• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 326
  • Last Modified:

Folders do not expand in Outlook 2007 - no error displays in client.

This is a shared mailbox that was converted from Lotus Notes to Exchange with a migration tool.  It worked for all the users that existed during the conversion.  A new user needs access to the mailbox.
None of the current users has "full access" to it so I was trying to figure out how to grant it without full access.
I've done the following:
Add-ADPermission using a group with -ExtendedRights:Send-As -AccessRights:ReadProperty, WriteProperty -Properties:'Personal Information'
set-mailbox -GrantSendOnBehalfTo the new user
Checked the permissions on the properties of the mailbox and added the user with editor access and the result is no longer an error but the mailbox will not expand or display the folders.  None of the other users have elevated access,  The other users are listed here with "none."
I've read on some other posts that there was a "share" box on the permissions tab that I don't see on the 2007 client.  Does anyone know what this particular permission is and how I change it for the folders to expand?
Would it be the -Accessright ** -InheritanceType all?  and what would be the appropriate accessright be if I don't want it to be fullaccess?  
  • 2
1 Solution
There are basically three ways of having access to the mailbox.

From the server you can only grant Full Mailbox Access, nothing else.
That can either be via the Full Access setting in EMC, or via the combination of Send As/Receive As. Both will grant Full Access.

There is no such thing as Read only permissions to the mailboxes.
Granting Send as AND Send on Behalf of, does nothing but confuse Exchange, it should be one or the other.

The "read" permission is for the object (ie the user account), not the content.

Otherwise it is a setting in the mailbox itself, granted on a per folder basis set at the top of the tree to begin with (Right click on Outlook Today/ "Mailbox - Username", choose Properties then the permissions tab.

dawnnewellAuthor Commented:
Then according to what you have stated above, you cannot grant read/ author/editor access to a users calendar?  From a "shared calendar" perspective, we have users that want more granular access.  So some people cannot delete information but can read it and others can update it.  So basically, the calendar is like the mailbox, you either have it or you don't?
I'm not sure how the migration tools did it but its not easy to recreate anything with granular security once its been moved.
As I wrote, you can grant access to the calendar only, but not from the server. It is possible to set the permissions on the client at a folder level. Server side it is full access to everything or nothing at all.


Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now