Creating a service account for the Spam Folder Agent

Article:TECH83030  |  Created: 2005-01-07  |  Updated: 2012-05-10  |  Article URL
Article Type
Technical Solution



The Symantec Spam Folder Agent requires a service account. Symantec recommends creating a new service account.

A version of one of the following Symantec products is installed
--Symantec Mail Security 4.6 for Microsoft Exchange
--Symantec Mail Security 4.1 for Domino
--Symantec Mail Security for SMTP 4.1


Before installing the Symantec Spam Folder Agent for Exchange, make sure that you meet the following software and configuration requirements:

  • Windows 2000 Server (SP4) or greater.
  • Windows 2003 Server.
  • Microsoft Exchange 2000 or 2003.
  • Full access to a mailbox on the local Exchange server. (The Symantec Spam Folder Agent for Exchange does not send email to or from this mailbox.)
  • Exchange Administrator permission on the local server.

Note: The service account cannot be hidden from the Exchange address list.

To create the service account on Exchange 2000

  1. On the Windows taskbar, click Start > Programs > Administrative Tools > Active Directory Users and Computers.
  2. In the left pane, click Users.
    This folder may already be selected.
  3. On the toolbar, click the icon to create a new user.
  4. In the New Object - User dialog box, type the information in the boxes: First name, Full name, and User logon name.
  5. Click Next.
  6. In the Password and Confirm password boxes, type a password for the service account.
  7. Click Next > Next > Finish.
    The Users container updates to show the service account.

To configure the Spam Folder Agent to use the new service account

  1. In Active Directory Users and Computers, in the right pane, right-click Spam Folder Agent > Properties.
  2. On the Member of tab, click Add.
  3. In the text field, type domain admins
  4. Click OK.
  5. Click OK to close the Properties dialog box.

Note: The Spam Folder Agent needs to be a local administrator with the service. If you install on a server that is not a Domain controller, add Domain Admins to the local Administrator group.

To delegate control to the service account in Microsoft Exchange Systems Manager

  1. On the Windows taskbar, click Start > Programs > Microsoft Exchange > Systems Manager.
  2. In the left pane of Exchange System Manager, right-click the top node > Delegate Control.
  3. Click Next. This bypasses the Exchange Administration Delegation Wizard welcome screen.
  4. Under Users of Groups, click Add.
  5. In the Delegate Control Dialog box, click Browse.
  6. Click the name of the service account created.
  7. Under Role, make sure Exchange Administrator appears.
  8. Click OK > Next > Finish > OK.

This completes the configuration of the Spam Folder Agent for the new service account.

Although the Symantec Spam Folder Agent for Exchange installs on Exchange 2003 servers, Symantec recommends using the native foldering built into Exchange 2003. For more information see: Changing the Store Action Threshold in Symantec Mail Security for Microsoft Exchange versions 4.5 and 4.6.

Legacy ID


Article URL

Terms of use for this information are found in Legal Notices