Export (0) Print
Expand All
0 out of 1 rated this helpful - Rate this topic

Setting Permissions on Windows PowerShell Cmdlets

Updated: June 3, 2013

Applies To: Windows Intune December 2012 Release

Prepare an Active Directory user account, to be used by the Windows Intune Exchange Connector. The account must have permission to run the required Windows PowerShell Exchange cmdlets required for mobile device management.

Set permission for the following Exchange Cmdlets for Windows PowerShell:

Cmdlets for the On-Premises Connector

  • Get-ActiveSyncOrganizationSettings, Set-ActiveSyncOrganizationSettings

  • Get-CasMailbox, Set-CasMailbox

  • Get-ActiveSyncMailboxPolicy, Set-ActiveSyncMailboxPolicy, New-ActiveSyncMailboxPolicy, Remove-ActiveSyncMailboxPolicy

  • Get-ActiveSyncDeviceAccessRule, Set-ActiveSyncDeviceAccessRule, New-ActiveSyncDeviceAccessRule, Remove-ActiveSyncDeviceAccessRule

  • Get-ActiveSyncDeviceStatistics

  • Get-ActiveSyncDevice

  • Get-ExchangeServer

  • Get-ActiveSyncDeviceClass

  • Get-Recipient

  • Clear-ActiveSyncDevice, Remove-ActiveSyncDevice

  • Set-ADServerSettings

  • Get-Command

TipTip
For your convenience, the following script automatically sets permissions for these On-Premises Connector cmdlets for a specific Active Directory user account: Configure Exchange Connector Permissions.

Cmdlets for the Service to Service Connector

  • Get-ActiveSyncOrganizationSettings, Set-ActiveSyncOrganizationSettings

  • Get-MobileDeviceMailboxPolicy, Set-MobileDeviceMailboxPolicy, New-MobileDeviceMailboxPolicy, Remove-MobileDeviceMailboxPolicy

  • Get-ActiveSyncDeviceAccessRule, Set-ActiveSyncDeviceAccessRule, New-ActiveSyncDeviceAccessRule, Remove-ActiveSyncDeviceAccessRule

  • Get-MobileDeviceStatistics

  • Get-MobileDevice

  • Get-ActiveSyncDeviceClass

  • Get-Recipient

  • Clear-MobileDevice, Remove-MobileDevice

See Also

 
Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft. All rights reserved.