How to reconfigure the Microsoft CRM-Exchange E-mail Router to use a domain user account instead of a local system account

This article describes how to reconfigure the Microsoft CRM-Exchange E-mail Router (the Router) to use a domain user account instead of a local system account.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To reconfigure the Microsoft CRM-Exchange E-mail Router to use a domain user account instead of a local system account, follow these steps:

1. Add the domain user account to the PrivUserGroup group in Active Directory directory services. To do this, follow these steps.
   
   Note The Microsoft CRM deployment trusts members of this group to create e-mail activities in Microsoft CRM.
   1. On the domain controller, start Active Directory Users and Computers. To do this, click Start, point to Programs, click Administrative Tools, and then click Active Directory Users and Computers.
   2. Expand the tree, and then click the Microsoft CRM Organizational Unit.
   3. In the right panel, right-click the PrivUserGroup, and then click Properties. The PrivUserGroup Properties window opens.
   4. Click the Members tab.
   5. Click Add.
   6. Type the name of the domain user account, and then click Check Names. After the program resolves the name of the domain user account, click OK.
   7. Click OK.
2. Grant the domain user account Full Control permissions on the designated Microsoft Exchange mailbox. To do this, follow these steps.
   
   Note Full Control permissions include ReceiveAs and SendAs rights. The domain user account must have these rights in case the account is not the owner of the mailbox.
   1. On the Exchange server, start Active Directory Users and Computers.
   2. Click View, and then click Advanced Features.
   3. Right-click the designated Exchange mailbox, and then click Properties.
   4. Click the Security tab.
   5. Click Add.
   6. Type the name of the domain user account, and then click Check Names. After the program resolves the name of the domain user account, click OK.
   7. Click to select the Full Control check box, and then click OK.
3. If verbose logging is required, add the domain user account as a local administrator on the computer that is running the Microsoft CRM-Exchange E-mail Router. To do this, follow these steps.
   
   Note If verbose logging is not required, skip this step and go to step 4.
   1. On the computer that is running the Microsoft CRM-Exchange E-mail Router, right-click My Computer, and then click Manage.
   2. Expand Local Users and Groups, click Groups, and then double-click Administrators.
   3. Click Add.
   4. Type the name of the domain user account, and then click Check Names. After the program resolves the name of the domain user account, click OK.
   5. Click OK.
4. If the domain user account is used in an upgrade scenario, grant this account write permissions for the Microsoft CRM-Exchange E-mail Router Service.
   
   Note Write permissions are required because the service must write to this subkey one time to indicate that the Router has delivered at least one e-mail message to the Microsoft CRM server. The updated subkey value indicates that the upgrade is complete on both ends. However, if the service account was changed after the upgraded Router has delivered at least one e-mail message to the Microsoft CRM server, you do not have to grant write permissions.
   
   To grant the domain user account write permissions, follow these steps:
   1. Click Start, click Run, type regedit, and then click OK.
   2. Locate and then click the following registry subkey:
      HKEY_Local_Machine/SYSTEM/CurrentControlSet/Services/MSCRMExRouterService
   3. On the Edit menu, click Permissions.
   4. Click Add.
   5. Type the name of the domain user account, and then click Check Names. After the program resolves the name of the domain user account, click OK.
   6. Click to select the Full Control check box, and then click OK.
5. Change the Microsoft CRM-Exchange E-mail Router Service to run under the domain user account:
   1. On the Exchange server, click Start, click Administrative Tools, and then click Services.
   2. Double-click Microsoft CRM-Exchange E-mail Router Service, and then click the Logon tab.
   3. Click This account, and then click Browse.
   4. Type the name of the domain user account, and then click Check Names. After the program resolves the name of the domain user account, click OK.
   5. In the Password box, type the password for the domain user account. In the Confirm password box, type the password, and then click OK.