Setting Public Folder Permissions - No Dice
Hi, I'm trying to add two users, 'brad' and 'jessica' to the list of people who can manipulate Public Folders and their contents. I have given both users administrative permissions and added them to the exchange public folder administrators group, but neither user can edit any public folders. Below is my current permissions: [PS] C:\Users\icsolutions\Desktop>Get-ExchangeAdministrator |fl Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Jessica Bailey Scope : Organization wide Role : OrgAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Brad Gribble Scope : Organization wide Role : OrgAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/icsolutions Scope : Organization wide Role : OrgAdmin Identity : lakegroup.local/Users/Domain Admins Scope : Organization wide Role : OrgAdmin Identity : lakegroup.local/Users/Administrator Scope : Organization wide Role : OrgAdmin Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Organization Administrators Scope : Organization wide Role : RecipientAdmin Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Public Folder Administrators Scope : Organization wide Role : ViewOnlyAdmin Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Recipient Administrators Scope : Organization wide Role : ViewOnlyAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Jessica Bailey Scope : Organization wide Role : PublicFolderAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Patricia Donaldson Scope : Organization wide Role : PublicFolderAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Brad Gribble Scope : Organization wide Role : PublicFolderAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Andrew O'Brien Scope : Organization wide Role : PublicFolderAdmin Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Organization Administrators Scope : Organization wide Role : PublicFolderAdmin [PS] C:\Users\icsolutions\Desktop>Get-PublicFolderAdministrativePermissio cmdlet Get-PublicFolderAdministrativePermission at command pipeline posit Supply values for the following parameters: Identity: \ AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderQuotas} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderReplicaList} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {AdministerInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ViewInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderACL} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderExpiry} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderAdminACL} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderDeletedItemRetention} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderExpiry} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderQuotas} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderReplicaList} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {AdministerInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ViewInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderACL} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ViewInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\Exchange View-Only Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ViewInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AdministerInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderACL} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderQuotas} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderAdminACL} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderExpiry} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderReplicaList} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderDeletedItemRetention} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Servers Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : NT AUTHORITY\SYSTEM Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Organization Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\icsolutions Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Administrator Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Enterprise Admins Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Domain Admins Identity : \ IsInherited : True IsValid : True ObjectState : UnchangedIf you buy three cars and the same wheel falls off all three, do you contact the person who sold you the cars or the person who made them?
April 19th, 2010 8:12am

Exchange 2007, right? Sometimes the version makes just a bit of a difference. You've configured rights to administer public folders, but not to read content. The part you left out is setting the client access rights on all folders: Get-PublicFolder -Identity \ -Recurse | Add-PublicFolderClientPermission -User brad -AccessRights Owner Get-PublicFolder -Identity \ -Recurse | Add-PublicFolderClientPermission -User jessica -AccessRights Owner http://technet.microsoft.com/en-us/library/aa997615(EXCHG.80).aspx http://technet.microsoft.com/en-us/library/bb124743(EXCHG.80).aspx You can also use the AddUsersToPFRecursive.ps1 script provided in Scripts folder where you installed Exchange 2007. -- Ed Crowley MVP "There are seldom good technological solutions to behavioral problems." . "Freqy" wrote in message news:f6a9c40e-365a-4245-9d81-17b6ca8f2e3b... Hi, I'm trying to add two users, 'brad' and 'jessica' to the list of people who can manipulate Public Folders and their contents. I have given both users administrative permissions and added them to the exchange public folder administrators group, but neither user can edit any public folders. Below is my current permissions: [PS] C:\Users\icsolutions\Desktop>Get-ExchangeAdministrator |fl Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Jessica Bailey Scope : Organization wide Role : OrgAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Brad Gribble Scope : Organization wide Role : OrgAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/icsolutions Scope : Organization wide Role : OrgAdmin Identity : lakegroup.local/Users/Domain Admins Scope : Organization wide Role : OrgAdmin Identity : lakegroup.local/Users/Administrator Scope : Organization wide Role : OrgAdmin Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Organization Administrators Scope : Organization wide Role : RecipientAdmin Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Public Folder Administrators Scope : Organization wide Role : ViewOnlyAdmin Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Recipient Administrators Scope : Organization wide Role : ViewOnlyAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Jessica Bailey Scope : Organization wide Role : PublicFolderAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Patricia Donaldson Scope : Organization wide Role : PublicFolderAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Brad Gribble Scope : Organization wide Role : PublicFolderAdmin Identity : lakegroup.local/MyBusiness/Users/SBSUsers/Andrew O'Brien Scope : Organization wide Role : PublicFolderAdmin Identity : lakegroup.local/Microsoft Exchange Security Groups/Exchange Organization Administrators Scope : Organization wide Role : PublicFolderAdmin [PS] C:\Users\icsolutions\Desktop>Get-PublicFolderAdministrativePermissio cmdlet Get-PublicFolderAdministrativePermission at command pipeline posit Supply values for the following parameters: Identity: \ AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderQuotas} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderReplicaList} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {AdministerInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ViewInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderACL} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderExpiry} Deny : False InheritanceType : All User : LAKEGROUP\Brad Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderAdminACL} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderDeletedItemRetention} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderExpiry} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderQuotas} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderReplicaList} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {AdministerInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ViewInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderACL} Deny : False InheritanceType : All User : LAKEGROUP\jessica Identity : \ IsInherited : False IsValid : True ObjectState : Unchanged AccessRights : {ViewInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\Exchange View-Only Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ViewInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AdministerInformationStore} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderACL} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderQuotas} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderAdminACL} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderExpiry} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderReplicaList} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {ModifyPublicFolderDeletedItemRetention} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Public Folder Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Servers Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : NT AUTHORITY\SYSTEM Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Exchange Organization Administrators Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\icsolutions Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Administrator Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Enterprise Admins Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {AllExtendedRights} Deny : False InheritanceType : All User : LAKEGROUP\Domain Admins Identity : \ IsInherited : True IsValid : True ObjectState : Unchanged If you buy three cars and the same wheel falls off all three, do you contact the person who sold you the cars or the person who made them?Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Free Windows Admin Tool Kit Click here and download it now
April 25th, 2010 2:41am

Just to finish this thread, I had to go into Outlook and right click on the public folders in question to change the security. I'd forgotten about that step, assuming that if I set the permissions on the server they would actually be set.If you buy three cars and the same wheel falls off all three, do you contact the person who sold you the cars or the person who made them?
May 4th, 2010 4:00am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics