List
Select your desired subscription name and Click on Fix security Permissions button as shown below:

Alternatively, if you want to perform the operation for ALL Organizations in a single go, you can navigate to: Home » Service Director » Exchange Hosting » Exchange Accounts and click on Fix Security Permissions for all Organizations button.

What Sync Security Group does?

Fix Security Permissions or Sync Security group performs following tasks:

Creates and sets permissions of Org Exchange SG, if not present already.
Creates RAL and ABP if not present.
Updates ABP of each mailbox in org.
For each mailbox in Org

Set AL, GAL, OAB of AD User
Set Calendar folder permissions for Org Exchange SG, Anonymous and Default user.
Reset CustomAttribute1
Add mailbox in Org Exchange SG
EmailAddress policy enabled is unchecked.

For each distribution list, dynamic Distribution List in Organization

Add DL in Org Exchange SG
EmailAddress policy enabled is

Set Offline Address Book Schedule
Sets default PublicFolderMailbox of each Mailbox according to Organization setting.
Calls Update AL, GAL, AL, RAL, OAB

Error on application trust level

mudesira.munir — Mon, 09 Feb 2015 08:12:37 GMT

Summary

This article provides a summary on how to fix error regarding Application trust level when applying hot-fixes.

Applies To

This article applies to all Versions of MachPanel.

Symptoms Or Error MSG:

The application attempted to perform an operation not allowed by the security policy. To grant this application the required permission please contact your system administrator or change the application's trust level in the configuration file.

Steps to Resolve

It occurs when system settings locked the files that you have downloaded to apply the fix. To resolve this issue you will have to unlock the files in MachPanel directory please follow the steps below:

Download the Streams.exe from http://technet.microsoft.com/en-us/sysinternals/bb897440.aspx
Place the Streams.exe inside MachPanel installation directory which is usually C:\Program Files\MachSol\MachPanel Control Server
Open windows command prompt
Change directory to the folder where you have copied Streams.exe, you can use command cd C:\Program Files\MachSol\”MachPanel Control Server”
Execute this command streams.exe -s -d *.*
Perform IISRESET.
Check your issue again.

Mailbox Management in MachPanel Exchange

rehan_waseem — Tue, 15 Apr 2014 01:43:55 GMT

Summary

This article gives information about management of Exchange Mailbox Features via MachPanel interface.

Applies To

Applies to MachPanel v6 and above

Microsoft Exchange Mailbox Features management in MachPanel

Once a mailbox is created in MachPanel you can view and mange all features by clicking on Mailbox name as shown below:

*Note: Outlook profile can also be downloaded from options if mailbox is created on required SPLA/Template.

Viewing User Mailbox properties and Template details

Under General tab you can change display name and templates etc. Also Last login Date Time is also added as new feature in latest build. See the snapshot below:

Further you can manage below User Mailbox features:

Manage Email Address
Mail Flow Settings
Advanced (Storage /SPLA and features of Mailbox)
Permissions (Send on Behalf, Send As, Full Access)
Set Password
Mailbox Database
Personal Archive Settings
Unified Messaging
Automatic Replies
Distribution List Membership
Calendar Permissions
Mobile Devices
In-Place hold

Group Action for Bulk Operations on Mailboxes:

Under Group Actions in General setting you can for example change Mailbox Templates, Process external meeting messages for room and equipment mailboxes etc.

Room Mailbox:

For room mailbox you can set Booking Request default for new mailbox under Exchange server group settings as shown below:

Adding Email Addresses:

A mailbox can have multiple email addresses or aliases. This allows the mail box to receive messages that are addressed to any one of these e-mail addresses. Two types of Email aliases can be added:

SMTP
Custom

Click on the mailbox name for which you wish to add email address. Select Email Address tab, enter the desired value in Email Address box and click on Add button.

Set Email Forwarding:

Click on the mailbox name for which you wish set mail forwarding. Click on the Mail Flow Settings tab and enable the Enable email forwarding checkbox. Enter the address where mail shall forward in Forward to box and click Save button.

You can also provide recipients limit and delete item retention in days.

A provider can "Allow to edit custom attributes" to Reseller, Customer, contact, Staff user under access permissions of Exchange

The Restrictions displays following:

Accept Message From: There are two options to select from:

All senders: If selected, message will be accepted from any sender.
Only senders in the following list: If you selected, the message will be accepted only from the addresses selected from the list.

Reject Message From: There are two options to select from:

No senders: If selected, message will never be rejected.
senders in the following list: If you selected, the message will be rejected if coming from the addresses selected from the list.

Click on Save button when done.

Manage Mailbox Features under Advanced tab:

When a mailbox is first created it inherits the OWA and Service Access (POP/SMTP/IMAP) from the service plan assigned to exchange organization. In some cased you may want to change service features for individual mailboxes. You may do this easily via web interface under Advanced tab.

IMPORTANT: The Advanced tab is visible only for those mailboxes for which Mailbox Templates are NOT in use or only Custom Template is applied.

Manage Permissions:

Under Permissions tab you can manage following permissions:

Send On Behalf
Send As
Full Access

Note: If Exchange provider is 2013 (CU9) or later display checkbox under mailbox permissions, SendOnBehalf /Send As "Message copy for Send On Behalf / Send As enabled" [Checkbox]

Manage Mailbox Databases:

In order to change a mailbox database Select Mailbox Database button and select the desired DB from the drop down list as shown in the snapshot below:

Manage Personal Archive Setting:

Click on the Personal Archive Settings tab. You will see the following options:

Enabled: Check it if you want it to enable.
Personal archive database : Select personal archive database.
Warning Quota (MB): Provide warning quota in MB or check unlimited.
Quota (MB): Provide quota in MB or check unlimited.

Then click on Save button.

Manage Unified Messaging:

If you get Error Message Unable to read policies from Exchange Server or customer is not assigned any UM Policy in exchange server group.

Please assign customer Exchange UM Policies, MachPanel will fetch all policies and show you under Exchange UM polices tab. Click on Edit Assignment to assign policies to your Customer/Resellers.

Click on Activate under Unified Messaging tab of the selected Mailbox.

Manage Automatic Replies:

In order to manage Automatic Replies select tab as shown below and select Enable:

Send replies only during this time period: Select to define time period.
Send a reply once to each sender inside my organization with the following message: Type your message here.

Send automatic reply messages to senders outside my organization: Select to send

Send replies only to senders in my Contacts list

Send replies to all external senders

Send a reply once to each sender outside my organization with the following message: Type and save your reply.

Manage Distribution List membership:

In order to manage Distribution List membership on a selected mailbox select Distribution List membership tab as shown below:

Manage Journaling:

In order to manage journaling select Journaling tab:

Manage Calendar Permissions:

In order to manage calendar permissions select Calendar Permissions tab and click Add Permissions button as shown below:

In mailbox details, under calendar permissions tab, Default & Anonymous groups will also be listed and their permissions can be changed.
Please note that Default and Anonymous user permissions are set to None by Fix Security Permissions operation.

Management of Public Folders

mudesira.munir — Mon, 14 Apr 2014 01:50:44 GMT

Summary

This article provide a summary on the management of public folders.

Applies To

This article applies to all version of MachPanel.

Creation & Management of Public folders

To create a new Public Folder, click on Add Public Folder Button and provide the required details for e.g. as shown below:

Mail Enabled Public Folder

Mail Enable folder shows the following buttons:

1. General: You can allow/disallow posting to the public folders. You can also allow/disallow posting to external users as well as internal users.

Add Permissions to Public folder posting: Click on Add Permissions link under Public folder posting as shown in above snapshot:

2. Email address: You can also add email addresses to it.

3. Mail flow Settings: You can manage Email forwarding settings to mailboxes.

4. Permissions: You can also adjust permissions such as Send on Behalf and Send As.

Error when creating new mailbox: "You don't have sufficient permissions. This operation can only be performed by a manager of the group. LDAPContainter: CNOAB:"

zohaib.shaikh — Tue, 04 Jan 2011 19:38:51 GMT

Summary

Error when creating new mailbox: "You don't have sufficient permissions. This operation can only be performed by a manager of the group. LDAPContainter: CNOAB:"

Applies To

Exchange 2010
Exchange 2007
MachPanel All Versions

Symptoms

When you attempt to create a new mailbox under migrated organization.
Also, in case the user name set in MachPanel responsible for provisioning is changed. You get following error:
"You don't have sufficient permissions. This operation can only be performed by a manager of the group. LDAPContainter: CNOAB:"

Cause

Manager on Security Group Created by MachPanel for an organization is missed.

Solution

Please follow the given below steps to fix the error:

Go to MachPanel Configuration Studio and check the MachPanel Active Directory Account.

Go to Active Directory and check manage by permissions for Security Group of OU created by MachPanel.

Select the account for manage by permission for security group depicted in MachPanel Configuration Studio.

Check and confirm by creating a new mailbox from MachPanel.

ERRMSG: Give Security Group Permissions on OU Failed

junaid.qazi — Tue, 24 Aug 2010 12:09:52 GMT

Summary

This article describes how to resolve an Error Message "Give Security Group Permissions on OU Failed: Error Processing Command: Active Directory Operation Failed on ... " (snapshot attached) which normally appears while undergoing Exchange Provisioning.

Applies To

MachPanel all versions.

Symptoms

Exchange Provisioning fails when necessary Permissions are not set on Exchange Trusted Substem.

Solution

There are few permissions that need to be granted for Exchange Trusted Subsystem found in Active Directory Users and Computers under the desired Organizational Unit created by MachPanel. This issue can be successfully resolved by performing the following:

Go to Active Directory Users and Computers
Right click on the desired Organization Unit (OU=Hosting) - Snapshot Attached
- Click Exchange Trusted Subsystem
- Check "Full Control" in Permissions for Exchange Trusted Subsystem - Snapshot Attached
Go to Advanced Security Settings for Hosting
- Under the Permissions Tab, double click on Exchange Trusted Subsystem - Snapshot Attached
- View Object tab under Permission Entry for Hosting
- Select "This object and all descendant objects" - Snapshot Attached
- Check "Full Control"
- Apply the Permissions

This way, the desired Permissions will be granted and the error message will be resolved

Exchange 2010 - Setting Permissions And Necessary Modification On The User

zohaib.shaikh — Tue, 10 Aug 2010 17:12:58 GMT

Summary

The article helps in setting the desired permissions and necessary modifications on the service user (any user other than the Administrator) we setup in MachPanel under Active Directory Domains section when dealing with Exchange 2010.

Applies To

MachPanel all versions.
MS Exchange 2010

Symptoms

Provisioning fails when necessary Permissions and Modifications are not done on the user other than Administrator in Exchange 2010 Environment.

Provider: MachPanel Hosted Exchange

»» Getting Exchange Server Group(s)

»» Getting Exchange Server(s)

»» Getting Exchange Hosting Information

»» Start: Create Organization

»» INFO: Creating zedtest

»» Error: All hosted groups security Group 'RootSecurityGroup MachPanel' could not be created. Details: Create Security Group: Couldn't find object "hmclab.test/Users/hmcadmin". Please make sure that it was spelled correctly or specify a different object. Reason: The recipient hmclab.test/Users/hmcadmin isn't the expected type.

Solution

There are few modifications that need to be done for Users other than Administrator in case of Exchange 2010 environment. This issue can be successfully resolved by performing the following:

Make an email address for the specific user in Exchange using Exchange Management Console (EMC)
Add the user to Exchange Trusted Subsystem Security Group
- Right click Trusted Subsystem Security Group and goto Properties
- Click on the Members tab
- Add the specific user
Go to Active Directory Users and Computers
- Right click on the RootSecurityGroup in Hosting
- Click on the Management tab
- Select the required user

This way, the desired Permissions will be granted.

Error In Sending Mail. Details: Mailbox Unavailable. The Server Response Was 5.7.1. Clinet Does Not Has Permission To Send As This Sender

fawad.khan — Wed, 07 Oct 2009 09:30:16 GMT

Summary
Error In Sending Mail. Details: Mailbox Unavailable. The Server Response Was 5.7.1. Client Does Not Has Permission To Send As This Sender

Applies To
MachPanel all versions

Solution
To configure automatic emailing feature in MachPanel you need to provide SMTP information. In Microsoft Exchange based email environment, follow these steps:

1. Create an Exchange mailbox for SMTP authorization. For example, app.mailing@domain.com

2. Go to Home » System Configuration » Emails Configuration » Email Delivery Settings

Enter Internal/external IP of Edge/HUB server in SMTP server field.

Enter 25 in port number field. Enter 995 in port number field if it is being protected.

Turn on SMTP server requires authentication.

Enter app.mailin@domain.com in SMTP user name field and provide its password.

Go to Home » System Configuration » Emails Configuration » Email Templates and specify the ‘to’ and ‘from’ email addresses along with relevant fields.

IMPORTANT: You should ensure that app.mailing@domain.com can send email as your sales/support account. For example, if your support account is support@oxyhosting.com and you want to send emails using app.mailing@domain.com then it should have Send As permission on support@oxyhosting.com account.

To set Send As permission:

Start the Exchange Management Console.

In the console tree, click Recipient Configuration.

In the result pane, select the mailbox (support@oxyhosting.com in our example) for which you want to grant the Send As permission.

In the action pane, under the mailbox name, click Manage Send As Permission. The Manage Send As Permission wizard opens.

On the Manage Send As Permission page, click Add.

In Select User or Group, select the user (app.mailing@domain.com in our example) to which you want to grant the Send As permission, and then click OK.

Click Manage.

On the Completion page, the Summary states whether the Send As permission was successfully granted. The summary also displays the Exchange Management Shell command that was used to grant the Send As permission.

Click Finish.

After this you need to verify emailing works. To do this, Click Send Test Email button.

Domain User Which Is Being Used For MachPanel Should Be Member Of Following Groups For Standalone Exchange

mudesira.munir — Tue, 28 Oct 2008 07:04:08 GMT

Summary

Domain User for MachPanel (MPAdmin) should have privileges according to the information mentioned in this article.

Applies To

MachPanel all versions

Solution

Step-1: Create Domain Administrator Login (MPAdmin) if not present already

It is recommended that you create a new active directory user “MPAdmin” and call it the Domain Administrator Login. This will be the user responsible for connecting with Active Directory.
Follow below mentioned steps for creating new active directory user(MPAdmin):

Click Start, point to Settings, click Control Panel, double-click Administrative Tools, and then double-click Active Directory Users and Computers.
In the console tree, click Users.
Right click Users and point to New, and then click User.
In First name, type the user's first name.
In Initials, type the user's initials.
In Last name, type the user's last name.
Modify Full name to add initials or reverse order of first and last names.
In User logon name, type the user logon name, i.e "MPAdmin" and click Next.
Password and Confirm password, type the user's password, and then select the appropriate password options.

Step-2: Domain Administrator Login Permissions

Domain User (MPAdmin) which is created and being used for MachPanel should be member of certain groups for Standalone Exchange. For this;

Click Start, point to Settings, click Control Panel, double-click Administrative Tools, and then double-click Active Directory Users and Computers.
In the console tree, click Users.
In the details pane, right-click the user (MPAdmin that was created for MachPanel) and then click Properties.
Click on the Member of tab to check that this user (MPAdmin) has following permissions:

• Domain users • Domain Admins • Administrators • Enterprise Admins • Exchange trusted Subsystem • Exchange Servers • Group Policy creator owner • Organization management • Public folder management • Schema Admins • Server management

5. Click Add button in case any of the above mentioned permission is missing.
6. In Enter the object names to select, type the name of the user, group, as mentioned above then click OK.

Note: The service account must have Read/Write/Delete (full access) on Remote Server folder and sub folders.

MachPanel Knowledgebase

Azure App Configuration for Partner Center Management

Summary

Applies To

Steps Procedure

COLLECTING DETAILS TO ADD CSP PROFILE

Summary of Steps to perform on Microsoft Azure Portal:

​Summary of Steps to perform on MachPanel Control Panel Server Machine:

How to add Calendar permissions in Exchange account & Mailbox?

Summary

Applies To

Calendar Permission For Mailbox users:

Mailbox permissions enabled or changed and it gets stuck with status [syncing]

Summary

Applies To

Details

Solution

Enable Permissions for CSP account

Summary

Applies To

Problem in changing Access Permissions on a Mailbox. (Full Access)

Summary

Reason:

Solution

Fix Security Permissions or Sync Security group

Summary

Applies To

Fix Security Permissions

What Sync Security Group does?

Error on application trust level

Mailbox Management in MachPanel Exchange

Summary

Applies To

Microsoft Exchange Mailbox Features management in MachPanel

Viewing User Mailbox properties and Template details

Group Action for Bulk Operations on Mailboxes:

​​Room Mailbox:

Adding Email Addresses:

Set Email Forwarding:

Manage Mailbox Features under Advanced tab:

Manage Permissions:

Manage Mailbox Databases:

Manage Personal Archive Setting:

Manage Unified Messaging:

Manage Automatic Replies:

Manage Distribution List membership:

Manage Journaling:

Manage Calendar Permissions:

Management of Public Folders

Summary

Applies To

Creation & Management of Public folders

Mail Enabled Public Folder

Error when creating new mailbox: "You don't have sufficient permissions. This operation can only be performed by a manager of the group. LDAPContainter: CNOAB:"

ERRMSG: Give Security Group Permissions on OU Failed

Exchange 2010 - Setting Permissions And Necessary Modification On The User

Error In Sending Mail. Details: Mailbox Unavailable. The Server Response Was 5.7.1. Clinet Does Not Has Permission To Send As This Sender

Domain User Which Is Being Used For MachPanel Should Be Member Of Following Groups For Standalone Exchange

Summary

Applies To

Solution

Summary of Steps to perform on MachPanel Control Panel Server Machine:

Room Mailbox: