Permissions to public folders in Exchange 2003 all messed up.

Posted on 2012-09-10
Last Modified: 2012-10-26
I have a customer with an old SBS2003 with Exchange 2003.
All clients running Windows 7 pro with Office 2010.
Within Outlook they have a lot of public folders.
A super user from this company want to move some public folders into other put can't due to lack of permission.

My problem is that even logged in locally on the server as administrator inside the Exchange System Manager it is not possible to do ANYTHING with these folders!

In the bottom of the ESM you see the PUBLIC FOLDERS structure.
This appears empty even though consists of hundreds.

If I go into SERVERS - SERV-SBS/PUBLIC FOLDER STORE/PUBLIC FOLDERS I see all folders but if I try to access I get an error saying "The token supplied to the function is invalid. ID NO 80090308"

Can anyone help me?
Question by:Ohmit
    LVL 2

    Assisted Solution

    Please check article and update
    LVL 2

    Accepted Solution

    Please note Internet Services Manager is the IIS .. Just to let you know...
    LVL 52

    Assisted Solution

    by:Manpreet SIngh Khatra
    Exchange System Manager Error - The token supplied to the function is invalid ID no: 80090308...

    You receive an SSL Certificate error message when you view public folders in Exchange System Manager

    Check the above articles

    - Rancy
    LVL 41

    Assisted Solution


    Author Comment

    Well - I'm a little bit affraid to mess with the SSL certificate because I have a lot of external devices using this for mail.

    Can I do this operation with putting the valid certificate at risk?
    LVL 35

    Assisted Solution

    It looks like the original owner is forgotten... :-)

    Public folders have MAPI permissions, so they are handled different than the common rights system. Each folder has an owner (usually the creator) and other members with permissions and some generic permissions like standard or anyonymous. You can see this permissions either via EMC or from Outlook.

    If the owner is lost for any reason or MAPi permissions are struggled, it can happen, that you do not get access anymore, even you are an administrator.

    There maybe two possible solutions:
    The first one is to find the owner, which has full permissions. If you have found him (check Outlook, but also you need a minimum of permissions to see him), he can change the owner of the folder back to an admin.

    If the owner is lost, or the MAPI permissins struggled or destroyed, there is a tool called PFDAVAdmin which can directly access the properties of the public folders. Permissions are needed to of course. This tool can even repair struggled MAPI permissions. But it is a hardcore tool, so you can also destroy everything.

    If there is at least one person, who can read the content, you can create a new structure with new permissions and move the content into the new structure.... Some handwork of course.
    LVL 32

    Assisted Solution

    by:Robberbaron (robr)
    see if you can get PFDavAdmin to read the folders.

    Resetting the ACL's with an ActiveDirectory GROUP as owner means that fixing latter is simply a matter of adding a new user to that group.

    I ran my SBS2003 that way with a 'MailAdmin' security group.  That way, even members of MailAdmin group can be set to readonly for a folder by default, yet they are able to change permissions when needed.  Acts as a check against bulk delete etc,

    Featured Post

    Don't lose your head updating email signatures!

    Do your end users still have the wrong email signature? Do email signature updates bore you or fill you with a sense of dread? You can make this a whole lot easier on yourself by trusting an Exclaimer email signature management solution. Over 50 million users should you!

    Join & Write a Comment

    "Migrate" an SMTP relay receive connector to a new server using info from an old server.
    Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
    In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
    To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now