Prerequisites for Email Profiles in Configuration Manager

 

Updated: May 14, 2015

Applies To: System Center 2012 Configuration Manager SP2, System Center 2012 R2 Configuration Manager, System Center 2012 R2 Configuration Manager SP1

Note

The information in this topic applies only to System Center 2012 R2 Configuration Manager versions only.

Email profiles in System Center 2012 Configuration Manager have dependencies both externally, and within the product.

Configuration Manager Dependencies

Dependency

More information

The email profiles extension for Microsoft Intune must be installed and enabled.

Before you can view the Email Profiles node in the Configuration Manager console and create and deploy email profiles, the Email Profiles Extension for Microsoft Intune must be installed and enabled.

For more information about how to configure the email profiles extension, see Configuring Email Profiles in Configuration Manager.

Specific security permissions must be granted to manage email profiles

You must have the following security permissions to manage company resource access settings, such as email profiles:

  • To view and manage alerts and reports for email profiles: Create, Delete, Modify, Modify Report, Read, and Run Report permissions for the Alerts object.

  • To create and manage certificate profiles: Author Policy, Modify Report, Read and Run Report permissions for the Certificate Profile object.

  • To manage email profile deployments: Deploy Configuration Policies, Modify Client Status Alert, Read, and Read Resource permissions for the Collection object.

  • To manage all configuration policies: Create, Delete, Modify, Read and Set Security Scope permissions for the Configuration Policy object.

  • To run queries that are related to email profiles: Read permission for the Query object.

  • To view email profiles information in the Configuration Manager console: Read permission for the Site object.

  • To enable the email profiles extension: Modify permission for the Site object.

    Important

    To ensure that the email profiles extension is enabled hierarchy-wide, you must have this permission at all sites in the hierarchy.

  • To view status messages for email profiles: Read permission for the Status Messages object.

  • To create and manage email profiles: Author Policy, Modify Report, Read, and Run Report permissions for the Communications Provisioning Profile object.

The Company Resource Access Manager security role includes these permissions that are required to manage email profiles in Configuration Manager. For more information, see the Configure Role-Based Administration section in the Configuring Security for Configuration Manager topic.

Mail attribute in active directory

If you want to generate the users email address in an email profile by using the user’s primary SMTP address, Configuration Manager user discovery must be configured to discover the mail attribute from Active Directory (this is configured by default).

External Dependencies

Dependency

More information

Mail attribute in active directory

If you want to generate the users email address in an email profile by using the user’s primary SMTP address, this address must exist in the mail attribute in Active Directory.

For more information, see your Windows Server documentation.