exchange 2003 grant administrative permission to all public folders
Hi, i have SBS 2003 with exchange 2003. i need to grant an user the administrative rights to every single folders and items under the entire public folders. that user will needs to be able view and administer the entire public folders from her outlook client. she needs to be able create folders and assign sharing permission for other users, from her outlook client. i've tried in exchange systems manager and also log on outlook as administrator and change the sharing permission (grant that user administrative rights) of root folders, but the permission wont inherit to the sub folders. as the public folders are now have about 20 root folders, with near 1000 sub folders, it is pain for me to set the permission one by one. any idea how i can move forward? many thanks in advance. Regards, CN
January 19th, 2011 7:42pm

At first,If the use need to manage the public folder permissions, administrative right is not enough.You need to grant the user full administrator right to AG (Administrative group). Because objects in Exchange store inherit permissions from their administrative group (AG) automatically ,If nobody have ever removed the inherited permission manually, i think what you have mentioned "the permission didn't inherit to the sub folders" will not happen. So I suggest you doing following setups again. For delegate permission to the user: 1.Right click AG, click delegation control, then click next. 2. Add the user's alias, and choose the full administrator. 3. Click next until finish it. In order to verify if you have done successfully, doing following setups. 1. Create a DWORD value named "showsecuritypage" under HKEY_CURRENT_USER\software\microsoft\exchange\EXadmin, set the value as 1. 2. Then you can see the security feature under the property of AG by ESM. 3. view the user's permission under security feature.
Free Windows Admin Tool Kit Click here and download it now
January 20th, 2011 1:42am

At first,If the use need to manage the public folder permissions, administrative right is not enough.You need to grant the user full administrator right to AG (Administrative group). As you mentioned, the permission didn't inherit to the sub folders. I doubt it. Because objects in Exchange store inherit permissions from their administrative group (AG) automatically , So I suggest you doing following setups again. For delegate permission to the user: 1.Right click AG, click delegation control, then click next. 2. Add the user's alias, and choose the full administrator. 3. Click next until finish it. In order to verify if you have done successfully, doing following setups. 1. Create a DWORD value named "showsecuritypage" under HKEY_CURRENT_USER\software\microsoft\exchange\EXadmin, set the value as 1. 2. Then you can see the security feature under the property of AG by ESM. 3. view the user's permission under security feature.
January 20th, 2011 1:42am

Hi, thanks for your suggestion. i've done the delegate, and now every single folders under PF has the designated user in the administrative rights. but i notice that the designated administrator does not listed in the "client permission", of some folder. does this means that folder won't be visible in that administrator's outlook client? thanks
Free Windows Admin Tool Kit Click here and download it now
January 20th, 2011 11:32am

It's great to hear that the delegation issue has solved. For more people will come to disscuss your new question ,could you please open a new thread?
January 20th, 2011 8:42pm

ok, noted. thank you very much for your great help :)
Free Windows Admin Tool Kit Click here and download it now
January 21st, 2011 1:43am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics