Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Remove / reset permissions from Exchange sub-tree or .pst-file

Posted on 2010-11-16
6
846 Views
Last Modified: 2012-05-10
Hi,

i have migrated from an externally hosted Exchange solution to a local Exchange on SBS 2008. I have copied all mailboxes and public folders via .pst export / import.

Mailboxes work just fine, but I have issues with the public folders:

On the external server the access permissions for the public folders were issued distinctly for every user (level 7), while standard permissions where none, like:

standard: none
user a: level 7
user c: level 7
user d: level 7
user ....

After import on the new server this results in a lot of level 7 permissions for invalid UIDs and no standard permissions (+ a level 8 permission for the user used for import).

standard: none
importing user: level 8
NT User:S-1-23-45-67......: level 7
NT User:S-1-23-45-67......: level 7
NT User:S-1-23-45-67......: level 7
.........

I would now have to go through every sub-folder and set standard permissions to level 7 (and delete the invalid entries).

Can I some somehow reset or edit all permissions either in the pst or after importing them to Exchange?

Any advice greatly appreciated.
0
Comment
Question by:alexandrus
  • 4
  • 2
6 Comments
 
LVL 10

Expert Comment

by:Tyler Laczko
ID: 34146048
If you open the mail manager
browse through the tree to your public folder
right click and there is a permissions wizard that can change permissions through the tree.

(I recently learned of this amazing feature)
0
 
LVL 10

Expert Comment

by:Tyler Laczko
ID: 34146094
Exchange System Manager
Admin Groups->First Admin Group->Folders->Public Folders
Right click on any part of the tree and select: All Tasks->Manage Settings
0
 

Author Comment

by:alexandrus
ID: 34146513
Thank you for the quick answer, but I can't seem to find admin groups in the Exchange Manager. Are you using Exchange 2007?

I have opened the public folder management console, but there is no task as you described it.
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 10

Accepted Solution

by:
Tyler Laczko earned 500 total points
ID: 34146769
sorry thats for 2003

You want to dl and install pfdadmin for your exchange server. It gives a gui for all management tasks.

MS really messed up with their admin side of 2007
0
 
LVL 10

Assisted Solution

by:Tyler Laczko
Tyler Laczko earned 500 total points
ID: 34146776
0
 

Author Comment

by:alexandrus
ID: 34148470
Yep, had found it myself..

For all who want to use PFDAVAdmin.EXE: It needs .NET Framework 1.1 installed (the tool itself won't tell you this).

As it seems, MS has made this point better in Exchange 2010.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
Many people use more than one email account and so it becomes difficult for them to manage them when they use separate accounts,  so, in this article, I have shared an easy way to add Other Mail Accounts in your Google Inbox. It helps to combine all…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
how to add IIS SMTP to handle application/Scanner relays into office 365.

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question