locked
Public folder administrators role RRS feed

  • Question

  • Exchange 2007 sp2 on Server 2008 R2

    Doesn't appear like my exchange public folder administrator role is working correctly, adding people or groups into the role doesn't allow them to modify public folders:

    - I added a group (techsupport containing two users) to the role through the add exchange administrator wizard.
    -I double checked administrative permissions on the public folders and noticed the role was not assigned the allextended permission (read that this is supposed to be the default permission set for the role), so i added this administrative permission to all the public folders
    -I even added the techsupport group to the exchange public folder administrators AD group (I didn't think this was necessary but it doesn't seem to have helped any)

    I dont know the full history of these public folders, they appear to be migrated public folders from an old exchange 2003 server, it's very possible the migratioin wasn't done properly.

     Here are teh permissions from a calendar that the role cannot modify:

    [PS] C:\Windows\system32>get-publicfolderadministrativepermission -identity "\he
    rshey bears" -user "\lancaster\exchange public folder administrators" | fl


    AccessRights    : {AllExtendedRights}
    Deny            : False
    InheritanceType : All
    User            : LANCASTER\Exchange Public Folder Administrators
    Identity        : \Hershey Bears
    IsInherited     : False
    IsValid         : True
    ObjectState     : Unchanged

    • Edited by device_nul1 Tuesday, March 15, 2011 2:13 PM forgot to mention
    Tuesday, March 15, 2011 2:04 PM

All replies

  • When you say that they can't "modify public folders", do you mean public folder CONTENT, or public folder PROPERTIES?

    If you want them to be able to modify the content of a folder then they need CLIENT permission not administrative permission.


    --- Rich Matheisen MCSE+I, Exchange MVP
    Wednesday, March 16, 2011 2:37 AM
  • Permissions on the folders is what i meant by modify, anyone in that role cannot see the permissions on any public folder or even newly created ones.
    Wednesday, March 16, 2011 11:50 AM