Using Credentials Supplied by the User

If the Use current name and password check box is not selected, credentials must be provided when the Microsoft Exchange MTA attempts to connect to the remote server. To accomplish this, the local MTA will use the account information in the RAS Override property page of the Dynamic RAS Connector. The information supplied in the property page should be an authorized account in the remote system that can both log on to the remote system and access the Microsoft Exchange Server directory database with full permissions.

1. With the Edit Phone Book Entry dialog box open, select the Security tab.
2. Select the Accept only Microsoft encrypted authentication check box.
3. Verify that the Use current username and password check box is not selected.

Creating Override Accounts

You can create Windows NT accounts to be used in the RAS Override property page of the Dynamic RAS Connector. To configure an account, use the Windows NT User Manager for Domains.

Complete the following steps to create Windows NT accounts.

1. From the Start menu, choose Programs, choose Administrative Tools, and then choose User Manager for Domains.
2. From the User menu, choose New User.
3. Enter the same user name and password for each domain, and follow the same capitalization for each name. For example:
Username = RASCON Password = RAS

In the three-server example described earlier, the following accounts could be created:

Domain	UserName	Password
WASHINGTON	RASCON	RAS
OREGON	RASCON	RAS
TEXAS	RASCON	RAS

Note   Although you can choose any name for the account name and password, as mentioned earlier, the names must be identical for each domain.

After you create the Windows NT accounts, you must grant these accounts dial-in access.

Complete the following steps to grant dial-in access to Windows NT accounts.

1. In User Manager for Domains, from the User menu, choose Properties.
2. Select the account you want to grant dial-in access to.
3. Choose Dialin.
4. Select the Grant dialin permission to user check box.

After you grant the accounts dial-in access, you need to grant these accounts permission to access Microsoft Exchange Server.

Complete the following steps to provide Windows NT accounts Microsoft Exchange Server permissions.

1. In the Microsoft Exchange Server Administrator window, select a server.
2. From the File menu, choose Properties.
3. Select the Permissions tab. If you don't have a Permissions tab, you may need to log in using an account with Microsoft Exchange Server Permissions Admin or Service Account Admin roles. Or, from the Tools menu in the Administrator window, choose Options. Select the Permissions tab, and then select the Show Permissions page for all objects and Display rights for roles on Permissions page check boxes.
4. Under Windows NT accounts with permissions, choose Add.
5. Under Names, select the Windows NT account you want to add.
6. Choose Add, and then choose OK.
7. Under Roles, select Service Account Admin.