In Exchange w2k3 is the public folder client permission by default for anonymous --contributor and for default-- Author? Also where does the NTuser : S-XXXXX comes from? is this possible done by script. Is there away to find out when this user was granted access? Thanks Frederik

From my Ex 2010 I have the same anonymous -create (same as contributer) and Default -Author The NTuser is a deleted or orphaned user. Can also show up after a migration etc.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Thanks; So the Ntuser was a deleted user but it will still show up in the client permission list? Thanks Frederik

Yes after user is deleted it shows up like that.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Thansk James; Is there also away to figure out who changed\add permission to the public folder?

I'm not aware of any method to audit public folder permission changes. Mailbox permission audit yes, but none that I'm aware of for PF. James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

The only thing that can be audited on exchange 2003 public folders is “Folder Deletion” after increasing the diagnostic logging for “Public Folders\General” to at least “Medium” Description of a hotfix that enables Exchange Server 2003 to log an event when a user deletes a public folder James Luo TechNet Subscriber Support in forum If you have any feedback on our support, please contact tngfb@microsoft.com Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.