granite03
asked on
Set User permissions on public folders in Microsfot Exchange 2007
Hi,
I want to allow a single user full access/owner permissions to all public folders on Exchange mail store, but surprised at how needlessly complicated it is to achieve. The user will be modifying folders through her Outlook.
I can allow it by going into each subfolder and adding permissions there, but as there are 100s of them, that is not feasible.
Two links I found that seem to achieve this are:
(useless)
(doesn't seem to achieve what I want).
If I set the user as a Public Folder Administrator role in Exchange > Organization Configuration, will that work, or will that grant her unnecessary access permissions? Otherwise, what are the alternatives?
Thanks
I want to allow a single user full access/owner permissions to all public folders on Exchange mail store, but surprised at how needlessly complicated it is to achieve. The user will be modifying folders through her Outlook.
I can allow it by going into each subfolder and adding permissions there, but as there are 100s of them, that is not feasible.
Two links I found that seem to achieve this are:
(useless)
(doesn't seem to achieve what I want).
If I set the user as a Public Folder Administrator role in Exchange > Organization Configuration, will that work, or will that grant her unnecessary access permissions? Otherwise, what are the alternatives?
Thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
PFDavAdmin is they way to go.
But I would add a Security Group to all folders, then add the user to that group.
My group is call MailAdmin and has owner permissions, but not write by default.
The user can then manually grant themselves write permissions as needed.
And when the person leaves, just replace their group membership.
But I would add a Security Group to all folders, then add the user to that group.
My group is call MailAdmin and has owner permissions, but not write by default.
The user can then manually grant themselves write permissions as needed.
And when the person leaves, just replace their group membership.
Yeah granting access to a group is probably smarter.
You can do the same with powershell by using a mail-enabled universal security group. Just use -user "groupemailaddress@yourdom
Both Powershell and PFDavAdmin will work.
You can do the same with powershell by using a mail-enabled universal security group. Just use -user "groupemailaddress@yourdom
Both Powershell and PFDavAdmin will work.
ASKER
How would I go about doing that in PDFavAdmin? Unless I'm missing something obvious, PFDavAdmin seems only allows me to modify permissions subfolders in Public Folders, not the entire store. As there are 100s of sub-folders, I really need a solution that allows me to set the permissions on the highest level and let it inherit.
I made the user a member of Public Folders Administrator and even then the user is unable to fully modify the sub folders in Outlook. It's amazing how needlessly difficult Microsoft have made something that ought to be fairly simple.
I made the user a member of Public Folders Administrator and even then the user is unable to fully modify the sub folders in Outlook. It's amazing how needlessly difficult Microsoft have made something that ought to be fairly simple.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks
Get-PublicFolder -GetChildren | Add-PublicFolderClientPerm
You might want to try it on a single folder first:
Get-PublicFolder -Identity "\PUBLIC_FOLDER_NAME" | Add-PublicFolderClientPerm