Microsoft Exchange On-Premise

1 Pre Requisites
- 1.1 Exchange Web Services (EWS) URL
- 1.2 Service Account
2 Creating Resource Mailboxes
3 Configuring Resource Mailbox Properties
4 Configuring Resource Mailbox Permissions
- 4.1 Check if the account has Full Access Permissions.
  - 4.1.1 Check in the Exchange Management Console
  - 4.1.2 Check in PowerShell
- 4.2 Grant Full Access Permissions to the service account.
  - 4.2.1 Grant permissions in the Exchange Management Console
  - 4.2.2 Grant permissions in PowerShell
5 Configuring Resource Profiles in ResourceXpress
6 Appendix A - RX Push Service

Pre Requisites

Exchange Web Services (EWS) URL

ResourceXpress integrates with resource calendars in Microsoft Exchange using Exchange Web Services (EWS).

By default, the URL for EWS is via HTTPS and will be in the below format:

https://<Exchange_Server_FQDN>/EWS/exchange.asmx

Contact your Exchange administrator to obtain the correct FQDN for your Exchange server. This URL must be accessible from the ResourceXpress server.

Service Account

A service account is required which must be granted Full Access Permissions to all resource mailboxes used in ResourceXpress. See this guide section for further information regarding the service account and configuring the required permissions.

Creating Resource Mailboxes

For each meeting room, desk or other resource that you wish to add to ResourceXpress, a resource mailbox must already exist or be created in Exchange. Creating a new resource mailbox can be achieved via the Exchange Admin Centre (ECP), Exchange Management Shell, or via PowerShell.

See this link from Microsoft for guidance on creating new resource mailboxes.

Configuring Resource Mailbox Properties

The following configuration is only required for resources which will be used within ResourceXpress.

If you are connecting to the Exchange server remotely, expand and follow the below section.

In order to configure the resources remotely using Windows PowerShell, you will need to set up a PowerShell session to your Exchange server.

Open Windows PowerShell as an administrator.

Type the following command:

$UserCredential = Get-Credential

Press Enter.

A prompt will appear asking for a User name and Password. Enter an account which has Exchange administrator permissions and click OK.

Type the following command to configure the connection. Replace <ServerFQDN> with your Exchange server FQDN.

$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://<ServerFQDN>/PowerShell/ -Authentication Kerberos -Credential $UserCredential

Press Enter.

To initialise the PowerShell session, type this command:

Import-PSSession $Session -DisableNameChecking

Press Enter.

Windows PowerShell will now connect to the Exchange server.

There are four properties which must be set for each resource mailbox in order for them to function correctly with ResourceXpress. These include:

Mailbox Property	Required Value

Mailbox Property	Required Value
AddOrganizerToSubject	False
DeleteSubject	False
RemovePrivateProperty	False
AutomateProcessing	Auto Accept

To view the current properties for a mailbox, type the below command in PowerShell/Management Shell:

Get-CalendarProcessing -Identity "<resource-alias>" | FL

Replace <resource-alias> with the individual mailbox alias that you wish to check.

Press Enter.

To configure this resource mailbox for use with ResourceXpress, type the following command:

Set-CalendarProcessing "<resource-alias>" -AddOrganizerToSubject $false -DeleteSubject $false -RemovePrivateProperty $false -AutomateProcessing AutoAccept

Replace <resource-alias> with the individual mailbox alias that you wish to configure.

Press Enter.

The below screenshot shows the desired mailbox configuration for ResourceXpress.

Exchange Mailbox Properties

This process must be repeated for each resource mailbox which will be used with ResourceXpress.

Configuring Resource Mailbox Permissions

A service account in Exchange is required to enable ResourceXpress to read and write to the calendar mailboxes.

You will need to know the UPN and password of this account as it must be entered in the ResourceXpress application.

The service account does not require admin permissions.

Ensure the service account is enabled and has a mailbox.

Check if the account has Full Access Permissions.

This can be achieved via the Exchange Management Console UI or via PowerShell.

Check in the Exchange Management Console

Open the mailbox properties and navigate to mailbox delegation.

Check if the service account appears in the list under Full Access.

Check UI for Full Access Permissions

If the service account does not appear, you will need to grant the necessary permissions.

Check in PowerShell

Enter the following command in PowerShell replacing <resource-alias> with the resource mailbox alias and <service-account-alias> with the designated service account alias.

Get-MailboxPermission -Identity "<resource-alias>" -User "<service-account-alias>"

Press Enter to view the permissions assigned.

If the chosen account does not have {FullAccess} displayed under the AccessRights column, you will need to grant the necessary permissions.

If no results are returned this means the service account does not have any permissions assigned and you will need to grant the necessary permissions.

Grant Full Access Permissions to the service account.

This can be achieved via the Exchange Management Console UI or via PowerShell.

Grant permissions in the Exchange Management Console

Open the mailbox properties and navigate to mailbox delegation.

Click the + icon under Full Access. Search and select the service account then click add.

Click OK.

The service account will now appear in the list.

Grant permissions in PowerShell

Enter the below command replacing <resource-alias> and <service-account-alias> with your values.

Add-MailboxPermission -Identity "<resource-alias>" -User "<service-account-alias>" -AccessRights 'FullAccess'

Press Enter.

Full Access Permissions have now been granted.

Full Access Permissions must be configured for all resource mailboxes used in ResourceXpress

Configuring Resource Profiles in ResourceXpress

Log in to the ResourceXpress admin portal and navigate to Administration Settings → System Settings.

In the Resource Server tab, configure the below fields with the required values.

Server Host Name	Enter the full URL of Exchange Web Services (EWS) e.g. https://exchange-server-1.domain.com/EWS/Exchange.asmx
Server Port	443
Resource Login User ID	Exchange Service Account Alias e.g. SVC_ResourceXpress
Resource Login Password	Password for the Exchange Service Account
Resource Login Domain	The domain of the designated service account e.g. domain.com

Once the information above is entered, click Save.

You can now move on to creating the individual resource profiles for each room or workspace you wish to add to the system.

To create a profile and connect it to an Exchange resource, under Administration Settings go to Resource List.

On the top, right-hand corner, click on + Create and you will see the screen below.

Before connecting the profile, you will first be required to fill out some basic information in this Resource Info tab. Required fields are noted with an *. Once completed, click Save.

Once changes are successfully saved, click on the Connection Properties tab.

Ensure Exchange is selected as the Booking System value.

Most of the fields should already be filled in based on the information entered previously in the Systems Settings.

For the final step, enter the email address of the Exchange resource you want to connect this profile to in the Resource Email line.

Click Save.

Appendix A - RX Push Service

Please see our additional guide for installing and configuring Exchange Push Service which is recommended to reduce bandwidth and avoid throttling policies.