Solved

Remove / reset permissions from Exchange sub-tree or .pst-file

Posted on 2010-11-16
6
851 Views
Last Modified: 2012-05-10
Hi,

i have migrated from an externally hosted Exchange solution to a local Exchange on SBS 2008. I have copied all mailboxes and public folders via .pst export / import.

Mailboxes work just fine, but I have issues with the public folders:

On the external server the access permissions for the public folders were issued distinctly for every user (level 7), while standard permissions where none, like:

standard: none
user a: level 7
user c: level 7
user d: level 7
user ....

After import on the new server this results in a lot of level 7 permissions for invalid UIDs and no standard permissions (+ a level 8 permission for the user used for import).

standard: none
importing user: level 8
NT User:S-1-23-45-67......: level 7
NT User:S-1-23-45-67......: level 7
NT User:S-1-23-45-67......: level 7
.........

I would now have to go through every sub-folder and set standard permissions to level 7 (and delete the invalid entries).

Can I some somehow reset or edit all permissions either in the pst or after importing them to Exchange?

Any advice greatly appreciated.
0
Comment
Question by:alexandrus
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 10

Expert Comment

by:Tyler Laczko
ID: 34146048
If you open the mail manager
browse through the tree to your public folder
right click and there is a permissions wizard that can change permissions through the tree.

(I recently learned of this amazing feature)
0
 
LVL 10

Expert Comment

by:Tyler Laczko
ID: 34146094
Exchange System Manager
Admin Groups->First Admin Group->Folders->Public Folders
Right click on any part of the tree and select: All Tasks->Manage Settings
0
 

Author Comment

by:alexandrus
ID: 34146513
Thank you for the quick answer, but I can't seem to find admin groups in the Exchange Manager. Are you using Exchange 2007?

I have opened the public folder management console, but there is no task as you described it.
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LVL 10

Accepted Solution

by:
Tyler Laczko earned 500 total points
ID: 34146769
sorry thats for 2003

You want to dl and install pfdadmin for your exchange server. It gives a gui for all management tasks.

MS really messed up with their admin side of 2007
0
 
LVL 10

Assisted Solution

by:Tyler Laczko
Tyler Laczko earned 500 total points
ID: 34146776
0
 

Author Comment

by:alexandrus
ID: 34148470
Yep, had found it myself..

For all who want to use PFDAVAdmin.EXE: It needs .NET Framework 1.1 installed (the tool itself won't tell you this).

As it seems, MS has made this point better in Exchange 2010.
0

Featured Post

Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
Check out this step-by-step guide for using the newly updated Experts Exchange mobile app—released on May 30.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question