Set User permissions on public folders in Microsfot Exchange 2007

Posted on 2012-09-04
Medium Priority
Last Modified: 2012-09-19

I want to allow a single user full access/owner permissions to all public folders on Exchange mail store, but surprised at how needlessly complicated it is to achieve. The user will be modifying folders through her Outlook.

I can allow it by going into each subfolder and adding permissions there, but as there are 100s of them, that is not feasible.

Two links I found that seem to achieve this are:
(doesn't seem to achieve what I want).

If I set the user as a Public Folder Administrator role in Exchange > Organization Configuration, will that work, or will that grant her unnecessary access permissions? Otherwise, what are the alternatives?

Question by:granite03
  • 2
  • 2
  • 2
  • +1
LVL 19

Accepted Solution

suriyaehnop earned 750 total points
ID: 38366674
I used PFDAVAdmin.


Download the exe file and run on any member domain. Once you launch it, log on as domain admin and connect to public folder. You can set permission on main public folder and inherit to sub folder
LVL 16

Expert Comment

by:Jon Brelie
ID: 38368338
Try this with powershell:

Get-PublicFolder -GetChildren | Add-PublicFolderClientPermission -AccessRights FolderOwner -User YOUR_USER

You might want to try it on a single folder first:

Get-PublicFolder -Identity "\PUBLIC_FOLDER_NAME" | Add-PublicFolderClientPermission -AccessRights FolderOwner -User YOUR_USER
LVL 32

Expert Comment

by:Robberbaron (robr)
ID: 38371931
PFDavAdmin is they way to go.  
But I would add a Security Group to all folders, then add the user to that group.

My group is call MailAdmin and has owner permissions, but not write by default.
The user can then manually grant themselves write permissions as needed.

And when the person leaves, just replace their group membership.
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

LVL 16

Expert Comment

by:Jon Brelie
ID: 38373029
Yeah granting access to a group is probably smarter.

You can do the same with powershell by using a mail-enabled universal security group.  Just use  -user "groupemailaddress@yourdomain.com"

Both Powershell and PFDavAdmin will work.

Author Comment

ID: 38373055
How would I go about doing that in PDFavAdmin? Unless I'm missing something obvious, PFDavAdmin seems only allows me to modify permissions subfolders in Public Folders, not the entire store. As there are 100s of sub-folders, I really need a solution that allows me to set the permissions on the highest level and let it inherit.

I made the user a member of Public Folders Administrator and even then the user is unable to fully modify the sub folders in Outlook. It's amazing how needlessly difficult Microsoft have made something that ought to be fairly simple.
LVL 32

Assisted Solution

by:Robberbaron (robr)
Robberbaron (robr) earned 750 total points
ID: 38374036
Pfdavadmin allows propagation of acl to subfolders . Its a checkbox

Author Closing Comment

ID: 38414097

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

On September 18, Experts Exchange launched the first installment of the Help Bell, a new feature for Premium Members, Team Accounts, and Qualified Experts. The Help Bell will serve as an additional tool to help teams increase question visibility.
Here in this article, you will get a step by step guidance on how to restore an Exchange database to a recovery database. Get a brief on Recovery Database and how it can be used to restore Exchange database in this section!
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Servers >> Data…
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
Suggested Courses

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question