asked on

Exchange 2010 propagate Inbox permissions to subfolders

Hi Experts,

Members of the management Board need their assistant to have full access to their Inbox, Calendar etc. This is done by granting the assistants "Full Access" with the EMC. Granting full access is done to spare the user from editing Permissions for every subfolder in his inbox.

This is a new requirement:
Mails marked as confidential should be sorted to a subfolder of the users inbox named "confidential" using a inbox rule. The assistant should not have access to the confidential folder.

This is the problem:
Users granted Full Access to a Mailbox can see all subfolder of the inbox, even if the subfolders permission are set differently.

We thougt about revoking the Full Access for the assistants and using the delegate option in Outlook. But when using the delegate option you have to edit permissions of every single subfolder of the inbox. This is not an option for members of the management board because of thousands of inbox subfolders :-).

Question:
Is there any way to propagate the delegated permissions to the inbox subfolders?

(and of course breaking the inheritance for the confidential subfolder)

ASKER CERTIFIED SOLUTION

Simon Butler (Sembee)

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Bembi

First at all, it is not the best idea to use the inbox folder for sorting emails into subfolders. You may use dedicated folders outside the inbox. As the outlook tag "confidential" (if you mean this") is recognized by the outlook rules, you are capable to create a rule, to automatically move mails with this tag into a special folder. Other mails can be move to another root folder or stay in the inbox (what is also not the best idea, to just leave them there).

The advantage of this method is, that you setup a confidential root folder and set the permissions one time on root level, and what ever is made in this folder is inherited my the parent.

TRITEC-kuen

ASKER

Hi Sembee2 and Bembi,

thanks for the suggestions. I will be back on site tomorrow and will try to use them.

Best Regards
tritec-kuen

TRITEC-kuen

ASKER

The script did the trick to me. We were able to set permissions to the subfolders.
Thanks

TRITEC-kuen

ASKER

Hi Bembi,

unfortunately the folder permissions are only inherited by newly created subfolders. Any folders that are already there don´t get the new permissions.

Best Regards
tritec-kuen