Admin Topics

• Best Practices for ndMail Administration Setup and Configuration

Server-side Configuration

• ndMail Administration Setup Requirements
• Configure Exchange Web Services for ndMail
• Configure Impersonation or Service Account for ndMail
• Configure Exchange Connection on the Repository

Client-side Push-out and Configuration

• ndMail Administration Installation
• ndOffice Installation Configuration Steps for ndMail
• ndMail Registry Information
  • ndMail Settings Registry Keys
  • ndMail Collapse or Expand Registry Keys
  • ndMail Settings Registry Keys

Best Practices for ndMail Administration Setup and Configuration

To set up and configure ndMail successfully, you must meet all the administration setup requirements; an administrator must ensure that the Exchange Server is configured correctly for ndMail. On the client side, you need to ensure ndOffice and ndMail are working correctly with the exchange server. 

First, configure the server-side components:

1. Ensure you have met all ndMail Administration Setup Requirements.
2. Configure the following before the client-side ndMail installation:
   1. Configure Exchange Web Services for ndMail
   2. Configure Impersonation or Service Account for ndMail
   3. Configure Exchange Connection on the Repository

Second, push out ndMail to client end-points and configure clients. See: 

• ndMail Administration Installation
• ndOffice Installation Configuration Steps for ndMail
• ndMail Registry Information
  • ndMail Settings Registry Keys
  • ndMail Collapse or Expand Registry Keys
  • ndMail Settings Registry Keys

Third, use the ndMail User Help as a resource to provide training to your users. 

 Back to Top

ndMail Administration Setup Requirements

Before installing the ndMail add-in, you must have Visual Studio Tools for Office Runtime (VSTO), Microsoft .NET Framework 4.5.2+, ndOffice application, and all available Windows updates installed on a computer.

 Back to Top

Configure Exchange Web Services for ndMail 

ndMail uses Exchange Web Services (EWS) to interact with user email messages and folders. For best practices, we recommend that you configure the following:

Configure Impersonation or Service Account for ndMail

ndMail requires the ability to impersonate users in the Exchange domain to retrieve and file email documents for subscribed users. Or in other words, you need to set up a service account that impersonates users on the Exchange domain. Use RBAC (role-based access control) on the Exchange Server to enable impersonation for a service account.

Service Application Access for an Impersonation Role

Exchange integration for ndMail is built and deployed as a service application. Create this account specifically for the ndMail Exchange service account. When correctly configured with impersonation rights, this Exchange user account can read emails to ANY user in the Exchange domain.

Optionally, you can give this user rights to impersonate only those mailboxes in a specific group. Refer to Exchange documentation for additional details, see https://msdn.microsoft.com/en-us/library/office/jj900165(v=exchg.150).aspx#Anchor_3. Keeping this account’s credentials secure is imperative.

To access the service application, you need to do the following:

1. Create a service account. ndMail uses the basic authentication when creating the service account to EWS with an impersonation role assigned, allowing it to impersonate Exchange users to read folders and emails.
2. Grant the service account a user impersonation role. For information on how to add impersonation role for a service account.

As an administrator, you can manage EWS access controls using Exchange Management Shell and the following cmdlets:

Get-CASMailbox
Set-CASMailbox
Get-OrganizationConfig
Set-OrganizationConfig

Open the web-based Exchange Admin Center (EAC) of the Exchange Server.

To configure impersonation on Exchange Server 2013, 2016:

1.  Select the Permissions tab.
2. To create a new administrative role, select the  icon.
3. In the new role group dialog box:
   a. Enter a name for the new administrative role.
   b. Under Roles, select the  icon, and select ApplicationImpersonation.
   c. Under Users, select the  icon.
   d. To collect the mailbox data from Exchange Server (SyncUser), select the account > OK.
   e. Select Save.

Note: Configure Exchange 2013 and 2016 using the Exchange Management Shell cmdlets to control access management for EWS applications and the RBAC for impersonation. For more information, see the following table, which includes steps and links on how to use Exchange Management Shell - a PowerShell-enabled command-line processor with command handlers for Exchange.

Note: Do not install the New-ManagementRoleAssignment cmdlet in your Exchange Management Shell. To add the cmdlet, type Add-PSSnapin Microsoft.Exchange.Management.PowerShell.E2010 in the Exchange Management Shell, and then press Enter.

 Back to Top

Configure Exchange Connection on the Repository

Important: After setting up the impersonation service account, you have to wait at a minimum of at least an hour before you can use the account to log in at the Exchange Configuration. The error returned is vague that you are unable to connect, but the account is not quite set up.