Solved

Granting people READ access to all calendars

Posted on 2015-01-12
7
22 Views
Last Modified: 2016-06-22
Hi experts,

I am having an issue with Exchange 2010. I need to change the DEFAULT permission on calendar to Reviewer (in other words grant everyone READ access to everyone's calendars).

I have tried with ExFolder but it doesn't add the GROUP into the ACL. I have tried the Shell script Add/Set-MailboxFolderPermission -Identity Username:\Calendar -user Default -accessrights reviewer
but system says USERNAME does not exist.

Can anyone shed some lights here please?

Another related query is that is it a way to configure Exchange, so going forward everyone has READ access on all new user calendars?

THanks in advance for your help
0
Comment
Question by:ormerodrutter
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 40544127
To grant the permissions:

Get-DistributionGroupMember All.Staff | Foreach-Object { SET-MailboxFolderPermission ($_.Alias + ":\Calendar") -User Default -AccessRights Reviewer }

I am using a group to find the mailboxes as there are some mailboxes you don't want to touch, like system mailboxes.
There are also always exceptions to the rule, like people with CxO titles, so it is often the case where a new group has to be built to exclude those exceptions. Create the group, mail enable it then hide it.

"Another related query is that is it a way to configure Exchange, so going forward everyone has READ access on all new user calendars?"

Short answer - no.

The only way to do it is to schedule a script to run at frequent intervals (twice a day is usually enough). That will catch any new mailboxes, plus it will deal with anyone who removes the permission.

Simon.
0
 
LVL 63

Assisted Solution

by:Simon Butler (Sembee)
Simon Butler (Sembee) earned 500 total points
ID: 40544130
Just to add - as it is the DEFAULT you are changing, you will use the Set-mailboxfolderpermission command, because you are modifying the permission that already exists.
If you were adding a new permission (I usually don't change the default permission) then you would use Add, then Set to adjust it.

Simon.
0
 
LVL 23

Author Comment

by:ormerodrutter
ID: 40544175
I have tried that Set-mailbox....command. It claimed to complete successfully, but I went in some users and check their calendars Default is still having Free/Busy permission.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 23

Author Comment

by:ormerodrutter
ID: 40544178
Does it matter if mailboxes are located in separate database?
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40544203
Permissions are cached by Exchange, therefore it can take a while before the permissions are seen by the client. The database doesn't matter, because this is an account setting.

Simon.
0
 
LVL 23

Author Comment

by:ormerodrutter
ID: 40544255
I am using ExFolder to display/change calendar permission, so know straightaway that wasn't working?
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question