System Center Service Manager:Exchange Connector

History

The System Center Service Manager:Exchange Connector is a first party, Microsoft developed connector not included in the the default installation of System Center. It can be downloaded, along with Microsoft's white paper deployment procedure from Microsoft's System Center Service Manager Connector 4.1 for Exchange portal. It enables systems administrators to connect Microsoft Exchange and Cloud: Office 365 mailboxes to Service Manager to enable incidents to be received via electronic mail.

Deployment

Installing the Service Manager Exchange Connector is fairly straightforward. Follow the below steps to install the dynamic link libraries and corresponding management packs:

1. Download the necessary files from Microsoft's System Center Service Manager Connector 4.1 for Exchange portal.
2. Run the exe to extract the files to your specified location, or the default location of C:\System Center Service Manager Connector 4.1 for Exchange.
3. Copy and paste all of the .dll and .mpb files to the root of your System Center Service Manager installation directory. In my case, this is located at D:\Program Files\Microsoft System Center\Service Manager.
   1. NOTE: This must be done on the server. Additionally, if you are utilizing the console on a workstation computer, step #3 must be completed on the workstation computer. Importing the management pack on workstation computers are not necessary once completed on the server.
4. Once the files are copied to the correct installation directory, launch the System Center Service Manager Console as an administrator.
5. Click the Administration tab, then click Management Packs. On the right sidebar, under "Management Packs", click Import.
6. Drop the file type selector to MPB files and navigate to your Service Manager installation directory. find the file "ServiceManager.ExchangeConnector.mpb", select it and open it.
7. A wizard will appear to import the management packs. Click Import. This takes about a minute to import.
8. Once the management pack has been successfully imported, click Connectors under Administration, then click Create Connector. You will notice an option to create an Exchange Connector is now available.

The management pack is now successfully imported an available for use. Please refer to the Post-Install Configuration section for creating an Exchange Connector.

Post-Install Configuration

The Post-Install Configuration and relevant sections enables systems administrators to setup a Cloud:Office365 email service account, connect it to Service Manager, and harden it against abuse.

Configure an Office 365 Service Email Account

1. Login to the Microsoft Office 365 as a global administrator.
2. On the sidebar, click Users, then click Add User.
   1. On the Basics tab, give your helpdesk service account a name and username. I am using sysadminafterdark help desk and the email helpdesk [at] this domain . com.
   2. Generate a strong password and store it in your password manager. Uncheck "Require this user to change their password when they first sign in".
   3. Click Next.
3. On the Product licenses tab, I assigned a Microsoft Business Basic license because we only require email for this account. If it asks you to buy a license, do so.
4. Click Next on the Optional Settings tab. This account requires no admin permissions.
5. On the Finish tab, review your changes, then click Finish adding.

An Office 365 email service account has been created so end users and bots can email notifications to the helpdesk for processing.

Connect An Office 365 Email Account To Service Manager

1. Open the Service Manager Console as an administrator user.
2. Navigate to Administration then click Connectors. On the sidebar, click Create Connector, then click Exchange Connector. Follow the below steps to connect the Office 365 account created above to Service Manager:
   1. On the Welcome tab, click Next.
   2. On the General tab, give your Exchange connector a Nane, Description, and type in the name of your active directory forest.
      1. Name: Internal Exchange Connector
      2. Description: Connects Internal AD forrest to SCSM.
      3. Forest: internal.sysadminafterdark.com
      4. Check ALL of the boxes on this page.
      5. Click Next.
   3. On the Server Connection Page, input the following information, changing it as needed for your environment:
      1. Check Exchange Online and input your Tenant ID. This can be found in your Azure AD portal on "Overview".
      2. Input your Client ID. To obtain a client ID, you must navigate to the Microsoft Entra Admin Center, Click Applications, Then Click App Registrations. Click Register an Application. Give it a name (example: Service Manager EWS Access), then click Register. After registering the App, click API Permissions, Add Permission, then add the Office 365 Exchange Online API. When asked what type of permission it requires, select Delegated Permissions. In the search box, type in EWS then select EWS.AccessAsUserAll. Click Add Permissions. Click the Grant Admin Consent for "Business Name Here" button next to the "Add a Permission Button".
      3. Check Use autodiscover