• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 445
  • Last Modified:

Permissions to public folders in Exchange 2003 all messed up.

I have a customer with an old SBS2003 with Exchange 2003.
All clients running Windows 7 pro with Office 2010.
Within Outlook they have a lot of public folders.
A super user from this company want to move some public folders into other put can't due to lack of permission.

My problem is that even logged in locally on the server as administrator inside the Exchange System Manager it is not possible to do ANYTHING with these folders!

In the bottom of the ESM you see the PUBLIC FOLDERS structure.
This appears empty even though consists of hundreds.

If I go into SERVERS - SERV-SBS/PUBLIC FOLDER STORE/PUBLIC FOLDERS I see all folders but if I try to access I get an error saying "The token supplied to the function is invalid. ID NO 80090308"

Can anyone help me?
0
Ohmit
Asked:
Ohmit
6 Solutions
 
GanparCommented:
Please check article and update

http://support.microsoft.com/kb/324345
0
 
GanparCommented:
Please note Internet Services Manager is the IIS .. Just to let you know...
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Exchange System Manager Error - The token supplied to the function is invalid ID no: 80090308...
http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_22653596.html

You receive an SSL Certificate error message when you view public folders in Exchange System Manager
http://support.microsoft.com/kb/324345

Check the above articles

- Rancy
0
What Security Threats Are We Predicting for 2018?

Cryptocurrency, IoT botnets, MFA, and more! Hackers are already planning their next big attacks for 2018. Learn what you might face, and how to defend against it with our 2018 security predictions.

 
OhmitAuthor Commented:
Well - I'm a little bit affraid to mess with the SSL certificate because I have a lot of external devices using this for mail.
(remote.company.dk)

Can I do this operation with putting the valid certificate at risk?
0
 
BembiCEOCommented:
It looks like the original owner is forgotten... :-)

Public folders have MAPI permissions, so they are handled different than the common rights system. Each folder has an owner (usually the creator) and other members with permissions and some generic permissions like standard or anyonymous. You can see this permissions either via EMC or from Outlook.

If the owner is lost for any reason or MAPi permissions are struggled, it can happen, that you do not get access anymore, even you are an administrator.

There maybe two possible solutions:
The first one is to find the owner, which has full permissions. If you have found him (check Outlook, but also you need a minimum of permissions to see him), he can change the owner of the folder back to an admin.

If the owner is lost, or the MAPI permissins struggled or destroyed, there is a tool called PFDAVAdmin which can directly access the properties of the public folders. Permissions are needed to of course. This tool can even repair struggled MAPI permissions. But it is a hardcore tool, so you can also destroy everything.

If there is at least one person, who can read the content, you can create a new structure with new permissions and move the content into the new structure.... Some handwork of course.
0
 
Robberbaron (robr)Commented:
see if you can get PFDavAdmin to read the folders.

Resetting the ACL's with an ActiveDirectory GROUP as owner means that fixing latter is simply a matter of adding a new user to that group.

I ran my SBS2003 that way with a 'MailAdmin' security group.  That way, even members of MailAdmin group can be set to readonly for a folder by default, yet they are able to change permissions when needed.  Acts as a check against bulk delete etc,
0

Featured Post

A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now