Link to home
Start Free TrialLog in
Avatar of WORKS2011
WORKS2011Flag for United States of America

asked on

Exchange 2010 propagate Inbox permissions to specific folder and subfolders

Clients love to create folders under their inbox sometimes 3 to 4 subfolders deep. Question, is there a limit to the amount of subfolders created in Outlook? I've been training clients to go no deeper than three. Including the Inbox. Ideally I request they create folders outside the Inbox.

Full permissions is not an option and my understanding is with the delegated option permission have to be set on each folder in Outlook as well each subfolder. Question, can someone please confirm? Thank you.

If this is the case, which I believe it is then scripting the permissions is the best option. I've run Add-MailboxFolderPermission on a folder but not subfolders. Is it an option to run on subfolders?

There are two scripts I believe will work but not 100% certain how to configure the subfolders.

Script 1:
Add-MailboxFolderPermission
   [-Identity] <MailboxFolderIdParameter>
   -AccessRights <MailboxFolderAccessRight[]>
   -User <MailboxFolderUserIdParameter>
   [-Confirm]
   [-DomainController <Fqdn>]
   [-WhatIf]
   [-SendNotificationToUser <$true | $false>]
   [-SharingPermissionFlags <None | Delegate | CanViewPrivateItems>]
   [<CommonParameters>]

Script 2:
$Username = "MAILBOX_USERNAME_HERE"
$AddUsername = "MAILBOX_TO_ADD_USERNAME_HERE
foreach ($InboxFolder in (Get-MailboxFolderStatistics -Identity $Username -FolderScope Inbox)) { Add-MailboxFolderPermission -Identity "$($Username):\Inbox$($InboxFolder.FolderPath.Replace("/","\"))" -User $AddUsername -AccessRights Reviewer }
Avatar of J0rtIT
J0rtIT
Flag of Venezuela, Bolivarian Republic of image

Outlook limits
Outlook 2019, Outlook 2016, Outlook 2013 and Outlook 2010:
 
100,000 items per folder
500 folders total

Outlook 2007:
 
50,000 items per folder
500 folders total

-----
500 folders in total about the deep limit is still 3 or 4 a good limit.

The consequences of reaching those:
https://support.microsoft.com/en-au/help/2768656/outlook-performance-issues-when-there-are-too-many-items-or-folders-in

https://office365.uservoice.com/forums/264636-general/suggestions/13717002-allow-more-than-500-folders-in-a-shared-cached-mai



Full permissions is not an option and my understanding is with the delegated option permission have to be set on each folder in Outlook as well each subfolder. Question, can someone please confirm? Thank you.

Not true, you just give full permissions into the Mailbox and they are propagated into the folders, if you do add permissions at the folder level is just for specific and is rarely used on the practice.

The question is not clear, what do you want to achieve?  What is the purpose of just giving permissions to the mailbox folder for all users?
SOLUTION
Avatar of timgreen7077
timgreen7077

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of WORKS2011

ASKER

@timgreen, my point exactly, it's against company policy to grant full permissions. Agree it's tedious.

Also there are a ton of folders that you can add to outlook as subfolders, but best not to add to many to the well known folder such as the inbox and other default outlook folders.
Agree, I tell users but they still create subfolders under the inbox.

Do you have any idea about the script? Specifically if it can run on subfolders?

@Jose, as stated, full permissions is not an option (company policy). I didn't mean it can't be done.

To clarify,
I've run Add-MailboxFolderPermission on a folder but not subfolders. Is it an option to run on subfolders?
Can scripting be done to add permission on subfolders?
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
@timgreen7077, thank you will try this out in about an hour and let you know.
Thank you, much appreciated. Ran the script and it worked just fine.
Avatar of timgreen7077
timgreen7077

good deal.