Configure Project Server 2010 to work with Exchange Server 2007 SP2
Applies to: Project Server 2010
Topic Last Modified: 2011-10-24
This article describes how to configure integration with Exchange Server 2007 SP2, which enables Project Server 2010 users to view Project Server tasks in Microsoft Office Outlook. This functionality replaces the Outlook Add-in task status reporting functionality for non-time–phased tasks that is available in earlier versions of Project Server and enables task assignment updates that use percent complete or total work remaining. These task assignment updates are then auto-submitted to the Task Status Manager when the tasks are updated in the Exchange client.
In order to perform these procedures, you must be member of the Project Server and Exchange Server administrator groups on the local computer.
Note
The procedures and Windows PowerShell commands in this article assume that you are using Exchange Server 2007.
Important
Exchange Synchronization to Project Server will not work on a Project Server 2010 deployment configured to use Claims Authentication.
Configure Project Web App settings
To configure Exchange integration, the Project Server administrator must grant access to the instance of Exchange Server and the Exchange administrator must grant Exchange access to the Project Server farm administrator account.
To activate Exchange Server synchronization
In Microsoft Project Web App (PWA), click Server Settings.
In the Operational Policies section, click Additional Server Settings.
On the Additional Server Settings page, in the Exchange Server Details section, select the Synchronize tasks check box and then click Save.
Each Exchange Client Access server in an Exchange farm needs a user account in PWA. This account allows Exchange to call the Project Server Exchange Web service when there are task updates that need to be synchronized. Perform the following procedure for each Exchange Client Access server.
To create a user account for an Exchange Client Access server
In Project Web App, click Server Settings.
In the Security section, click Manage Users.
On the Manage Users page, click New User.
On the New User page, clear the check box stating User can be assigned as a resource and type the name of the Exchange Client Access server in the Display Name box.
In the User Authentication section, select the Windows Authentication, using the Windows account option, and type the name of the Exchange Client Access server computer account in the User logon account box.
In the Security Groups section, in the Available Groups list, select Administrators and then click Add.
Click Save.
Synchronization must set up for each individual Project Server user for whom you want to synchronize tasks. Perform the following procedure for each user.
To configure a user account for Exchange Server synchronization
In Project Web App, click Server Settings.
Under Security click Manage Users.
In the users list click the name of the user that you want to configure.
On the Edit User page, select the Synchronize Tasks check box
Click Save.
When configuring Exchange, you have to know the application pool identity that is associated with your PWA site. Use the following procedure to determine the identity.
To determine the application pool identity for the Project Web App site
On the SharePoint Central Administration Web site, in the Application Management section, click Manage Service Applications.
On the Application Management page, click Manage Service Applications.
On the Application Management page, highlight Project Service Application, and on the ribbon click Properties.
In the properties window on the Manage Project Web App Service Application page, note the account configured to run the application pool. This account is required to configure Exchange Server settings in the next procedure.
Synchronization must be set up for each individual Project Server user for whom you want to synchronize tasks.
SSL Certificates
Project Server uses Secure Sockets Layer (SSL) to access Exchange Server 2007 and must trust the SSL certificate that was used by the Exchange farm. If you have a certificate issued by a trusted authority such as VeriSign, Project Server will trust the certificate. If your SSL certificate has not been issued by a trusted authority, you should export the certificate from the Exchange farm and import it as a trusted certificate on the computer that is running Project Server.
Exchange Server 2007 lets you use Internet Information Services (IIS) to save a copy of the certificate. Although IIS will still let you save a copy of the certificate in Exchange Server 2007, we don't recommend that you do this. Use the Export-ExchangeCertificate cmdlet to generate a copy of the certificate for importing to Project Server. After you've exported the SSL certificate in the form of a PKCS #12 file, the file can then be imported by using either the Import-ExchangeCertificate cmdlet or by using the Certificate Import wizard in the Exchange Management Console.
Configure Exchange Server settings
The next step is to configure Exchange Server. Use the following procedure to grant impersonation permission to the PWA application pool account. Perform this procedure on each Exchange Client Access server in an Exchange farm.
To grant farm administrator impersonation permissions
Log on to the computer that is running Exchange Server as an administrator.
Warning
If your farm uses a different account to run the Project Server Queue Service you may need to use that one in place of the farm administrator account.
Click Start, All Programs, Microsoft Exchange Server 2007 SP2, Exchange Management Shell.
At the prompt, type the following command:
Add-ADPermission -Identity (get-exchangeserver).DistinguishedName -User (Get-User -Identity <AppPoolAccount>| select-object).identity -extendedRights ms-Exch-EPI-Impersonation
Note
Enter the above where <AppPoolAccount> is the application pool account for the Project Server service application noted in the previous procedure.
Perform the following procedure for each Project Server user for whom you want to synchronize tasks with Exchange.
To configure an Exchange user
Log on to the computer that is running Exchange Server as an administrator.
Click Start, All Programs, Microsoft Exchange Server 2007 SP2, Exchange Management Shell.
At the prompt, type the following command: Add-ADPermission -Identity"<ProjUser>"-User<FarmAdministrator>-extendedRights ms-Exch-EPI-May-Impersonate.
Note
Enter the above where <ProjUser> is the name of the Project Server user that you are configuring and <FarmAdministrator> is the SharePoint Server farm administrator account.