Exchange 2007 Experts - Impersonate user help please

Question

Hello,
We use Exhcange 2007 (2 x CAS & 2 x MBX servers)
We have 2 issues:
1.)
We are trying to get our a hosted CRM sysem called ForceManager to Impersonate some users.  What is strange I create a new user and then run these commands and Exchange accepts them:
Add-ADPermission -Identity "forcetest" -User "forcemgnsync" -ExtendedRights ms-Exch-EPI-May-Impersonate
WARNING: Appropriate ACE is already present on object
"CN=forcetest,OU=Test,OU=Spain,DC=contoso,DC=local" for account
"CONTOSO\forcemgnsync".
Identity             User                 Deny  Inherited Rights
CONTOSO.LOCAL/Spain... CONTOSO\forcemgnsync    False False     ms-Exch-EPI-May-Im...
Get-Mailbox -Identity forcetest | Get-ADPermission -User forcemgnsync | fl
User                : CONTOSO\forcemgnsync
Identity            : CONTOSO.LOCAL/Spain/Test/forcetest
Deny                : False
AccessRights        : {ExtendedRight}
ExtendedRights      : {ms-Exch-EPI-May-Impersonate}
IsInherited         : False
Properties          :
ChildObjectTypes    :
InheritedObjectType :
InheritanceType     : All
User                : CONTOSO\forcemgnsync
Identity            : CONTOSO.LOCAL/Spain/Test/forcetest
Deny                : False
AccessRights        : {ExtendedRight}
ExtendedRights      : {ms-Exch-EPI-Impersonation}
IsInherited         : False
Properties          :
ChildObjectTypes    :
InheritedObjectType :
InheritanceType     : All
But ForceManager say the account still doesn't have rights to impersonate, any ideas?
2.)
If I try the same commands on an existing user (have tried many) it can't even find them:
Add-ADPermission -Identity "bill" -User "forcemgnsync" -ExtendedRights ms-Exch-EPI-May-Impersonate
Add-ADPermission : bill was not found. Please make sure you have typed it correctly.
At line:1 char:17
+ Add-ADPermission <<<<  -Identity "bill" -User "forcemgnsync" -ExtendedRights
 ms-Exch-EPI-May-Impersonate
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-ADPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : D5B1825B,Microsoft.Exchange.Management.Recipient
   Tasks.AddADPermission
Hope you guys can help, I'm really struggling as I'm not really an Exchange guy.
Regards

Answer 1

same issue, trying with another user via the CAS servers:
get-mailbox anovo
Name             Alias            ServerName       ProhibitSendQuo
                                                                ta
Alejandro Novo   anovo            ccf-exch-vmbx    unlimited
Add-ADPermission anovo -User "forcemgnsync" -ExtendedRights ms-Exch-EPI-May-Impersonate
Add-ADPermission : anovo was not found. Please make sure you have typed it corr
ectly.
At line:1 char:17
+ Add-ADPermission <<<<  anovo -User "forcemgnsync" -ExtendedRights ms-Exch-EPI
-May-Impersonate
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-ADPermission], Mana
   gementObjectNotFoundException
    + FullyQualifiedErrorId : D5B1825B,Microsoft.Exchange.Management.Recipient
   Tasks.AddADPermission