S-IA-PRO Intelli-M Access Professional V4.0

S-IA-PRO Intelli-M Access Professional V4.0 An Addendum to the Intelli-M Access V4.0 User Guide For SKU: S-IA-PRO ACCESS Professional PLEASE READ THIS MANUAL BEFORE USING YOUR INTELLI-M ACCESS PROFESSIONAL SYSTEM, and always follow the instructions for safety and proper use. Save this manual for future reference. IN-S-IA-PRO_4.0_RM 2/26/14

Legal Notice infinias, the infinias logo, and Intelli-M are trademarks or registered trademarks of infinias. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. infinias disclaims any proprietary interest in trademarks and trade names other than its own. No part of this document may be reproduced or distributed in any form or by any means without the express written permission of infinias. The information in this document is subject to change without notice or obligation. infinias 9340 Priority Way West Drive Indianapolis, IN 46240 Telephone: 866.496.5783 (toll free), email: sales@infinias.com, support@infinias.com Copyright 2014, infinias. All Rights Reserved. ii www.infinias.com

TABLE OF CONTENTS Table of Contents SECTION 1 Introduction...1 1.1 System requirements...2 1.1.1 Considerations...2 1.1.2 System software.................................................................2 1.2 Upgrading to Intelli-M Access Professional...2 SECTION 2 Active Directory Integration...3 2.1 How It Works...3 2.2 Active Directory requirements...3 2.2.1 Integration checklist...4 2.2.2 Site code and card number attributes...5 2.2.3 Create a Peripheral...6 SECTION 3 Microsoft Outlook Integration...13 3.1 How it works...13 3.2 Integration requirements...14 3.2.1 Integration checklist...14 3.2.2 Calendar permissions...14 3.3 Create a Peripheral in Intelli-M Access...15 3.4 Create Rules...19 3.4.1 Create an Unlock Zone Rule...19 3.4.2 Create a Revert Zone Rule...20 3.4.3 Test the system...21 SECTION 4 Google Calendar Integration....23 4.1 How it works...23 4.2 Integration checklist...23 4.3 Create a Peripheral in Intelli-M Access...23 4.4 Create Rules...28 4.4.1 Create an Unlock Zone Rule...28 4.4.2 Create a Revert Zone Rule...30 4.4.3 Test the system...31 Intelli-M Access V4.0 Professional User Manual iii

TABLE OF CONTENTS iv www.infinias.com

SECTION 1: INTRODUCTION SECTION 1 Introduction Thank you for purchasing Intelli-M Access Professional, the Simple, Scalable, and Secure access control system, designed for the small business, and scalable for the enterprise. Intelli-M Access Professional is installed by adding a software license to your existing Intelli-M Access Essentials system. It enables the following features: LDAP integration Calendar integration (Google or Microsoft Outlook and Exchange) Customizable door templates Video Integration with industry leading video surveillance manufacturers Expanded library of rules engine events and actions Elevator Control With these features, you can manage Intelli-M Access users from within Active Directory, lock and unlock Doors for Meetings or Appointments on your calendar, and perform many other actions. Video Integration Intelli-M Access Professional supports video integration with industry leading video surveillance platforms, providing a robust and complete physical security solution. It can integrate with video surveillance platforms from DIGIOP, Pelco Digital Sentry, Exacq, American Dynamics, Vicon, Milestone and others. When integrated, Intelli-M Access can easily be configured to send event information to the video surveillance platforms for reporting and to trigger recording, activate soft alarms, activate digital outputs, and other functions. With DIGIOP integrations, the video surveillance platform can push temporary door unlock commands back to the Intelli-M Access server. Typical event information from Intelli-M Access can include: Detection of an Unknown Credential Status Event when access to a door is attempted using an unrecognizable credential. Detection of a Door Forced Open Event when a door is opened without a credential presented. Detection of a Valid Credentials Event before or after work hours when access to a door is attempted outside of normal work hours. Detection of an Anti-Passback Violation Event when a credential is used more than once at the same reader in a short period of time. With every card swipe on the IN reader, there must be a corresponding card swipe on the OUT reader before the card can be used at the IN reader again. For more information about Intelli-M Access integration with a video surveillance platform, refer to the applicable integration documentation available through infinias. About this document This document is an addendum to the Intelli-M Access Essentials V4.0 User Manual. It includes the additional features added to Intelli-M Access Essentials server by installing the Intelli-M Access Professional license. Intelli-M Access V4.0 Professional User Manual 1

SECTION 1: INTRODUCTION 1.1 System requirements 1.1.1 Considerations Since Intelli-M Access is a client/server application, we recommend that it be run on a server in a secure environment. If Intelli-M Access is installed in a virtual environment, we recommend VMware ESXi or higher. Note that Intelli-M Access includes a Rules engine that extends the functionality of the system; to take advantage of these features, the server must be available continuously. 1.1.2 System software Intelli-M Access V4.0 runs on any system hardware where Intelli-M Access Essentials V4.0 is installed. infinias recommends using the most recent versions of operating systems. For Active Directory integration, the server where Intelli-M Access is installed must be a member of the Windows Domain in your organization. Furthermore, the Domain Controller must be running Windows Server 2008 or newer - Server 2003 and older Domain Controllers are not supported. Finally, if your installation does not require Active Directory integration, this requirement can be ignored. Microsoft Exchange integration requires Microsoft Exchange 2007 or newer. Earlier versions of Microsoft Exchange do not provide the necessary integration features, and therefore are not supported. If your installation will not be using Exchange integration, this requirement can be ignored. Google Calendar integration requires a Gmail (Google mail) email address. 1.2 Upgrading to Intelli-M Access Professional Intelli-M Access Professional is a licensed upgrade to Intelli-M Access Essentials. If you installed Intelli-M Access Essentials Version 4.0 or later, you can upgrade to Intelli-M Access Professional by installing a license. Licenses are normally issued using Activation License cards. For information on installing a license, please refer to the Intelli-M Access Essentials V4.0 User Manual or the Intelli-M Access Essentials V4.0 Quick Setup Guide. Typical Activation License card 2 www.infinias.com

SECTION 2: ACTIVE DIRECTORY INTEGRATION SECTION 2 Active Directory Integration Intelli-M Access Professional can integrate with the Active Directory Server in your organization to allow the Active Directory Administrator to manage Intelli-M Access cardholders within the Active Directory User management system rather than within the Intelli-M Access User Interface. This integration provides the convenience of not having to learn and use another user management system on a daily basis. 2.1 How It Works Intelli-M Access will monitor the Calendar of each specified Exchange Room Mailbox. When a meeting or appointment is scheduled in the Calendar of a Room Mailbox, the Intelli-M Access integration with Exchange will send event information to Intelli-M Access. A Meeting Started event will be sent to Intelli-M Access when a meeting is scheduled to begin, and a Meeting Ended Event will be sent to Intelli-M Access when the meeting is scheduled to end. If you also requested Exchange to send out a Meeting Reminder notification to the required attendees, it will also send a Meeting Reminder event to Intelli-M Access. Active Directory integration will manage all of the attributes associated with a Person, including the Persons Group membership(s). Therefore, you can manage First Name, Last Name, all contact information, Employee Id, and even the card number associated with that Person within Active Directorys User management tools. Although Active Directory can modify Intelli-M Access users and groups, that integration is oneway at no time does Intelli-M Access modify Active Directory with its own data, even if you continue to use the Intelli-M Access User Interface to configure cardholders. NOTE It is strongly recommended that you do not modify Persons in Intelli-M Access after the integration with Active Directory. Changes you make are likely to be overwritten by the next change made to the same user in Active Directory. The exception to this recommendation is when a person has multiple credentials - you can continue to manage additional credentials for a cardholder in Intelli-M Access. Allow Active Directory to manage the first (initial) card credential (that shown in the Person Summary) 2.2 Active Directory requirements Active Directory integration requires that the server on which you have installed Intelli-M Access be a member of the Windows Domain in your organization. Furthermore, the Domain Controller must be running W indows Server 2008 or newer - Server 2003and older Domain Controllers are not supported. Minimum System Requirements to Run Active Directory Plugin with Intelli-M Access: - i5 processor - 8GB of RAM - 250GB HDD Intelli-M Access. Professional User Manual

SECTION 2: ACTIVE DIRECTORY INTEGRATION 2.2.1 Integration checklist The Active Directory integration effort will require you to interface closely with the IT representative in your organization. Intelli-M Access will map Active Directory attributes such as First Name, Last Name, etc. with Intelli-M Access Person and Group items, such as First Name, Last Name. Many of these mappings are performed for you automatically, but some are not. The following is a complete list of all Active Directory User attributes that are implicitly understood to map into Intelli-M Access (First Name and Last Name are not shown below because their mappings are hard-coded). Intelli-M Access Item Title Department Company Job Title Phone Number Cell Phone Office Primary Email Employee Id Notes Active Directory Attribute (LDAP-Display-Name) personaltitle department company title telephonenumber mobile physicaldeliveryofficename mail employeeid description The Active Directory attributes are the same as the Active Directory Users and Computers administration utility on the Domain Controller. A list of attributes and their definitions is provided at http://msdn.microsoft.com/en-us/library/ms675090(v=vs.85).aspx. NOTE You can enable Advanced Features in the Active Directory Users and Computers utility to see the attributes in the form shown in the table above. To enable Advanced Features, click View and then check the Advanced Features menu item. When enabled and when viewing the Properties, click the Attribute Editor tab to see all known attributes and their values. These attributes and values and be directly modified here. You can map all of the remaining Intelli-M Access Person items to Active Directory attributes. Always coordinate these mappings with your IT representative to ensure that the proper attributes are used for the mappings. These attributes may be provided later to Intelli-M Access. 4 www.infinias.com

SECTION 2: ACTIVE DIRECTORY INTEGRATION 2.2.2 Site code and card number attributes After mapping Active Directory attributes and Intelli-M Access Person items, determine which Active Directory attributes will represent the person s site code and card number. NOTE Intelli-M Access requires a valid Site Code and Card Number in order to create a Person. Unlike the table in 2.2.1 Integration checklist on page 4, there is no specific mappings for the Site Code and Card Number. You must consult with your IT representative to determine which Active Directory attributes will represent these attributes. You can also create custom Active Directory attributes if there is a need to do so. By default, Intelli-M Access Professional maps the Windows user s Side Code to the FAX attribute and maps the Card Number to the Pager attribute. Because Windows users typically do not have a personal FAX number or carry a pager, these fields are rarely used. If this mapping is permissible, then you need to do nothing; the software will map these attributes for you. The figure below shows an example Properties dialog for a user where the Site Code has been written into the Fax field and the Card Number has been written into the Pager field. User Properties dialog PIN code attribute You can reserve an Active Directory attribute as the PIN code for the user. Use the steps described above to choose the attribute. Intelli-M Access V4.0 Professional User Manual 5

SECTION 2: ACTIVE DIRECTORY INTEGRATION Group filter attribute Active Directory contains numerous Groups that are not needed by Intelli-M Access, but still fill the Intelli-M Access Groups page with unnecessary Group names. To filter unwanted Groups from being copied from Active Directory, Intelli-M Access maintains a Group Filter that reserves the Active Directory attribute wwwhomepage (by default) to identify a group as one that Intelli-M Access needs. This attribute is an attribute for Windows Domain Groups. By setting the attribute to infinias, Intelli-M Access will recognize this group as its group and be copied to Intelli-M Access. Consult with your IT representative to determine which Group attribute can be reserved for this purpose. The figure below shows an example of a Windows Group that has been identified as an Intelli-M Access group using the wwwhomepage attribute. Group Properties in Active Directory NOTE Complete the steps above and make the necessary changes within Active Directory before moving to the next section in this document. This includes setting the Group Filter attribute and updating all relevant Windows Users with their appropriate Site Code and Card Number. 2.2.3 Create a Peripheral After determining which user attributes to map and which Group Filter attribute to use, you can begin to create a peripheral in Intelli-M Access: 1. Login to Intelli-M Access, then open the Peripherals tab. Click the Create Peripheral command in the Actions menu to open the Create Peripheral dialog. See below. 6 www.infinias.com

SECTION 2: ACTIVE DIRECTORY INTEGRATION Create Peripheral dialog 2. Click New in the left frame to open a list of plugins available to use as Peripherals. The list should include one or more options: Create new Peripheral If you do not see Active Directory Connection in the list, click Discover. Wait several seconds for Intelli-M Access to re-discover the plugins, then click New again. If the plugin installation proceeded correctly, you will see the Active Directory Connection entry. If you still do not see Active Directory Connection in the list, verify that you are using a licensed Intelli-M Access Professional installation. 3. Select the Active Directory Connection menu item to start creating the Peripheral with this plugin. A Create New Active Directory Connection popup dialog will appear: Intelli-M Access V4.0 Professional User Manual 7

SECTION 2: ACTIVE DIRECTORY INTEGRATION New Active Directory connection dialog Use this configuration page to map Intelli-M Access fields (the labels on the left side of the UI) to Active Directory attributes (the entry fields on the right side of the UI). The Active Directory attribute names are case-sensitive. The only Active Directory users who will be transferred to Intelli-M Access are users with a Site Code and Card Code field mapping. Site, Card Code, or PIN Code fields must be mapped with currently unused attributes in Active Directory. Most of the remaining mappings are created using logical choices, such as email for the Primary Email Address. Simply map the remaining fields that are important. Domain: Contact your IT department for correct domain, domain user, and domain pasword credentials. Update Interval (seconds): Set the polling interval (in seconds) for how often Intelli-M Access downloads changes from Active Directory. Site Code: Provide an unused Active Directory attribute that you want to re-use and map to the Site Code (aka Facility Code) of the User's card number. Card Code: Provide an unused Active Directory attribute that you want to re-use and map to the User's Card Code (Card Number). Title: Provide the Active Directory attribute that you want to map to the User name prefix (e.g. Mr., Mrs., Miss, etc). The personaltitle attribute is used by default. 8 www.infinias.com

SECTION 2: ACTIVE DIRECTORY INTEGRATION Suffix: Provide the Active Directory attribute that you want to map to the Users Name suffix (e.g. Jr., Esq., etc). No default attribute is provided. Department: Provide the Active Directory attribute that you want to map to the User company department membership. The department attribute is used by default. Company: Provide the Active Directory attribute that you want to map to the company at which the user is employed. The company attribute is used by default. Office: Provide the Active Directory attribute that you want to map to the office in which the user is employed. The physicaldeliveryofficename Attribute is used by default. Building: Provide the Active Directory attribute that you want to map to the building in which the User is located. There is no default attribute. Job Title: Provide the Active Directory attribute that you want to map to the User s job title. In Intellli-M Access, Job Title is referred to as Position. The title attribute is used by default. Phone Number: Provide the Active Directory attribute that you want to map to the User s office phone number. The telephonenumber attribute is used by default. Phone Extension: Provide the Active Directory attribute that you want the user s telephone extension, if it exists. There is no default attribute. Cell Phone: Provide the Active Directory attribute that you want to map to the User s cell phone number. The mobile attribute is used by default. License Plate: Provide the Active Directory attribute that you want to User s automobile license plate. There is no default attribute. Primary Email: Provide the Active Directory attribute that you want to map to the user s work email address. The email attribute is used by default. Secondary Email: Provide the Active Directory attribute that you want to User personal or secondary email address, if it exists. There is no default attribute PIN Code: Provide an unused Active Directory attribute that you want to re-use and map to the Site Code (aka Facility Code) of the user s card number. Employee Id: Provide the Active Directory attribute that you want to map to the user s employee ID, if it exists. The employeeid attribute is used by default. Notes: Provide the Active Directory attribute that you want to map to any notes written by the administrator about the user account. The description attribute is used by default. User attribute: Active Directory normally creates a canonical name of Users for every Windows User Account. This name appears in the distinguished name as CN=Users. The Active Directory plugin relies on CN=Users to tell the difference between a Windows User Account and all other objects in Active Directory. Organizations often re-use the CN attribute to denote organizational hierarchy, and change the name Users to something else. If your organization has modified the canonical name, then we strongly recommend that you add Users to your list of Organizational Units (i.e. OU=Users). If you cannot make this change, then enter the name that you used to replace CN=Users in the User Attribute field. Group attribute: The Group Attribute lets you specify which Active Directory groups should be transferred to Intelli-M Access and which ones should not. If you leave this attribute field blank, all Active Directory Groups will be transferred. To designate one or more Groups for transfer, apply the following steps: i. Choose an unused attribute in Active Directory such as extensionattribute1, extensionattribute2, etc. that you can reserve for this purpose Intelli-M Access V4.0 Professional User Manual 9

SECTION 2: ACTIVE DIRECTORY INTEGRATION ii. Using the Active Directory Users and Groups utility, enter the string infinias in the attribute for all Groups that you want to transfer to Intelli-M Access. iii. Enter the attribute name you chose into the Group Attribute field in the configuration UI. For example, if you chose extensionattribute1, then enter extensionattribute1 into this field. Immediate Transfer Users and Groups: Check this box to connect to Active Directory and transfer its entire database of Groups and Users into Intelli-M Access. NOTE Users in Active Directory must have attributes set for a Site Code and a Card Number to transfer automatically into Intelli-M Access. Only Groups that have infinias in the selected Group Attribute in Active Directory will be transferred into Intelli-M Access. 4. When you finish editing the fields in the Create new Active Directory Connection screen, click Create AD Monitor. Intelli-M Access will connects to the Active Directory server using the supplied information. The system will then connect to the Domain Controller and start listening for changes to Windows Users and Groups. If you checked the Immediately Transfer Users and Groups box, it will also start downloading all appropriate Users and Groups to Intelli-M Access. This download process will run in the background and may take minutes or hours to complete. If you entered the correct server information, the progress will complete and a new entry in the Discovered Devices list will appear. See the screen below: New Active Directory monitor added to Devices list 5. Click the newly-added device to see its configuration: 10 www.infinias.com

SECTION 2: ACTIVE DIRECTORY INTEGRATION Device Name and Configuration 6. The Name field defines the actual name of the Peripheral as determined by Intelli-M Access. Change the name from its default as needed, then click Create to create the Peripheral. It will appear on the Peripheral page with the Room Mailbox names. See below. Created Peripheral Active Directory (WIN2008-Inf.training.local) 7. Click the People tab to verify that the Active Directory users with the appropriate infinias Group Filter are created in Intelli-M Access. Intelli-M Access V4.0 Professional User Manual 11

SECTION 2: ACTIVE DIRECTORY INTEGRATION People imported from Active Directory The Active Directory Peripheral updates Intelli-M Access when a corresponding change is made in Active Directory. 12 www.infinias.com

SECTION 3: MICROSOFT OUTLOOK INTEGRATION SECTION 3 Microsoft Outlook Integration Intelli-M Access Professional can integrate with a Microsoft Exchange Server to allow Outlook Meetings or Appointments to automatically unlock and re-lock doors controlled by Intelli-M Access. Also, Microsoft Exchange Server can send Meeting Reminder, Meeting Started, and Meeting Ended events to Intelli-M Access for specified Exchange room mailboxes. This form of ad-hoc scheduling allows you to manage the lock status of a door that doesn t operate on a regular schedule like that of an office or retail business. Sporting events, party reservations at public buildings or churches are typical venues where Outlook Calendar integration can be useful. If your organization does not have Microsoft Exchange, you can use Google Calendar integration (see SECTION 4 Google Calendar Integration on page 23). 3.1 How it works Intelli-M Access will monitor the Calendar of each specified Exchange Room Mailbox. Whenever a meeting or appointment is scheduled in the Calendar of a Room Mailbox, Intelli-M Access Exchange integration will send event information to Intelli-M Access informing it of these calendar events. A Meeting Started event will be sent to Intelli-M Access when a meeting is scheduled to begin, and a Meeting Ended Event will be sent to Intelli-M Access when the meeting is scheduled to end. If you also requested Exchange to send out a Meeting Reminder notification to the required attendees, it will also send a Meeting Reminder event to Intelli-M Access. These events appear in Intelli-M Access and can be used with Rules feature to initiate actions, such as to unlock and re-lock meeting room or public-access doors. For example, Intelli-M Access can be configured to unlock a door when it receives a Meeting Reminder or Meeting Start event, and can be configured to re-lock the door (or revert the door schedule) when the Meeting Ended event is received. After configuring the unlock/revert Rules in Intelli-M Access, you can control door access by creating a meetings or appointments in Outlook. These features are accomplished by monitoring the calendar of a Exchange Room Mailbox. A Room Mailbox is an ordinary Exchange user email account that is preconfigured to automatically accept all meeting or appointment requests in Outlook. When you create a meeting or appointment, you add a Room Mailbox to the Resources list. Adding a Room Mailbox to the Resources list reserves that room for that time period, preventing anyone else from organizing a Meeting or Appointment for that room at the same time of day. In addition, that meeting gets automatically added to that Room Mailbox Calendar. Intelli-M Access monitors the Room Mailbox Calendar to know when to send the event information described earlier. As meetings or appointments are added, moved or deleted from the Room Mailbox Calendar, Intelli-M Access will monitor these changes. To monitor a Room Mailbox Calendar, Intelli-M Access must log into Exchange with a valid Exchange User account, and Exchange must be configured to allow this User account to view the Room Mailbox Calendar. Intelli-M Access V4.0 Professional User Manual 13

SECTION 3: MICROSOFT OUTLOOK INTEGRATION 3.2 Integration requirements Intelli-M Access Professional requires Microsoft Exchange 2007 or newer. Exchange 2003 and earlier are not supported as they do not provide the necessary integration features. 3.2.1 Integration checklist You must provide information about Microsoft Exchange to the Intelli-M Access Exchange plugin when you configure it, including: Internet Domain. The internet domain name that Exchange uses for creating its email addresses, i.e. the part of your Exchange email address to the right of the @ character. Exchange User Account. The chosen Exchange User account (and its password) that you specified for Calendar permissions in the Exchange Management Console ordinary Mailbox account WebMail URL. Intelli-M Access logs into Exchange via Exchange Web Services to monitor the requested Calendars using the you specified. The URL that you use to read your webmail in an internet browser is similar to the URL that you need. Room Mailbox Email Addresses. The email address of each Room Mailbox you gave Full Access Permissions to in the ordinary Mailbox account in the Exchange Management Console. These email addresses are used by Intelli-M Access to know which Room Mailbox accounts to monitor. Configuration of the Exchange Calendar is performed by creating an Intelli-M Access Peripheral, then referencing that Peripheral when you create one or more Rules configured to use that Peripheral. 3.2.2 Calendar permissions To integrate Microsoft Exchange with Intelli-M Access, you must configure Exchange to allow an ordinary Exchange Mailbox account to have Full Access permission to each Room Mailbox account whose calendars you want to monitor. Although you can use any Exchange Mailbox account for this purpose, we recommend that you create a Mailbox account specifically for monitoring calendars. To give Full Access permission to a mailbox to monitor the Room Mailbox Calendars: 1. Open the Microsoft Exchange Management Console. 2. In the tree view on the left side of the console window, click the plus sign to open Microsoft Exchange On-Premises (...), then click the plus sign to open Recipient Configuration. 3. Select Mailbox to view all Exchange Mailboxes in the right side view. 4. Right-click each Room Mailbox you want to manage, then select the Manage Full Access Permission... menu addendum item. 5. Follow the instructions to add the chosen ordinary Mailbox account to the list of accounts that have full access permissions to this Room Mailbox. 14 www.infinias.com

SECTION 3: MICROSOFT OUTLOOK INTEGRATION 6. Perform the steps above for all Room Mailboxes that represent areas with doors being managed by Intelli-M Access. 3.3 Create a Peripheral in Intelli-M Access To create a Peripheral: 1. Login to Intelli-M Access, then open the Peripherals tab. 2. Click the Create Peripheral command in the Actions menu to open the Create Peripheral dialog. See below. Create Peripheral dialog 3. Click New in the left frame to open a list of plugins available to use as Peripherals. The list should include one or more options. Create new Peripheral Intelli-M Access V4.0 Professional User Manual 15

SECTION 3: MICROSOFT OUTLOOK INTEGRATION If you do not see Exchange Calendar in the menu: a. Click Discover, then wait several seconds for Intelli-M Access to re-discover the plugins.. Click New again. If you still do not see the Exchange Calendar menu item, please verify that you are using a licensed Intelli-M Access Professional installation. If the plugin installation proceeded correctly, you will see the Exchange Calendar entry listed among the other menu items in the popup menu. 4. Select the Exchange Calendar menu item to start creating the Peripheral with this plugin. The Create new Exchange Calendar popup dialog will appear: New Exchange Calendar dialog 5. In the Create new Exchange Calendar popup dialog, enter the following: Domain: Enter the part of your Exchange email address to the right of the @ character. Username: Provide the username of the ordinary Mailbox account you previously gave Full Access Permissions to the Room Mailboxes in Exchange Management Console. Enter only the username portion of the account, the part of your Exchange email address to the left of the @ character. Password: Enter the password for the Username account you entered above. WebMail URL: Replace the mail.mycompany.com portion of the sample WebMail URL with your corporate webmail name. If you are using Exchange 2007 or 2010, the remainder of the URL is entered automatically. Room Mailboxes: For each Room Mailbox you previously configured, enter the email address of each conference room, separating each email address with the comma (,) character. The window will update to show a progress bar while Intelli-M Access connects to the Exchange server using your settings: 16 www.infinias.com

SECTION 3: MICROSOFT OUTLOOK INTEGRATION Exchange Calendar integration progress NOTE If the Peripheral Configuration parameters you entered are not accepted, or if a connectivity issue exists (such as a firewall blocking a port), the progress window will revert to the previous Create Peripheral menu where you can change your settings. For each Room Mailbox you specified, the Exchange plugin will send Intelli-M Access three test events: one for Meeting Reminder, one for Meeting Started, and one for Meeting Ended. The purpose for these test events is to inform Intelli-M Access of the Room Mailbox names and the events they will generate. This is used to verify that Intelli-M Access will display this information on the Rules page (for creating Rules). Intelli-M Access Events tab with Exchange Calendar test events 6. When the Create Peripheral process completes, a new entry in the Discovered Devices list will appear. Click the newly added Device to show the configuration settings in the right pane. Intelli-M Access V4.0 Professional User Manual 17

SECTION 3: MICROSOFT OUTLOOK INTEGRATION Device Name and configuration 7. You can change the name from its default if necessary, then click Create. The Peripheral will now be created with Room Mailbox names in the Peripherals page. See below. New peripheral Exchange Calendar (mailbox) 18 www.infinias.com

SECTION 3: MICROSOFT OUTLOOK INTEGRATION 3.4 Create Rules After creating a Peripheral that represents the Exchange Server and its Room Mailboxes, you can create Rules that act on Events generated by the Room Mailboxes for meeting notifications. 3.4.1 Create an Unlock Zone Rule Create an Unlock Zone Rule to unlock the door of a room associated with an Exchange Room Mailbox. To create the rule: 1. Open the Intelli-M Access Configuration interface, if necessary. 2. Click the Rules tab. 3. In the Rules tab, click Create Rule in the Actions list. A popup dialog will appear showing the Access Privilege Rule. 4. In the Type field at the top, open the drop-down lost, then select Unlock Zone. The popup dialog will populate with fields for supplying information to configure the unlock zone rule. See the figure below. Create Unlock Zone rule dialog 5. Configure the rule options as follows: a. Schedule. Choose a Schedule that covers the time you want this Rule to apply (usually the Always schedule).. Ignore the Group, Zone, Door and Reader tabs. c. Event. Select the Meeting Started (or Meeting Reminder) event from the list. Intelli-M Access V4.0 Professional User Manual 19

SECTION 3: MICROSOFT OUTLOOK INTEGRATION d. Peripheral. Choose the Room Mailbox name associated with the Door that secures that area. e. Target Zone. Choose the Zone to unlock. The Zone must contain the door that secures the area represented by the Room Mailbox. 6. Click Create. 3.4.2 Create a Revert Zone Rule You can re-lock the door of a room associated with an Exchange Room Mailbox by creating a Revert Zone Rule for that Room Mailbox. This will revert the door to its normal lock schedule (which is assumed to be locked). 1. From the Intelli-M Access interface, click the Configuration link. 2. Click the Rules tab. 3. When the Rules page appears, click the Create Rule Action from the Actions menu. 4. Open the combo box and select Revert Zone from the list. The popup dialog will populate with fields for supplying information to configure the Revert Zone Rule, which are the same as the Unlock Zone Rule. 5. Configure the rule options as follows: a. Schedule. Choose a Schedule that covers the time you want this Rule to apply (usually the Always schedule). 20 www.infinias.com

SECTION 3: MICROSOFT OUTLOOK INTEGRATION. Ignore the Group, Zone, Door and Reader tabs. c. Event. Select Meeting Ended from the list. d. Peripheral. Choose the same Room Mailbox that you specified in the Unlock Zone Rule. e. Target Zone. Choose the same Zone that you specified in the Unlock Zone Rule. 6. Click Create to create the Rule. 7. Perform these two tasks for each Door associated with a Room Mailbox. 3.4.3 Test the system For each zone you configured above, use Microsoft Outlook or another Exchange client create a meeting or appointment in the zone. Verify that for the meeting you scheduled, door(s) were unlocked and re-locked as expected. Following is an example for testing the integration configuration: 1. Create a meeting with an attendee(s). 2. Identify a zone you configured during the Intelli-M Access integration with Exchange Server. In the example shown below, Conference Room was added as a resource for the meeting. Intelli-M Access V4.0 Professional User Manual 21

SECTION 3: MICROSOFT OUTLOOK INTEGRATION Resources: 3. If you configured the a Meeting Reminder to unlock the resource (zone) door, set the reminder time for the meeting. The example below is shown using Microsoft Outlook. 4. Verify that the doors are unlocked and locked as expected. 22 www.infinias.com

SECTION 4: GOOGLE CALENDAR INTEGRATION SECTION 4 Google Calendar Integration Intelli-M Access Professional can integrate with Google Calendar to allow Google Calendar Appointments to automatically unlock and re-lock doors controlled by Intelli-M Access. Also, Google Calendar can send Meeting Reminder, Meeting Started, and Meeting Ended events to Intelli-M Access for room mailboxes. This form of ad-hoc scheduling allows you to manage the lock status of a door that doesn t operate on a regular schedule like that of an office or retail business. Sporting events, party reservations at public buildings or churches are typical venues where Google Calendar integration can be useful. 4.1 How it works Intelli-M Access will monitor the Calendar of each specified Room Mailbox. When a meeting or appointment is scheduled in the Calendar of a Room Mailbox, the Intelli-M Access integration with Google Calendar will send event information to Intelli-M Access. A Meeting Started event will be sent to Intelli-M Access when a meeting is scheduled to begin, and a Meeting Ended event will be sent to Intelli-M Access when the meeting is scheduled to end. If you also requested Google Calendar to send out a Meeting Reminder notification to the required attendees, it will also send a Meeting Reminder event to Intelli-M Access. These events appear in Intelli-M Access and can be used with the Rules feature to initiate actions, such as to unlock and re-lock meeting room or public-access doors. For example, Intelli-M Access can be configured to unlock a door when it receives a Meeting Reminder or Meeting Start event, and can be configured to re-lock the door (or revert the door schedule) when the Meeting Ended event is received. After configuring the unlock/revert Rules in Intelli-M Access, you can control door access by simply creating a meetings or appointments in Google Calendar. 4.2 Integration checklist To use Google Calendar integration, you must have a Gmail email address. 4.3 Create a Peripheral in Intelli-M Access To create a peripheral: 1. Login to Intelli-M Access. 2. Open the Peripherals tab, then click Create Peripheral in the Actions Menu to open a Create Peripheral dialog: Intelli-M Access V4.0 Professional User Manual 23

SECTION 4: GOOGLE CALENDAR INTEGRATION Create Peripheral dialog 3. Click New in the left frame to open a list of plugins available to use as Peripherals. The list should include one or more options. Create Peripheral (New) menu If you do not see Google Calendar in the popup menu: a. Click Discover, then wait several seconds for Intelli-M Access to re-discover the plugins.. Click New again. If you still do not see the Google Calendar menu item, please verify that you are using a licensed Intelli-M Access Professional installation. If the plugin installation proceeded correctly, you will see the Google Calendar entry listed among the other menu items in the popup menu. 24 www.infinias.com

SECTION 4: GOOGLE CALENDAR INTEGRATION 4. Select the Google Calendar menu item to start creating the Peripheral. A Create new Google Calendar popup dialog will open. New Google Calendar dialog Enter the following information: Google Email Address: Provide your Gmail address. Password: Provide the password for the Gmail address you entered. Meeting Location names: Provide the name of each meeting location you plan to specify when creating Appointments in Google Calendar. Separate each email address with the comma (,) character. NOTE Google Calendar Meeting Location names are whatever you provide Google Calendar when you create an apointment in the Google Calendar web page. Therefore, you must be careful to enter the names in Google Calendar exactly as you have entered them in the Meeting Location names box. Any misspellings will be viewed as a different Location. 5. Click Create Calendar. The window will show a progress bar while Intelli-M Access connects to the Google Calendar using the parameters you provided. Intelli-M Access V4.0 Professional User Manual 25

SECTION 4: GOOGLE CALENDAR INTEGRATION Google Calendar integration progress NOTE If the Peripheral Configuration parameters you entered are unacceptable, or if a connectivity issue exists (such as a firewall blocking a port), the progress window will revert to the previous Create Peripheral menu where you can change your settings. Google Calendar device created When the Create Peripheral process completes, a new entry in the Discovered Devices list will appear. 26 www.infinias.com

SECTION 4: GOOGLE CALENDAR INTEGRATION New Exchange Device added to Devices list 6. Click the newly added Device to show the configuration settings in the right pane. Device Name and configuration 7. You can change the Name from its default if necessary, then click Create. The Peripheral will now be created with Room Mailbox names in the Peripherals page. See below. Intelli-M Access V4.0 Professional User Manual 27

SECTION 4: GOOGLE CALENDAR INTEGRATION New peripheral Google Calendar (myemail) 8. For each Meeting Location name you specified, the Google Calendar plugin will send Intelli-M Access three test events: one for Meeting Reminder, one for Meeting Started, and one for Meeting Ended. The purpose for these test events is to inform Intelli-M Access of the Room Mailbox names and the events they will generate. This is used to verify that Intelli-M Access will display this information on the Rules page (for creating Rules). Verify that these events can be seen in Intelli-M Access. 4.4 Create Rules After creating a Peripheral that represents the Google calendar and its room mailboxes, you can create Rules that act on events generated by the Room Mailboxes for meeting notifications. 4.4.1 Create an Unlock Zone Rule Create an Unlock Zone Rule to unlock the door of a room associated with a room mailbox. To create the rule: 28 www.infinias.com

SECTION 4: GOOGLE CALENDAR INTEGRATION 1. Open the Intelli-M Access Configuration interface, if necessary. Click the Rules tab. 2. 3. In the Rules tab, click Create Rule in the Actions list. A popup dialog will appear showing the Access Privilege Rule. 4. In the Type field at the top, open the drop-down lost, then select Unlock Zone. The popup dialog will populate with fields for supplying information to configure the unlock zone rule. See the figure below. Create Unlock Zone rule dialog 5. Configure the rule options as follows: a. Schedule. Choose a Schedule that covers the time you want this Rule to apply (usually the Always schedule). Ignore the Group, Zone, Door and Reader tabs. c. Event. Select the Meeting Started (or Meeting Reminder) event from the list. Intelli-M Access V4.0 Professional User Manual 29

SECTION 4: GOOGLE CALENDAR INTEGRATION d. e. Peripheral. Choose the Room Mailbox name associated with the Door that secures that area. Target Zone. Choose the Zone to unlock. The Zone must contain the door that secures the area represented by the Room Mailbox. 6. Click Create to create the Rule. 4.4.2 Create a Revert Zone Rule You can re-lock the door of a room associated with an Exchange Room Mailbox by creating a Revert Zone Rule for that Room Mailbox. This will revert the door to its normal lock schedule (which is assumed to be locked). 1. From the Intelli-M Access interface, click the Configuration link. Click the Rules tab. 2. 3. When the Rules page appears, click the Create Rule Action from the Actions menu. 4. Open the combo box and select Revert Zone from the list. The popup dialog will populate with fields for supplying information to configure the Revert Zone Rule, which are the same as the Unlock Zone Rule. 5. Configure the rule options as follows: 30 www.infinias.com

SECTION 4: GOOGLE CALENDAR INTEGRATION a.. Schedule. Choose a Schedule that covers the time you want this Rule to apply (usually the Always schedule). Ignore the Group, Zone, Door and Reader tabs. c. Event. Select Meeting Ended from the list. d. e. Peripheral. Choose the same Room Mailbox that you specified in the Unlock Zone Rule. Target Zone. Choose the same Zone that you specified in the Unlock Zone Rule. 6. Click Create to create the Rule. 7. Perform these two tasks for each Door associated with a Room Mailbox. 4.4.3 Test the system For each zone you configured above, open and log into Google Calendar with an Internet browser to create an appointment in the zone. (NOTE: To access Google Calendar you may need a special access code from your Google Calendar Administrator.) Verify that for the meeting you scheduled, door(s) were unlocked and re-locked as expected. Following is an example for testing the iintegration configuration: 1. Create an appointment with attendees 2. Identify a zone you configured during the Intelli-M Access integration with Google Calendar. In the example shown below, Conference Room (Where) and Executive Board Room were added as resources for meetings. Intelli-M Access V4.0 Professional User Manual 31

SECTION 4: GOOGLE CALENDAR INTEGRATION New Google Calendar Appointment Page Meeting Subject. Provide a subject for the new meeting. This will appear as part of the Event in Intelli-M Access. The other part of the Event will be the Meeting Reminder, Meeting Started and Meeting Ended Events. In the example above, the subject of the meeting is Important Meeting. Where. Provide the exact name of the location you specified in the Intelli-M Access Google Calendar configuration interface. NOTE The Where name and the name in Intelli-M Access must match. If they do not, the event w ill appear in IntelliM Access, but it will be seen as a locaiton not present, and no door will be unlocked. Reminders. If you keep the Email Reminder, a Meeting Reminder event will be generated in the time frame identified in the Calendar. All other items on the page are not relevant to Intelli-M Access. Use other items on the page as needed, then click Save to create the Appointment. 3. If you configured the a Meeting Reminder to unlock the resource (zone) door, set the reminder time for the meeting. 4. Verify that the door(s) unlock(s) and lock(s) as expected. 32 www.infinias.com