Solved

public folder permissions 2007 SP1

Posted on 2009-04-07
6
340 Views
Last Modified: 2012-05-06
I have my public folders setup and need to set the permission on each of the folder(s) and subfolders.  I want some people to be able to view and others to not know they are there.  

Most of the post I have read are on a different version of exchange.  In my version I cannot see any folders to set permissions to.  I can under origanization config set a person as the public folder admin.

When I go to the exchange tools to handle the public folders, I do not see where I can set the permissions.

When I go to my outlook, click on the folder under summary permission It shows author and you cannot add or delete any roles.

What next?
0
Comment
Question by:briordan79
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 65

Expert Comment

by:Mestha
ID: 24092749
If you only see Author then that is all the permissions that you have.
What I would suggest that you do is create a group called "Public Folder Admins" or something like that, then use the AddUsersToPFRecursive.ps1 script (which is the scripts directory in the Exchange programs files group) to add that group as an owner to all folders. You can then add Administrator and possibly yourself to the group.
By granting the group Owner rights rather than a specific user it makes it easier to add another administrator at a later date.

http://technet.microsoft.com/en-us/library/aa998834.aspx

Simon.
0
 

Author Comment

by:briordan79
ID: 24097206
Couple of questions:

How come when I set these up and I have admin rights I am assigned author as the permission

When you suggest create a group called public folder admins, is that in active directory?  

Thanks
0
 
LVL 65

Accepted Solution

by:
Mestha earned 400 total points
ID: 24098914
Your permissions in the Exchange have no relation to Public Folder permissions.

You can create the group either in AD or Exchange, as they are one and the same. However to use the group for permissions in Public Folders it needs to be mail enabled.

If you created the Public Folders you should have owner permissions. With Public Folders most permissive wins, so even if you are being granted more restrictive permissions via group membership or specifically, a higher permission could apply.

Simon.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:briordan79
ID: 24101215
Simon,

I have setup a group in the Active Directory called PublicFolderAdmin

My PF has "My Public Folders" as the top level and test as the next level

I used the following command for myself and it worked:  AddUsersToPFRecursive.ps1 -TopPublicFolder "\My Public Folders" -User "jswift" -Permission Reviewer

Next I tried running this command for that group or user:  
AddUsersToPFRecursive.ps1 -TopPublicFolder "\My Public Folders" -User "PublicFolderAdmin" -Permission Reviewer

and it throws out an error:  Get-PublicFolder : A parameter cannot be found that matches parameter name 'Public'.At line:1 char:17 + get-publicfolder  <<<< -identity \My Public Folders -Recurse -resultsize unlimited

The Public Folder is mail enabled.

Thanks
0
 
LVL 65

Expert Comment

by:Mestha
ID: 24101383
Hopefully you meant that the group was mail enabled above?
What kind of group is it?

Simon.
0
 

Author Comment

by:briordan79
ID: 24101589
The group mentioned above that I created in Active Directory has the following:

Group Scope is global, Group Type is secured, Canonical name of object is xxx/users/publicfolderadmin

When I ran the get-users in the EMS I did not see the publicfolderadmin, I did see if when I ran the get-groups.

"My Public Folders is mail enabled"

Thank you for your patience.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
Find out what you should include to make the best professional email signature for your organization.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question