Hello,

i have succesfull migrated public folders from EX2007 to EX2013.

Public folders are visible in outlook 2010.

When adding permissions from EMS, the specific Publicfolder isn`t visible anymore in outlook.

Command used --> Add-PublicFolderClientPermission -Identity "\My Public Folder" -User Chris -AccessRights CreateItems 

What is the problem here and WHY is this happening after changing the permissions?

Thx

I can't say why and probably nobody can.

Have you used Get-PublicFolderClientPermission to see what the resulting rights are?

Ok,...but maybe there is option to fix without finding WHY this happening?

Perhaps if you need that kind of answer you should consider opening a ticket with Microsoft Support.

This is what is happening:

1) Folder is available in outlook/owa

Identity: [PS] C:\>Get-PublicFolderClientPermission -Identity "\PublicFolder"

FolderName           User                 AccessRights
----------           ----                 ------------
PublicFolder               Default              {Editor}
PublicFolder               Anonymous            {CreateItems}
PublicFolder               NT:S-1-5-21-40367... {Owner}
PublicFolder               All Users            {Owner}
PublicFolder               Iedereen             {Owner}

[PS] C:\>Add-PublicFolderClientPermission -Identity "\PublicFolder" -User testuser -AccessRights createitems

FolderName           User                 AccessRights
----------           ----                 ------------
PublicFolder               testuser             {CreateItems}

[PS] C:\>Get-PublicFolderClientPermission -Identity "\PublicFolder"

FolderName           User                 AccessRights
----------           ----                 ------------
PublicFolder               Default              {Editor}
PublicFolder               Anonymous            {CreateItems}
PublicFolder               testuser             {CreateItems}
PublicFolder               NT:S-1-5-21-40367... {Owner}
PublicFolder               All Users            {Owner}
PublicFolder               Iedereen             {Owner}

2) Folder is not available in Outlook/owa

[PS] C:\>Remove-PublicFolderClientPermission -Identity "\PublicFolder" -User testuser

Confirm
Are you sure you want to perform this action?
Removing mailbox folder permission on "\PublicFolder" for user "testuser".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): y
[PS] C:\>Get-PublicFolderClientPermission -Identity "\PublicFolder"

FolderName           User                 AccessRights
----------           ----                 ------------
PublicFolder               Default              {Editor}
PublicFolder               Anonymous            {CreateItems}
PublicFolder               NT:S-1-5-21-40367... {Owner}
PublicFolder               All Users            {Owner}
PublicFolder               Iedereen             {Owner}

3) Folder is available in outlook/owa again

Main question : Why is the folder invisible when adding permissions??

• Edited by Mvd12345 9 hours 20 minutes ago

It's not visible to whom?

You might remove that orphaned SID unless you know it to be correctly applied, but I doubt that's the issue.

Also, why does "All Users" have Owner right?  That's pretty loose.  Why not try removing that entry and changing Default to be Owner if you really want that?  I don't want to say that it's causing your issue but it certainly is an unusual way of doing it.

Another thing to try is to remove all the rights except Default and Anonymous, add them back, and be sure Default and Anonymous are what you want them to be.  Maybe change them to something, and then change them back just to be sure that things are reset.

If none of that fixes anything, then it certainly seems like a bug to me, and it's reproducible so I'd consider opening a ticket with Microsoft Support.

This is what is happening:

1) Folder is available in outlook/owa

Identity: [PS] C:\>Get-PublicFolderClientPermission -Identity "\PublicFolder"

FolderName           User                 AccessRights
----------           ----                 ------------
PublicFolder               Default              {Editor}
PublicFolder               Anonymous            {CreateItems}
PublicFolder               NT:S-1-5-21-40367... {Owner}
PublicFolder               All Users            {Owner}
PublicFolder               Iedereen             {Owner}

[PS] C:\>Add-PublicFolderClientPermission -Identity "\PublicFolder" -User testuser -AccessRights createitems

FolderName           User                 AccessRights
----------           ----                 ------------
PublicFolder               testuser             {CreateItems}

[PS] C:\>Get-PublicFolderClientPermission -Identity "\PublicFolder"

FolderName           User                 AccessRights
----------           ----                 ------------
PublicFolder               Default              {Editor}
PublicFolder               Anonymous            {CreateItems}
PublicFolder               testuser             {CreateItems}
PublicFolder               NT:S-1-5-21-40367... {Owner}
PublicFolder               All Users            {Owner}
PublicFolder               Iedereen             {Owner}

2) Folder is not available in Outlook/owa

[PS] C:\>Remove-PublicFolderClientPermission -Identity "\PublicFolder" -User testuser

Confirm
Are you sure you want to perform this action?
Removing mailbox folder permission on "\PublicFolder" for user "testuser".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): y
[PS] C:\>Get-PublicFolderClientPermission -Identity "\PublicFolder"

FolderName           User                 AccessRights
----------           ----                 ------------
PublicFolder               Default              {Editor}
PublicFolder               Anonymous            {CreateItems}
PublicFolder               NT:S-1-5-21-40367... {Owner}
PublicFolder               All Users            {Owner}
PublicFolder               Iedereen             {Owner}

3) Folder is available in outlook/owa again

Main question : Why is the folder invisible when adding permissions??

• Edited by Mvd12345 Wednesday, July 22, 2015 10:09 PM

It seems i found a soluton by :

1) Deleting all permissions on the specific public folder:

[PS] C:\>Remove-PublicFolderClientPermission -Identity "\PublicFolder" -User Anonymous

Confirm
Are you sure you want to perform this action?
Removing mailbox folder permission on "\Arnhem" for user "Anonymous".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): y
[PS] C:\>
[PS] C:\>
[PS] C:\>Get-PublicFolderClientPermission -Identity "\PublicFolder"

FolderName           User                 AccessRights
----------           ----                 ------------
Arnhem               Default              {None}
Arnhem               Anonymous            {None}

[PS] C:\>Remove-PublicFolderClientPermission -Identity "\Public Folder" -User Default

Confirm
Are you sure you want to perform this action?
Removing mailbox folder permission on "\Public Folder" for user "Default".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): y

Result :

[PS] C:\>Get-PublicFolderClientPermission -Identity "\Public Folder"

FolderName           User                 AccessRights
----------           ----                 ------------
Arnhem               Default              {None}
Arnhem               Anonymous            {None}

Then adding the permissions for default :

[PS] C:\>Add-PublicFolderClientPermission -Identity "\PublicFolder" -User "Default"  -AccessRights Owner

FolderName           User                 AccessRights
----------           ----                 ------------
Arnhem               Default              {Owner}

Now the mailbox is available.

Also after adding the user who didn`t see the PF, the PF is now available:

[PS] C:\>Add-PublicFolderClientPermission -Identity "\Public Folder" -User "User"  -AccessRights Owner

FolderName           User                 AccessRights
----------           ----                 ------------
Arnhem               itla-mgo             {Owner}

[PS] C:\>Get-PublicFolderClientPermission -Identity "\PublicFolder"

FolderName           User                 AccessRights
----------           ----                 ------------
Arnhem               Default              {Owner}
Arnhem               Anonymous            {None}
Arnhem               User             {Owner}

Many thx for the help!

• Marked as answer by Mvd12345 36 minutes ago

Hi,

I take a test in my lab and the result is the same as yours.

So in my opinion, the createitems access on this user will take over the Editor access on default user.  This user will only have createitems access on the public folder.

You can try to remove the createitems permission on testuser then add at least FolderVisible access on testuser to check the result.

Best Regards.

It seems i found a soluton by :

1) Deleting all permissions on the specific public folder:

[PS] C:\>Remove-PublicFolderClientPermission -Identity "\PublicFolder" -User Anonymous

Confirm
Are you sure you want to perform this action?
Removing mailbox folder permission on "\Arnhem" for user "Anonymous".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): y
[PS] C:\>
[PS] C:\>
[PS] C:\>Get-PublicFolderClientPermission -Identity "\PublicFolder"

FolderName           User                 AccessRights
----------           ----                 ------------
Arnhem               Default              {None}
Arnhem               Anonymous            {None}

[PS] C:\>Remove-PublicFolderClientPermission -Identity "\Public Folder" -User Default

Confirm
Are you sure you want to perform this action?
Removing mailbox folder permission on "\Public Folder" for user "Default".
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is "Y"): y

Result :

[PS] C:\>Get-PublicFolderClientPermission -Identity "\Public Folder"

FolderName           User                 AccessRights
----------           ----                 ------------
Arnhem               Default              {None}
Arnhem               Anonymous            {None}

Then adding the permissions for default :

[PS] C:\>Add-PublicFolderClientPermission -Identity "\PublicFolder" -User "Default"  -AccessRights Owner

FolderName           User                 AccessRights
----------           ----                 ------------
Arnhem               Default              {Owner}

Now the mailbox is available.

Also after adding the user who didn`t see the PF, the PF is now available:

[PS] C:\>Add-PublicFolderClientPermission -Identity "\Public Folder" -User "User"  -AccessRights Owner

FolderName           User                 AccessRights
----------           ----                 ------------
Arnhem               itla-mgo             {Owner}

[PS] C:\>Get-PublicFolderClientPermission -Identity "\PublicFolder"

FolderName           User                 AccessRights
----------           ----                 ------------
Arnhem               Default              {Owner}
Arnhem               Anonymous            {None}
Arnhem               User             {Owner}

Many thx for the help!

• Marked as answer by Mvd12345 Thursday, July 23, 2015 6:53 AM