Exchange 2010 propagate Inbox permissions to subfolders

Posted on 2012-09-21
Last Modified: 2012-09-26
Hi Experts,

Members of the management Board need their assistant to have full access to their Inbox, Calendar etc. This is done by granting the assistants "Full Access" with the EMC. Granting full access is done to spare the user from editing Permissions for every subfolder in his inbox.

This is a new requirement:
Mails marked as confidential should be sorted to a subfolder of the users inbox named "confidential" using a inbox rule. The assistant should not have access to the confidential folder.

This is the problem:
Users granted Full Access to a Mailbox can see all subfolder of the inbox, even if the subfolders permission are set differently.

We thougt about revoking the Full Access for the assistants and using the delegate option in Outlook. But when using the delegate option you have to edit permissions of every single subfolder of the inbox. This is not an option for members of the management board because of thousands of inbox subfolders :-).

Is there any way to propagate the delegated permissions to the inbox subfolders?

(and of course breaking the inheritance for the confidential subfolder)
Question by:TRITEC-kuen
    LVL 63

    Accepted Solution

    Set-mailboxfolderpermission will do this for you.
    However to do subfolders will require a script. I found this which looks promising:

    LVL 35

    Expert Comment

    First at all, it is not the best idea to use the inbox folder for sorting emails into subfolders. You may use dedicated folders outside the inbox. As the outlook tag "confidential" (if you mean this") is recognized by the outlook rules, you are capable to create a rule, to automatically move mails with this tag into a special folder. Other mails can be move to another root folder or stay in the inbox (what is also not the best idea, to just leave them there).

    The advantage of this method is, that you setup a confidential root folder and set the permissions one time on root level, and what ever is made in this folder is inherited my the parent.
    LVL 2

    Author Comment

    Hi Sembee2 and Bembi,

    thanks for the suggestions. I will be back on site tomorrow and will try to use them.

    Best Regards
    LVL 2

    Author Closing Comment

    The script did the trick to me. We were able to set permissions to the subfolders.
    LVL 2

    Author Comment

    Hi Bembi,

    unfortunately the folder permissions are only inherited by newly created subfolders. Any folders that are already there don´t get the new permissions.

    Best Regards

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    "Migrate" an SMTP relay receive connector to a new server using info from an old server.
    Outlook Free & Paid Tools
    In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
    This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now