Managing public folders in Exchange Server 2007 SP1 still requires the use of PowerShell cmdlets snap-in exposed in the Exchange Management Shell. This practical example illustrates how to resolve common issues around public folder access rights.
Scenario A: Outlook shows public folder as “Access Denied”(you do not have permissions to …)
[PS] C:\Windows\System32>Get-PublicFolderClientPermission -Identity “\folder\sharedItems” | fl
Identity : \folder\sharedItems
User : Default
AccessRights : {FolderVisible}
Identity : \folder\sharedItems
User : Anonymous
AccessRights : {FolderVisible}
Identity : \folder\sharedItems
User : swissitpro.ch/OU1/pic
AccessRights : {CreateItems, EditOwnedItems, EditAllItems, FolderContact, FolderVisible}
Identity : \folder\sharedItems
User : swissitpro.ch/group/it/grpitadmin
AccessRights : {Owner}
Identity : \folder\sharedItems
User : swissitpro.ch/OU1/groupOfPFUsers
AccessRights : {Author}
Removing existing access rights and then assigning the Person-In-Charge (PIC) the Author role with pre-defined access rights solved the problem:
[PS] C:\Windows\System32>Remove-PublicFolderClientPermission -Identity “\folder\sharedItems” -user “pic” -accessrights CreateItems, EditOwnedItems, EditAllItems, FolderContact, FolderVisible
Confirm
Are you sure you want to perform this action?
Removing Public Folder Permission on “\folder\sharedItems” for User “pic”, Access Rights “‘CreateItems’, ‘EditOwnedItems’, ‘EditAllItems’, ‘FolderContact’, ‘FolderVisible’”.
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help
(default is “Y”): y
[PS] C:\Windows\System32>Add-PublicFolderClientPermission -Identity “\folder\sharedItems” -AccessRights author -User “pic”
Identity User AccessRights
——– —- ————
\folder\sharedItems swissitpro.ch/OU1/pic … {Author}
Adding the access rights of FolderContact simply identifies the account as the administrative contact for the public folder:
[PS] C:\Windows\System32>Add-PublicFolderClientPermission -Identity “\folder\sharedItems” -AccessRights FolderContact -User “pic”
The state of the public folder access rights for user pic now reads:
[PS] C:\Windows\System32>Get-PublicFolderClientPermission -Identity “\folder\sharedItems” | fl
…
Identity : \folder\sharedItems
User : swissitpro.ch/OU1/pic
AccessRights : {ReadItems, CreateItems, EditOwnedItems, DeleteOwnedItems, FolderContact, FolderVisible}
…
Scenario B: Person-In-Charge cannot modify items created by others
So far, the modifications grant the pic user access rights to peruse the public folder, create, modify and delete objects owned by him/her only. S/he is not able to carry out his/her duties as PIC to administer items created by others in the same location.
To fix this, add the missing access rights with the end result as shown:
[PS] C:\Windows\System32>Add-PublicFolderClientPermission -Identity “\folder\sharedItems” -AccessRights EditAllItems,DeleteAllItems -User “pic”
[PS] C:\Windows\System32>Get-PublicFolderClientPermission -Identity “\folder\sharedItems” | fl
…
Identity : \folder\sharedItems
User : swissitpro.ch/OU1/pic
AccessRights : {ReadItems, CreateItems, EditOwnedItems, DeleteOwnedItems, EditAllItems, DeleteAllItems, FolderContact, FolderVisible}
Technorati tags: Exchange Server, PowerShell
Die Anzahl der Anmeldung steigt sich sehr schnell auf. Mit weniger als einem Monat wird der 1. Microsoft Evolution Day am 3. Dez. 2009 (Di.) stattfinden. In Zusammenarbeit mit Digicomp sind Microsoft Most Valuable Professional (MVP), Microsoft Certified Trainer (MCT) und Fachleute dabei, Tips and Tricks von der Praxis rund um den aktuellen Technologien und Neuigkeiten von Windows 7 / Server 2008 R2, Exchange 2010, Office Communications Server 2007 R2, SharePoint 2010 bis Office 2010 mit Ihnen einzutauchen.
Shipped as part of Windows 7 and Windows Server 2008 R2, PowerShell 2.0 has recently been released for Windows XP SP3 / Vista SP1 and SP2 / Server 2003 SP2 and 2008 SP2 on supported x86 or x64 editions.