(Images required) Configuring Exchange On-Premise

This guide explains how to configure the Nextcloud Exchange Connector to authenticate with Microsoft Exchange On-Premise environments (Exchange 2016, Exchange 2019).

Pre-requirements

Before you begin configuring the Exchange Server, ensure you have the following:

1. Administrative Access: You must have access to the Exchange Admin Center (EAC) with an account that holds "Organization Management" or "Role Management" permissions.

2. Exchange Web Services (EWS): EWS must be enabled and externally accessible if your Nextcloud instance is hosted outside your local network.

Step 1. Create Exchange Service Accounts

Why this is needed: You must create dedicated user accounts in your Active Directory/Exchange environment that the connector will use to act as a background daemon.

1. Open your Active Directory Users and Computers (ADUC) or Exchange Admin Center.

2. Create standard user mailboxes (e.g., sendent-sync-1@yourdomain.com).
   Ensure their passwords are set to never expire.

Step 2. Configure the Impersonation Role Group

1. Log in to the Exchange Admin Center (EAC).

2. In the left-hand navigation pane, navigate to permissions and select the admin roles tab.

3. Click the + (Add) icon to create a new role group.

4. In the new window, enter a descriptive Name (e.g., Nextcloud Sync Impersonation) and an optional description.

5. Scroll down to the Roles section and click the + (Add) icon.

6. In the Select a Role window, select ApplicationImpersonation, click add ->, and then click OK.

Step 3. Assign Service Accounts to the Role Group

1. Still inside your newly created Role Group window, scroll down to the Members section.

2. Click the + (Add) icon.

3. Search for and select the service accounts you created in Step 1 (e.g., sendent-sync-1, sendent-sync-2).

4. Click add -> and then click OK.

5. Click Save to create the Role Group and apply the permissions. It may take a few minutes for the permissions to fully propagate across your Exchange environment.

Step 4. Save Credentials for Installation

You have successfully prepared your Exchange environment. Keep these credentials secure. Later, when you reach the Installation Guide, you will use these values to build your configuration files.

# Allowed Exchange Types: OnPremKerberos(2), OnPremBasicAuth(3), OnPremADFS(4)
Service__ExchangeConfiguration__ExchangeType=2
 
# The URL to your EWS endpoint
Service__ExchangeConfiguration__ExchangeOnPremUrl=https://exchange.example.com/EWS/Exchange.asmx
 
# The domain of your service accounts
Service__ExchangeConfiguration__ExchangeOnPremDomain=your_domain_here

[
  {
    "Username": "sendent-sync-1",
    "Password": "SecurePassword1!"
  },
  {
    "Username": "sendent-sync-2",
    "Password": "SecurePassword2!"
  }
]

[
  {
    "ClientId": "your-adfs-client-id-1",
    "ClientSecret": "your-adfs-client-secret-1"
  }
]

Next Step

Configuring Nextcloud