Hello there I'm having the following problem I added a user to "public folder management group" Via Exchange shell & then check AD , I found him there But, the problem is when i go to the properties of public folders "using outlook 2007" I see that I am still at the default setting "I mean the default role of author" and I am not able to create any sub-folders So any help will be appreciated Thank you

The Public Folder Management role group allows you to administer pfs from a server perspective, not from the client- that requires the correct mapi permissions: http://blogs.technet.com/b/bill_long/archive/2010/04/28/public-folder-admin-permissions-versus-client-permissions.aspx You need to give yourself the correct mapi permissions on the public folder - You can do so in bulk with exfolders http://gallery.technet.microsoft.com/Exchange-2010-SP1-ExFolders-e6bfd405 or http://technet.microsoft.com/en-us/library/bb124743.aspx Add-PublicFolderClientPermission

Hi, I don't know how and what permission you gave but author does not have rights to create sub folders , You can configure public folder permissions for both administrators of Microsoft Exchange Server 2007 or for users of client programs such as Microsoft Office Outlook 2007. Public folder permissions consist of various access rights that specify the level of control a client user or administrator has over a public folder or public folder hierarchy. Please go through the below URL will help you in detail what kind of access you should give . Please let me know if more information you required . Configure Public folder Permisions http://technet.microsoft.com/en-us/library/bb310789(v=exchg.80).aspx Thanks

PLs go through the post provided by my, and if possible and do not want to go in details, please let us know how you gave the permission mean to say what command you used during assigning the permission. Thanks

Thank you sir for your reply it's very informative but believe me I am more confused now :D and here is what confuses me I have good understanding of roles and rights but I am speaking about Active directory group that handle all public folders not just one

ok I did the following to a user to make him manage all public folders Add-RoleGroupMember Identity Public folder Management member username

ok I did the following to a user to make him manage all public folders Add-RoleGroupMember Identity Public folder Management member username But that wont give him the necessary client permissions that may be required to create folders from the Outlook or OWA client. See my previous links.

OK So you do a simple test here . 1. Open the public folder where you given the rights to create a sub folders to a user ..and see what permission is listed there ? 2. To create a sub folders from outlook you need to set the Client permisisons on the parent folder where you want to create a sub folder. Get-PublicFolderClientPermission "\My Public Folder" ----- to view who all are having what kind of permissions Get-PublicFolderClientPermission -Identity "\My Public Folder" -User Chris -Server "My Server" | Format-List - detailed view of permissions.. 3. Try to add a user with Owner or respective permission to that particular folder. For details permission you can view the URL posted my me .. Thanks

On Mon, 2 Apr 2012 17:23:04 +0000, AhmedBakr wrote: > > >Thank you sir for your reply it's very informative > >but believe me I am more confused now :D > >and here is what confuses me I have good understanding of roles and rights but I am speaking about Active directory group that handle all public folders not just one Adding someone to a role allows them to use the powershell cmdlets and parameters associated with that role. Adding someone to a role does NOT allow them to use Outlook or OWA to create top-level folders or subfolders. Roles are associated with server-side operations (i.e. administration). They have no bearing on what you can do from an e-mail client such as Outlook or OWA. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Ahmed, As you can see the post from Rich , hope you will understand wht is he pointing too. So you have to GIVE or ADD permission for user in the , so that he/she can create folder or sub folder. please find the below cmd to Add user to create the items into the public folder and below URL will give you the detail information. Add-PublicFolderClientPermission -Identity "\My Public Folder" -User Ahmed -AccessRights Createsubfolders -Server "My Server" http://technet.microsoft.com/en-us/library/bb124743(v=exchg.80).aspx More a below very good Article posted by A_D_ In that there will be a clear differentation between the Admin and Client Permission under the section - Am I using admin or client permissions? http://blogs.technet.com/b/bill_long/archive/2010/04/28/public-folder-admin-permissions-versus-client-permissions.aspx I hope all the infomation will be informative for you. Thanks

Any update Ahmed ?

I really appreciate All the help It just took me time to read all provided information carefullyalso my echange server crashed & needed role seperation to perform better On this link http://technet.microsoft.com/en-us/library/ee633461.aspx They Say the following In Exchange 2010, there are two ways to grant administrators the rights to manage public folders: Public Folder Management role group Add-PublicFolderAdministrativePermission cmdlet Also notice that [Public Folder Management role group => The user can create top-level public folders.] Which is very great & inspiring already:) I can't create top-level Public folders anyway after I tried tons of commands Mr.Rich said it's through Powershell & this prevent the delegation I guess but they never mention it or where could I find the commands that will allow client to do that ?

On Tue, 3 Apr 2012 21:00:05 +0000, AhmedBakr wrote: > > >I really appreciate All the help > >It just took me time to read all provided information carefullyalso my echange server crashed & needed role seperation to perform better > >On this link > >http://technet.microsoft.com/en-us/library/ee633461.aspx > >They Say the following > >In Exchange 2010, there are two ways to grant administrators the rights to manage public folders: Public Folder Management role group Add-PublicFolderAdministrativePermission cmdlet > >Also notice that [Public Folder Management role group => The user can create top-level public folders.] That's true, but not from Outlook. You can use the EMC and the "Public Folder Management Console" found in the "Toolbox". >Which is very great & inspiring already:) I can't create top-level Public folders anyway after I tried tons of commands You can't create them using what means? >Mr.Rich said it's through Powershell & this prevent the delegation I guess but they never mention it or where could I find the commands that will allow client to do that ? Still using the PF Management Console, right-click a folder and select "Properties". On the properties page click the "Permissions" tab and add the user and assign to them the appropriate role. If you prefer to use cmdlets, use Add-PublicFolderClientPermission. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

yes sir [ Add-PublicFolderClientPermission] works only with sub folders but nothing work with the root By standing on the root and chosing propagate folder ACEs I was able to grant permission to create folders on the root

On Wed, 4 Apr 2012 12:49:55 +0000, AhmedBakr wrote: > > >yes sir [ Add-PublicFolderClientPermission] works only with sub folders but nothing work with the root "Root" isn't a public folder. What you're referring to aren't sub-folders, they're top level folders. >By standing on the root and chosing propagate folder ACEs I was able to grant permission to create folders on the root http://technet.microsoft.com/en-us/library/bb310789(v=exchg.80).aspx "Create top level public folder" --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Thank you for the reply , I am sorry since I am newbie I couldn't make my self clear I got excited when I read it at work but when I tried it at the Exchange server I found nothing but disappointement again ! The link you provided Sir is for Exchange 2007 and the cmdlet [Add-ExchangeAdministrator ] isn't even available at EMS 2010 Thank you for your help , I am so greatful for all the support

On Thu, 5 Apr 2012 20:26:37 +0000, AhmedBakr wrote: >I am sorry since I am newbie I couldn't make my self clear > >I got excited when I read it at work but when I tried it at the Exchange server I found nothing but disappointement again ! > >The link you provided Sir is for Exchange 2007 and the cmdlet [Add-ExchangeAdministrator ] isn't even available at EMS 2010 So how much would it have taken to find the same information about Exchange 2010? http://technet.microsoft.com/en-us/library/ee633461.aspx --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

yes sir I am back to the starting point my problem was I followed the page you provided before and never get results => from the page two ways to grant administrators the rights to manage public folders: Public Folder Management role group Add-PublicFolderAdministrativePermission cmdlet => my original problem when I added a user to [Public Folder Management role group] he can't create folders on the root

On Thu, 5 Apr 2012 22:10:17 +0000, AhmedBakr wrote: > > >yes sir I am back to the starting point my problem was I followed the page you provided before and never get results > >=> from the page two ways to grant administrators the rights to manage public folders: Public Folder Management role group Add-PublicFolderAdministrativePermission cmdlet > >=> my original problem when I added a user to [Public Folder Management role group] he can't create folders on the root I'm still not clear about what this user is trying to do and how they're trying to go about doing it. Is the user a public folder admin? Is he trying to create a top-level folder? Is he using the EMC's Public Folder Management Console to create the top-level folder? Is he using Outlook to create the top-level folder? --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

>Is the user a public folder admin? No he is just regular user >Is he trying to create a top-level folder? yes > Is he using the EMC's Public Folder Management Console to create the top-level folder? > Is he using Outlook to create the top-level folder? I am using outlook to create top level folders thanks

On Fri, 6 Apr 2012 01:25:17 +0000, AhmedBakr wrote: > > >>Is the user a public folder admin? > >No he is just regular user > >>Is he trying to create a top-level folder? > >yes > Is he using the EMC's Public Folder Management Console to create the > >top-level folder? > Is he using Outlook to create the top-level folder? > >I am using outlook to create top level folders Then you're not really a public folder admin, you're just a regular old client. I suppose you could add the permission to create top-level public folders to the Microsoft Exchange object in the configurtion container. We used to have to remove that permssion in earlier releases. I will tell you that in my opinion giving users permission to create top-level public folder is usually a mistake. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP