Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Weird delegate issue

Posted on 2011-10-28
Medium Priority
Last Modified: 2012-05-12
Hi All,

We're using Exchange 2010, Windows 2008 R2 and Outlook 2007 clients.

We have a user that has delegate permissions for two calendars. We've confirmed using EMS that permissions are in place. When she restarts her PC, delegate permissions for one of the calendars disappear - the other remains in tact.

Any ideas?

Question by:johnvlahos
  • 4
  • 2
LVL 16

Expert Comment

by:Madan Sharma
ID: 37045055
On Server:- just run calendar repair agent on your exchange server it will rectify all the issues if there is any. visit this link to view how to run calendar repair http://www.msexchange.org/articles_tutorials/exchange-server-2010/management-administration/exchange-2010-calendar-repair-part1.html

On Outlook just try to create a new profile and check again.
LVL 15

Assisted Solution

jrhelgeson earned 2000 total points
ID: 37047501
Something isn't getting updated on the server.
I'd try setting the permissions from the server using Exchange PowerShell:

The following will give Marge & Homer author access to Bart & Lisa's calendar (they can add & remove, update, etc)
add-MailboxFolderPermission Bart@simpson.com:\Calendar -User Homer@simpson.com -AccessRights Author
add-MailboxFolderPermission Lisa@simpson.com:\Calendar -User Homer@simpson.com -AccessRights Author
add-MailboxFolderPermission Bart@simpson.com:\Calendar -User Marge@simpson.com -AccessRights Author
add-MailboxFolderPermission Lisa@simpson.com:\Calendar -User Marge@simpson.com -AccessRights Author

This will give Bart & Lisa *REVIEWER* access to Homer & Marge
add-MailboxFolderPermission Homer@simpson.com:\Calendar -User Bart@simpson.com -AccessRights Reviewer
add-MailboxFolderPermission Homer@simpson.com:\Calendar -User Lisa@simpson.com -AccessRights Reviewer
add-MailboxFolderPermission Marge@simpson.com:\Calendar -User Bart@simpson.com -AccessRights Reviewer
add-MailboxFolderPermission Marge@simpson.com:\Calendar -User Lisa@simpson.com -AccessRights Reviewer

Verify permission by:
get-MailboxFolderPermission Homer@simpson.com:\Calendar
get-MailboxFolderPermission Marge@simpson.com:\Calendar
get-MailboxFolderPermission Bart@simpson.com:\Calendar
get-MailboxFolderPermission Lisa@simpson.com:\Calendar

If you are updating permisions on folders, rather than adding them, uset the "set-" version of the command
set-MailboxFolderPermission Lisa@simpson.com:\Calendar -User Homer@simpson.com -AccessRights Reviewer
set-MailboxFolderPermission Bart@simpson.com:\Calendar -User Lisa@simpson.com -AccessRights Reviewer

Open in new window


Author Comment

ID: 37066710
Guys - thanks. We've tried all this. Unfortunately the permissions only work until the delegate logs off the network.

It's a very odd problem...
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

LVL 15

Assisted Solution

jrhelgeson earned 2000 total points
ID: 37067797
I would engage Product Support Services... I think I might be witnessing the same exact problem.
I could not point out exactly why people kept on randomly losing their permissions - but now I can investigate when they are losing them and see if it is happening when they log off.

One thing that I have put into place that appears to be helping my situation is I turned on Calendar repair:

I got the steps from the following URL:


The commands are:
Get-MailboxServer | fl *calendar*

===On the commands below, replace "EXCH" with the name of your exchange server====
Set-MailboxServer –Identity EXCH –CalendarRepairMissingItemFixDisabled $true
Set-MailboxServer –Identity EXCH –CalendarRepairIntervalEndWindow 120
Set-MailboxServer –Identity EXCH –CalendarRepairSchedule Sunday.19:00-Sunday.22:00
----end of the commands to set repairs----

For the purposes of reference, I output the users and their permissions using the following commands (Just paste the following lines into exchange shell):
$Mailboxes = Get-Mailbox
foreach ($mailbox in $Mailboxes) {Get-MailboxFolderPermission -Identity ($mailbox.UserPrincipalName + ":\Calendar") | Format-Table @{Label = "Mailbox"; Expression = {($mailbox.UserPrincipalName)}}, FolderName, User, AccessRights}

Again, these are things I have run because I appear to be having the same problem.  With our problem though, the Author permissions revert back to reviewer.

What version of outlook are you using?

Author Comment

ID: 37070490
Thanks for the input - I believe both clients in this case are Outlook 2007. But even if we set the permission from EMS they still disappear after the delegate logs off.

We'll post any new findings here....


Accepted Solution

johnvlahos earned 0 total points
ID: 37085013
More info - the user's mailbox was hung importing a PST. I ran the Remove-MailboxImportRequest command and cleared it. Unfortunately he's traveling - so we won't know until next week if this worked....


Author Closing Comment

ID: 37439631
Thanks - it was the hung import session

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this post, I will showcase the steps for how to create groups in Office 365. Office 365 groups allow for ease of flexibility and collaboration between staff members.
There are literally thousands of Exchange recovery applications out there. So how do you end up picking one that’s ideal for your business & purpose? By carefully scouting the product’s features, the benefits it offers you, & reading ample reviews f…
how to add IIS SMTP to handle application/Scanner relays into office 365.
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question