Solved

public folder permissions 2007 SP1

Posted on 2009-04-07
6
336 Views
Last Modified: 2012-05-06
I have my public folders setup and need to set the permission on each of the folder(s) and subfolders.  I want some people to be able to view and others to not know they are there.  

Most of the post I have read are on a different version of exchange.  In my version I cannot see any folders to set permissions to.  I can under origanization config set a person as the public folder admin.

When I go to the exchange tools to handle the public folders, I do not see where I can set the permissions.

When I go to my outlook, click on the folder under summary permission It shows author and you cannot add or delete any roles.

What next?
0
Comment
Question by:briordan79
  • 3
  • 3
6 Comments
 
LVL 65

Expert Comment

by:Mestha
ID: 24092749
If you only see Author then that is all the permissions that you have.
What I would suggest that you do is create a group called "Public Folder Admins" or something like that, then use the AddUsersToPFRecursive.ps1 script (which is the scripts directory in the Exchange programs files group) to add that group as an owner to all folders. You can then add Administrator and possibly yourself to the group.
By granting the group Owner rights rather than a specific user it makes it easier to add another administrator at a later date.

http://technet.microsoft.com/en-us/library/aa998834.aspx

Simon.
0
 

Author Comment

by:briordan79
ID: 24097206
Couple of questions:

How come when I set these up and I have admin rights I am assigned author as the permission

When you suggest create a group called public folder admins, is that in active directory?  

Thanks
0
 
LVL 65

Accepted Solution

by:
Mestha earned 400 total points
ID: 24098914
Your permissions in the Exchange have no relation to Public Folder permissions.

You can create the group either in AD or Exchange, as they are one and the same. However to use the group for permissions in Public Folders it needs to be mail enabled.

If you created the Public Folders you should have owner permissions. With Public Folders most permissive wins, so even if you are being granted more restrictive permissions via group membership or specifically, a higher permission could apply.

Simon.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Author Comment

by:briordan79
ID: 24101215
Simon,

I have setup a group in the Active Directory called PublicFolderAdmin

My PF has "My Public Folders" as the top level and test as the next level

I used the following command for myself and it worked:  AddUsersToPFRecursive.ps1 -TopPublicFolder "\My Public Folders" -User "jswift" -Permission Reviewer

Next I tried running this command for that group or user:  
AddUsersToPFRecursive.ps1 -TopPublicFolder "\My Public Folders" -User "PublicFolderAdmin" -Permission Reviewer

and it throws out an error:  Get-PublicFolder : A parameter cannot be found that matches parameter name 'Public'.At line:1 char:17 + get-publicfolder  <<<< -identity \My Public Folders -Recurse -resultsize unlimited

The Public Folder is mail enabled.

Thanks
0
 
LVL 65

Expert Comment

by:Mestha
ID: 24101383
Hopefully you meant that the group was mail enabled above?
What kind of group is it?

Simon.
0
 

Author Comment

by:briordan79
ID: 24101589
The group mentioned above that I created in Active Directory has the following:

Group Scope is global, Group Type is secured, Canonical name of object is xxx/users/publicfolderadmin

When I ran the get-users in the EMS I did not see the publicfolderadmin, I did see if when I ran the get-groups.

"My Public Folders is mail enabled"

Thank you for your patience.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out what you should include to make the best professional email signature for your organization.
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

912 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now