Solved

setting permissions on mailboxes inside outlook

Posted on 2015-01-12
7
115 Views
Last Modified: 2015-01-12
im using a shared mailbox for document management
my idea is to give all domain users access to the mailbox only
then set individual permissions for the folders i create under that
so everyone can add the shared mailbox to their outlook profile but can only see the subfolder they have been allowed to
0
Comment
Question by:dougdog
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 40544267
If you grant full mailbox access, then permissions within the mailbox don't apply.
The only way you can control access within the mailbox is to grant permissions at the top of the free (Folder Visible permission), then set the permissions below. Permissions do not inherit, so you will need to use something like exfolders to grant permissions to sub folders.

Simon.
0
 
LVL 24

Accepted Solution

by:
VB ITS earned 500 total points
ID: 40544392
my idea is to give all domain users access to the mailbox only
then set individual permissions for the folders i create under that
so everyone can add the shared mailbox to their outlook profile but can only see the subfolder they have been allowed to
You can do this through Outlook. I can confirm that this will work as I've done it plenty of times at the requests of clients to only allow another staff member the ability to see a specified set of folders within their mailbox.

I'll be using Outlook 2010 in the instructions below, the steps shouldn't be any different in Outlook 2013 but I'll need to confirm this tomorrow morning when I am back on my work machine. You will need to follow these steps on an account that has Full Access to the shared mailbox in order to configure the permissions:

Right click on the top folder of the shared mailbox (usually the Display Name of the shared mailbox) > Data File Properties...Permissions tab
Change the Permission Level for Default from None to ReviewerOK when done. This will grant all users the ability to see just the top level of the shared mailbox (i.e. the name of the mailbox) and nothing else (providing the user does not already have Full Access to the shared mailbox)
Now right click on the subfolder you want to grant a specific person access to, let's say the Sent Items folder for example > go down to Properties...Permissions tab > add the user to the access list and grant them the required level of access (Reviewer, Editor, etc.)
Get the user to add the shared mailbox to Outlook - they should now only see the Sent Items folder

Note: If the subfolder is nested within another folder (e.g. the Inbox folder) then you must grant the user at minimum Reviewer access to the Inbox folder first. You can't hide the contents of the Inbox and grant them access to the subfolder at the same time, so it's suggested that you move the subfolder to the root of the mailbox if you don't want them seeing the contents of the Inbox.

Hope all of this makes sense!
0
 

Author Comment

by:dougdog
ID: 40544408
so i could set the mailbox name and the inbox to default = reviewer
then set each sub folder i create manually
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 24

Expert Comment

by:VB ITS
ID: 40544416
That's correct. Just note that everyone will be able to see the emails in the Inbox but they won't be able to delete them.
0
 

Author Comment

by:dougdog
ID: 40544433
ok  im not going to be using the inbox it will be empty
i will be creating subfolders based on jobs and set permissions there
0
 
LVL 24

Expert Comment

by:VB ITS
ID: 40544472
In that case you should be good to go!
0
 

Author Closing Comment

by:dougdog
ID: 40544501
excellent
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question