Setting Public Folder Permissions - No Dice
Hi,
I'm trying to add two users, 'brad' and 'jessica' to the list of people who can manipulate Public Folders and their contents.
I have given both users administrative permissions and added them to the exchange public folder administrators group, but neither user can edit any public folders.
Below is my current permissions:
[PS] C:\Users\icsolutions\Desktop>Get-ExchangeAdministrator |fl
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Jessica Bailey
Scope : Organization wide
Role : OrgAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Brad Gribble
Scope : Organization wide
Role : OrgAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/icsolutions
Scope : Organization wide
Role : OrgAdmin
Identity : lakegroup.local/Users/Domain Admins
Scope : Organization wide
Role : OrgAdmin
Identity : lakegroup.local/Users/Administrator
Scope : Organization wide
Role : OrgAdmin
Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Organization Administrators
Scope : Organization wide
Role : RecipientAdmin
Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Public Folder Administrators
Scope : Organization wide
Role : ViewOnlyAdmin
Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Recipient Administrators
Scope : Organization wide
Role : ViewOnlyAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Jessica Bailey
Scope : Organization wide
Role : PublicFolderAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Patricia Donaldson
Scope : Organization wide
Role : PublicFolderAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Brad Gribble
Scope : Organization wide
Role : PublicFolderAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Andrew O'Brien
Scope : Organization wide
Role : PublicFolderAdmin
Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Organization Administrators
Scope : Organization wide
Role : PublicFolderAdmin
[PS] C:\Users\icsolutions\Desktop>Get-PublicFolderAdministrativePermissio
cmdlet Get-PublicFolderAdministrativePermission at command pipeline posit
Supply values for the following parameters:
Identity: \
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderQuotas}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderReplicaList}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {AdministerInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ViewInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderACL}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderExpiry}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderAdminACL}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderDeletedItemRetention}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderExpiry}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderQuotas}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderReplicaList}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {AdministerInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ViewInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderACL}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ViewInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange View-Only Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ViewInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AdministerInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderACL}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderQuotas}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderAdminACL}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderExpiry}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderReplicaList}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderDeletedItemRetention}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Servers
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : NT AUTHORITY\SYSTEM
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Organization Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\icsolutions
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Administrator
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Enterprise Admins
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Domain Admins
Identity : \
IsInherited : True
IsValid : True
ObjectState : UnchangedIf you buy three cars and the same wheel falls off all three, do you contact the person who sold you the cars or the person who made them?
April 19th, 2010 8:12am
Exchange 2007, right? Sometimes the version makes just a bit of a difference.
You've configured rights to administer public folders, but not to read content. The part you left out is setting the client access rights on all folders:
Get-PublicFolder -Identity \ -Recurse | Add-PublicFolderClientPermission -User brad -AccessRights Owner
Get-PublicFolder -Identity \ -Recurse | Add-PublicFolderClientPermission -User jessica -AccessRights Owner
http://technet.microsoft.com/en-us/library/aa997615(EXCHG.80).aspx
http://technet.microsoft.com/en-us/library/bb124743(EXCHG.80).aspx
You can also use the AddUsersToPFRecursive.ps1 script provided in Scripts folder where you installed Exchange 2007.
--
Ed Crowley MVP
"There are seldom good technological solutions to behavioral problems."
.
"Freqy" wrote in message
news:f6a9c40e-365a-4245-9d81-17b6ca8f2e3b...
Hi,
I'm trying to add two users, 'brad' and 'jessica' to the list of people who can manipulate Public Folders and their contents.
I have given both users administrative permissions and added them to the exchange public folder administrators group, but neither user can edit any public folders.
Below is my current permissions:
[PS] C:\Users\icsolutions\Desktop>Get-ExchangeAdministrator |fl
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Jessica Bailey
Scope : Organization wide
Role : OrgAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Brad Gribble
Scope : Organization wide
Role : OrgAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/icsolutions
Scope : Organization wide
Role : OrgAdmin
Identity : lakegroup.local/Users/Domain Admins
Scope : Organization wide
Role : OrgAdmin
Identity : lakegroup.local/Users/Administrator
Scope : Organization wide
Role : OrgAdmin
Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Organization Administrators
Scope : Organization wide
Role : RecipientAdmin
Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Public Folder Administrators
Scope : Organization wide
Role : ViewOnlyAdmin
Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Recipient Administrators
Scope : Organization wide
Role : ViewOnlyAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Jessica Bailey
Scope : Organization wide
Role : PublicFolderAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Patricia Donaldson
Scope : Organization wide
Role : PublicFolderAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Brad Gribble
Scope : Organization wide
Role : PublicFolderAdmin
Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Andrew O'Brien
Scope : Organization wide
Role : PublicFolderAdmin
Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Organization Administrators
Scope : Organization wide
Role : PublicFolderAdmin
[PS] C:\Users\icsolutions\Desktop>Get-PublicFolderAdministrativePermissio
cmdlet Get-PublicFolderAdministrativePermission at command pipeline posit
Supply values for the following parameters:
Identity: \
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderQuotas}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderReplicaList}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {AdministerInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ViewInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderACL}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderExpiry}
Deny : False
InheritanceType : All
User : LAKEGROUP\Brad
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderAdminACL}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderDeletedItemRetention}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderExpiry}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderQuotas}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderReplicaList}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {AdministerInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ViewInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderACL}
Deny : False
InheritanceType : All
User : LAKEGROUP\jessica
Identity : \
IsInherited : False
IsValid : True
ObjectState : Unchanged
AccessRights : {ViewInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange View-Only Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ViewInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AdministerInformationStore}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderACL}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderQuotas}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderAdminACL}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderExpiry}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderReplicaList}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {ModifyPublicFolderDeletedItemRetention}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Public Folder Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Servers
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : NT AUTHORITY\SYSTEM
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Exchange Organization Administrators
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\icsolutions
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Administrator
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Enterprise Admins
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
AccessRights : {AllExtendedRights}
Deny : False
InheritanceType : All
User : LAKEGROUP\Domain Admins
Identity : \
IsInherited : True
IsValid : True
ObjectState : Unchanged
If you buy three cars and the same wheel falls off all three, do you contact the person who sold you the cars or the person who made them?Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Free Windows Admin Tool Kit Click here and download it now
April 25th, 2010 2:41am
Just to finish this thread, I had to go into Outlook and right click on the public folders in question to change the security. I'd forgotten about that step, assuming that if I set the permissions on the server they would actually be set.If you buy three cars and the same wheel falls off all three, do you contact the person who sold you the cars or the person who made them?
May 4th, 2010 4:00am