Solved

public folder permissions 2007 SP1

Posted on 2009-04-07
6
335 Views
Last Modified: 2012-05-06
I have my public folders setup and need to set the permission on each of the folder(s) and subfolders.  I want some people to be able to view and others to not know they are there.  

Most of the post I have read are on a different version of exchange.  In my version I cannot see any folders to set permissions to.  I can under origanization config set a person as the public folder admin.

When I go to the exchange tools to handle the public folders, I do not see where I can set the permissions.

When I go to my outlook, click on the folder under summary permission It shows author and you cannot add or delete any roles.

What next?
0
Comment
Question by:briordan79
  • 3
  • 3
6 Comments
 
LVL 65

Expert Comment

by:Mestha
ID: 24092749
If you only see Author then that is all the permissions that you have.
What I would suggest that you do is create a group called "Public Folder Admins" or something like that, then use the AddUsersToPFRecursive.ps1 script (which is the scripts directory in the Exchange programs files group) to add that group as an owner to all folders. You can then add Administrator and possibly yourself to the group.
By granting the group Owner rights rather than a specific user it makes it easier to add another administrator at a later date.

http://technet.microsoft.com/en-us/library/aa998834.aspx

Simon.
0
 

Author Comment

by:briordan79
ID: 24097206
Couple of questions:

How come when I set these up and I have admin rights I am assigned author as the permission

When you suggest create a group called public folder admins, is that in active directory?  

Thanks
0
 
LVL 65

Accepted Solution

by:
Mestha earned 400 total points
ID: 24098914
Your permissions in the Exchange have no relation to Public Folder permissions.

You can create the group either in AD or Exchange, as they are one and the same. However to use the group for permissions in Public Folders it needs to be mail enabled.

If you created the Public Folders you should have owner permissions. With Public Folders most permissive wins, so even if you are being granted more restrictive permissions via group membership or specifically, a higher permission could apply.

Simon.
0
Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

 

Author Comment

by:briordan79
ID: 24101215
Simon,

I have setup a group in the Active Directory called PublicFolderAdmin

My PF has "My Public Folders" as the top level and test as the next level

I used the following command for myself and it worked:  AddUsersToPFRecursive.ps1 -TopPublicFolder "\My Public Folders" -User "jswift" -Permission Reviewer

Next I tried running this command for that group or user:  
AddUsersToPFRecursive.ps1 -TopPublicFolder "\My Public Folders" -User "PublicFolderAdmin" -Permission Reviewer

and it throws out an error:  Get-PublicFolder : A parameter cannot be found that matches parameter name 'Public'.At line:1 char:17 + get-publicfolder  <<<< -identity \My Public Folders -Recurse -resultsize unlimited

The Public Folder is mail enabled.

Thanks
0
 
LVL 65

Expert Comment

by:Mestha
ID: 24101383
Hopefully you meant that the group was mail enabled above?
What kind of group is it?

Simon.
0
 

Author Comment

by:briordan79
ID: 24101589
The group mentioned above that I created in Active Directory has the following:

Group Scope is global, Group Type is secured, Canonical name of object is xxx/users/publicfolderadmin

When I ran the get-users in the EMS I did not see the publicfolderadmin, I did see if when I ran the get-groups.

"My Public Folders is mail enabled"

Thank you for your patience.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Resolve DNS query failed errors for Exchange
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now