• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 8566
  • Last Modified:

Exchange 2010 propagate Inbox permissions to subfolders

Hi Experts,

Members of the management Board need their assistant to have full access to their Inbox, Calendar etc. This is done by granting the assistants "Full Access" with the EMC. Granting full access is done to spare the user from editing Permissions for every subfolder in his inbox.

This is a new requirement:
Mails marked as confidential should be sorted to a subfolder of the users inbox named "confidential" using a inbox rule. The assistant should not have access to the confidential folder.

This is the problem:
Users granted Full Access to a Mailbox can see all subfolder of the inbox, even if the subfolders permission are set differently.

We thougt about revoking the Full Access for the assistants and using the delegate option in Outlook. But when using the delegate option you have to edit permissions of every single subfolder of the inbox. This is not an option for members of the management board because of thousands of inbox subfolders :-).

Question:
Is there any way to propagate the delegated permissions to the inbox subfolders?

(and of course breaking the inheritance for the confidential subfolder)
0
TRITEC-kuen
Asked:
TRITEC-kuen
  • 3
1 Solution
 
Simon Butler (Sembee)ConsultantCommented:
Set-mailboxfolderpermission will do this for you.
However to do subfolders will require a script. I found this which looks promising:

http://www.crammysblog.com/exchange-2010-add-mailbox-folder-permissions-including-subfolders/

Simon.
0
 
BembiCEOCommented:
First at all, it is not the best idea to use the inbox folder for sorting emails into subfolders. You may use dedicated folders outside the inbox. As the outlook tag "confidential" (if you mean this") is recognized by the outlook rules, you are capable to create a rule, to automatically move mails with this tag into a special folder. Other mails can be move to another root folder or stay in the inbox (what is also not the best idea, to just leave them there).

The advantage of this method is, that you setup a confidential root folder and set the permissions one time on root level, and what ever is made in this folder is inherited my the parent.
0
 
TRITEC-kuenAuthor Commented:
Hi Sembee2 and Bembi,

thanks for the suggestions. I will be back on site tomorrow and will try to use them.

Best Regards
tritec-kuen
0
 
TRITEC-kuenAuthor Commented:
The script did the trick to me. We were able to set permissions to the subfolders.
Thanks
0
 
TRITEC-kuenAuthor Commented:
Hi Bembi,

unfortunately the folder permissions are only inherited by newly created subfolders. Any folders that are already there donĀ“t get the new permissions.

Best Regards
tritec-kuen
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now