• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 352
  • Last Modified:

Deny user or group access to all exchange 2003 public folders

How can I keep a user or group from seeing or accessing all public folders?

I've tried going to the Security tab of 'org\Administrative Groups\First Administrative Group\Folders\Public Folders' and adding the user and also adding the group and denying every checkbox, but the user or group can still access the public folders.

0
jpassmore
Asked:
jpassmore
  • 3
  • 2
1 Solution
 
Justin OwensITIL Problem ManagerCommented:
Try setting the permissions from your Outlook client instead of the Exchange server (right click and select security).

Justin
0
 
jpassmoreAuthor Commented:
This will work for individual public folders, but I need this for All public folders.
0
 
Justin OwensITIL Problem ManagerCommented:
Have you disabled inheritance?  If not, do this at your top level and you will be fine.  If you have, then you will have to go folder by folder regardless of if on server or on client.

Justin
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
jpassmoreAuthor Commented:
I'm not sure how to disable inheritance at the top level.  In Outlook there is no security tab at 'all public folders' and in esm properties of public folder I don't see a way to do that.

How do you stop the inheritance?
0
 
Justin OwensITIL Problem ManagerCommented:
I don't have access to an Exchange 2003 server to give you a walk through.  We will have to let another Expert chime in.
0
 
MesthaCommented:
There is no way to stop a user from seeing all public folders server side. Blocking access to the public folder store will actually stop Outlook from working.

Your best option is to create a group called "Restricted Access" or something like that.
Then you will have to add that group to all public folders. pfdavadmin should be able to do that for you.
I suggest a group, rather than the user because
a. It allows you to add more people to the group.
b. When the user leaves, you can just remove their membership and not have to worry about cleaning up the public folders afterwards.

Simon.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now