Public Folder Permissions

I have a csv with a list of names of public folders. Header of column is called PublicFolder. I’m basically wanting to loop through all the folder names using the command below in EMS:
Import-CSV "c:\publicfolder\users.csv" | ForEach-Object -Process {Get-PublicFolder -Recurse -Identity '\$_.PublicFolder' | Add-PublicFolderClientPermission -User '$_.UserName' -AccessRights Owner -Confirm:$false}
However, I keep getting this error:
No existing 'PublicFolder' matches the following Identity: '\$_.PublicFolder'. Make sure that you specified the correct 'PublicFolder' Identity and that you have the necessary permissions to view 'PublicFolder'.
The users.csv looks like this:
PublicFolder,UserName
PublicFolder1,User1
PublicFolder2,User2

Hi,
Please use the following scripts to check result.
$Folders = Import-CSV "c:\publicfolder\users.csv"
ForEach ($Folder in $Folders) {
$myfolder = '\' + $Folder.PublicFolder
Get-PublicFolder -Identity $myfolder | Add-PublicFolderClientPermission -User $Folder.UserName -AccessRights Owner -Confirm:$False
Actually, we have a dedicated forum about Script, you can post there to get better help.
http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?category=scripting
Best regards,
Belinda Ma
TechNet Community Support

Similar Messages

Exchange 2013 SP1 RU4 Public Folder Permissions

Hi All,
Exchange 2013 SP1 RU4 Public Folder Permissions
We have a weird problem after migrating our PF from Exchange 2010 to 2013.
Users do not have permission to create or delete in PF even thou they have owner permissions.
Example:-
I have created a '\test1' folder in the root which has the following permissions (this works OK):-
Myself - Owner
Default - Author
Anonymous - None
I have created another folder '\admin\test2' folder which has the same permissions as above but i get the "cannot create the folder. you don't have appropriate permissions to perform this operation"
I get this problem across all of the folders that were migrated. clean folders created at the root with the correct permission function as per expected.
Regards
Paul Sheldon

Hi,
I recommend you use the Get-PublicFolderClientPermission -Identity publicfolder command to check the client access permissions to a public folder.
If possible, please remove permission and re-add permission to check the result.
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Exchange 2013 - ECP shows wrong public folder permissions

Hi everybody,
I just migrated from Exchange 2007 to 2013 SP1 CU7 and we have an issue with the public folder permissions in ECP. ECP doest not show the correct permissions, here an example:
Get-PublicFolder "\Folder" | Get-PublicFolderClientPermission | ft
FolderName User AccessRights
Folder Default {Author}
Folder Anonymous {None}
Folder Administrator {Owner}
Thank you very much and best regards,
Sebastian

Hi,
Based on your description, the public folder permissions you get using command aren't the same with that you view from EAC.
Please check if you can change the wrong permissions to right in EAC.
If you have multiple public folder mailbox, please move affected public folders to another public folder mailbox and move back to check result.
And if you have multiple DCs, please make sure there is no replication issue between DCs or you can force DC replication and then to check result.
Best regards,
Belinda Ma
TechNet Community Support

Unable to set Public Folder Permissions

I have created a Public Folder Mailbox and Public Folder. When I go to set permissions via the EAC, the "User" field is grayed out...when I Browse for a user I can search and select a user, but that user is not carried over to the User field where
you would set permissions. I am unable to see ANYYONE with permissions via the EAC. However, when I access my Public Folders in Outlook 2013, I and a co-worker both have "Author" level permissions.
I am an Administrator on the system and have added myself to the Public Folders role and anything else that looked even remotely related :-o
Thanks for the help!
-Nick

Hi,
We can try settings the permission on the specific folders by using the exFolders tool:
https://gallery.technet.microsoft.com/office/Exchange-2010-SP1-ExFolders-e6bfd405
Thanks,
Simon Wu
TechNet Community Support

Public Folder permissions to groups not working

Hello Together,
I have some problems with permission of Exchange 2010 (SP2) public folders. Although I can't find an TechNet article which describes the procedure to add a group to a public Folder client permission list, it should be possible because the
Add-PublicFolderClientPermission cmd-let will accept Users and groups as parameter for -user.
But if I give permissions to groups the members of the Groups can't access the public folders.
What I exactly do is this:
- Create a Distribution Group for example TEST (Universal Distribution Group)
- Add User "Testuser" to this Group
- Add public folder Clientpermissions to the Group "Test" which autmatically changes the group type to Universal Security Group (there is no difference if I do this with the GUI or management shell)
Result: No Access for User "Testuser"
If I add the User directly to the Public folder he can acces the folder.
I can reproduce this problem in my test- and my Productionenvironment.
Any ideas?
Best regards
Hans Moggert
Hans Moggert Technical Account Manager Geschäftsbereich Technologie & Service Allgeier IT Solutions GmbH

Hi Martina,
thank you for your very fast answer, but this was exactly what I had done ...
But Today, if I tried to access the Public Folder again everything works as expected, so I tried to find out why I have to wait so long until the expected permissions work and now I think I have found the reason:
- Exchange 2010 uses Universal Groups for Distribution and Security Groups
- Universal Groups are the only Grouptypes which saves the member list at the Global Catalog server
- the default Global Catalog Caching interval is 1440 Minutes (24 hours)
So if you change membership of universal Groups you have to wait 24 hours until Exchange recognizes this change!
If you want to force this you can do one of the following steps:
- reduce the "Cached Membership Refresh Interval (minutes)"
http://technet.microsoft.com/en-us/library/how-global-catalog-servers-work(v=ws.10).aspx
- Use the following VB-Script:
set objRoot = GetObject("LDAP://rootDSE")
objRoot.Put "UpdateCachedMemberships", 1
objRoot.SetInfo
msgbox "Universal Group Cache refreshed!"
This forces the Group members to refresh immediatly.
I think I am not the only person who had this problem so I hope I can help others with this solution ...
Best regards and thx
Hans Moggert Technical Account Manager Geschäftsbereich Technologie & Service Allgeier IT Solutions GmbH

Outlook Public Folder access and permissions

How do I add an account to a public Folder and grant management permissions to that account?

Hi,
To add permissions for client users to access Public Folder content, we can use Exchange Management Shell to add it as what ManU PhiliP posted.
Alternatively, we can use the Public Folder Management Console to add public folder permissions for a client user. For detailed steps about this, please refer to the following official article:
https://technet.microsoft.com/en-us/library/aa998834(v=exchg.141).aspx
Regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Winnie Liang
TechNet Community Support

Why don't permissions get set correctly when add to Public folder?

When I add files to my Public folder I expect the permissions to match my public folder. In particular, they should be readable by 'others'.
Often the permissions don't update. The result is that other users can't read files in my public folder. I have to manually apply the default Public Folder permissions to all enclosed files.
Is this only a problem on my machine? How would Public Folders work if they didn't update permissions when files are added to them?
BTW, I run as a regular non-admin user. I enter my admin un/pw only as needed. It's a good practice.
PS. I've repaired permissions, but that's a superstition anyway.

The "Public" folder in OS X is just a regular folder - it won't modify anything added to it. In the context of file sharing, the sharing of folders can be configured so that items copied from one computer to another will have their permissions modified, but this only applies to file sharing, and by default, only to a folder with "Drop Box" permissions (ie. "write only").
Regarding "read" access of files, in general (there are exceptions) files or folders created by a user are, by default, created with permissions such that everyone (user, group, other) gets at least "read" access - it shouldn't be necessary to change their permissions before making them available to others via the "Public" folder. If items don't have at least "read only" access, this suggests that the default permissions have been set to something more restrictive (possibly via a 'NSUmask' key added to the ".GlobalPreferences.plist" file). Or perhaps the files are coming from some other source. So this suggests that either the problem concerns a non-default configuration or a special case, but unfortunately there isn't enough information in the post to comment on what the problem might be.

How to regain access to public folder items

Hi All,
We have a few public folder items (mainly calendars) for which i (the admin) have no(or limited) access to.
In outlook 2010 if i go to the properties of the public calendar i can only see an entry for Administrators for which has the access of only "Author"
If i log into the exchange server powerscript shell and try and run
Get-PublicFolderClientPermission -Identity \"<Item name>"
I get the following error:
No existing 'PublicFolderEntry' matches the following Identity: '\<Item name>'. Make sure that you specif
ied the correct 'PublicFolderEntry' Identity and that you have the necessary permissions to view 'PublicFolderEntry'.
+ CategoryInfo : NotSpecified: (0:Int32) [Get-PublicFolderClientPermission], MapiObjectNotFoundException
+ FullyQualifiedErrorId : C8510C4,Microsoft.Exchange.Management.MapiTasks.GetPublicFolderClientPermission
These are items have had existed in exchange since before it started and from Exchange 2003 to now Exchange 2010.
Is there a way i can force the Administrator to have Owner rights on these items again?
Thanks

Ok... for all those other unfortunate souls out there who have no answer... here's the deal... The "Failed to Modify MAPI.NET Table" error is due to a problem with your DACL (permissions) table on the public folder(s). But, Exchange 2010 doesn't provide
any utilities to correct this! exFolders replaces most PVDavAdmin functions but is does not have the "Fix DACL" option built in.
After all my research and troubleshooting I discovered that the DACL issue was because I had entered explict permissions for the built-in Administrators group. This was resulting in the following error in event viewer: "The mailbox '' contains a folder <NAME
OF MY PUBLIC FOLDER> with a security descriptor that violates the canonical format."
Since I could not remove the existing public folders OR modify their permissions, but could still read their content, I copied all the content over to my mailbox. I then wanted to start completely fresh and created a new public folder store following the
below steps:
1. Dismount public folder database
2. Move public folder database file and log (as a backup, not going to reuse it though)
3. Mount public folder database (creates a new blank public folder database)
*** NOTE: I could have probably just continued with the new blank public folder database, but I wanted to clear out all the old stuff and be sure it was all new and clean. So I continued through the following steps.
4. Delete public folder database
5. Delete database file and log files
6. Opened ADSIEdit and deleted the existing "Folder Hierarchies" object from this location: Configuration\Services\Microsoft Exchange\<organization name>\Administrative groups
*** NOTE: The next two steps are optional, as Exchange will do them for you when you create a new public folder database. BUT, exchange does NOT correctly assign the msExchPublicFolderTreeContainer class to the Folder Hierarchies object! It just makes it a
container. So I opted to manually create it to force it to use the right class
7. Recreated the "Folder Hierarchies" object in the same location (class is msExchPublicFolderTreeContainer)
8. Create "Public Folders" object under "Folder Hierarchies" (class is msExchPFTree and attribute msExchPFTreeType MUST be set to 1)
9. Went back to EMC, Organization Configuration, Mailbox, Database Management, and right clicked to create a new public folder database.
10. Restart Information Store Service
Once I had done all that I opened up outlook and created a new public folder. I then highlighted all the items in my mailbox that I had copied out of the original folder and copied them into this new public folder. As long as I do not add public folder permissions
for the built-in Administrators group, then I am able to manage public folder permissions without any errors. I haven't tested to see if the same error occurs for other built-in security groups.

Can't add a mail enabled public folder to allowed senders on a mail universal security group in Exchange 2010

Hello,
I'm trying to allow a mail enabled public folder permissions to send to a mail universal security group. In the past if I wanted to add a PF as an allowed sender I would do it via the AuthOrig setting on that group using adsiedit. I just noticed today
that if I add the PFs DN to that attribute of the group, nothing happens. No matter how long I wait the PF never shows up under the allowed senders list on the group. If you try and send as the PF you get a bounce about not being allowed to send to that
group. If I go back into AD and check, the PF is still listed under the AuthOrig attribute. I tried this on a few different groups and with a few different PF and I'm stumped. I think the last time I had to update this setting on a group
was before I installed roll-up 5 for SP3.
If I do the same test with a user, it works as it should and they show up in the allowed senders list.
If I take a group that isn't restricted to specific senders and add a PF DN to the AuthOrig attribute of the group, the button in the message delivery restrictions for that group in the EMC will change from all senders to only senders in the following list,
but the PF wont be listed in the box of allowed senders. If I remove it from the AuthOrig attribute the group will change back to allow all senders. It's really weird, so any help or light you can shed on this would be greatly appreciated.
-Mark

Hello,
I check many threads and articles, but there is no related information to verify the issue.
If your purpose is that adding a mail-enabled public folder to allowed senders on a distribution group, there is a workaround method. You can create a new distribution group, and then add the public folder to the new distribution group, and add
the new distribution group to the Only senders in the following list field of the target distribution group.
Here is an article for your reference.
http://support.microsoft.com/kb/2746885
Cara Chen
TechNet Community Support

Can't access Public folder as guest

Since installing Leopard computers on the network will not connect to my Public folder as guest.
When trying to access the Public folder under 10.4 the "Guest" option is grayed out, although connecting as a user (entering user/pass) is possible.
When trying under 10.5, once I select the computer name from the Finder's window left menu "Connection Failed" appears on the dark-grey bar at the top. Still, like in Tiger, connecting as a user is possible, but when trying to disconnect by pressing the "Disconnect" button on top nothing happens. I get the same "Connection Failed" message and the user remains logged.
Where I may have messed up: I have 2 accounts in my computer (1 admin, 1 standard). I almost never use the admin account so I deleted it's Public folder from "Shared Folders" under Sharing in System Preferences. Then, on the standard account I deleted by mistake the "Staff" group from it's Public folder permissions. When trying to add "Staff" back, the option is not available.
All of that may have nothing to do with my problem, but I know very little about Unix, so who knows.
Any ideas as to why no one can access my Public folder as guest?

That would be in the case I wanted a Guest Account on my same computer to be able to access my Public folder. My problem is with computers on the network. Thanx anyways

Public Folders Permissions

Hi,
is there a way to set Public Folder permissions in ECP not for user but for group(distribution or security)? COnsole only shows me users, doesnt matter if its mail enabled or not. Thank you.
Pete
sfs

Hi,
If we create an universal security group in AD, and at the same time, another universal sercurity group is created via EAC. We will find that the group created in AD doesn't show in EAC, this group doesn't have an email address when we check it from AD.
After we use the Enable-DistributionGroup cmdlet to enable this group, this security group will display in EAC and we can also grant public folder permissions to this group.
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Insufficient Access Rights when trying to modify send as permissions on a public folder

Where I work, we have 2 mailbox database servers and 2 cas servers on Exchange 2010, upgraded from Exchange 2003. We are finding that when trying to grant a user send as rights to a publlic folder we are getting an Insufficient Access Rights error. The
bizzare thing is for one particluar folder we can amend the send as rights with no issue on one of the cas servers but not the other cas or either db servers.
You would have thought if it was a user permissions issue i.e the adminsitrator not having sufficent rights it would fail on every server and likewise if it was a problem with the folder itself, why is it working on one of the cas servers? Also on
the one server this particluar folder does allow us to amend the rights, when we try to amend others we get the same error
If anyone has come accross this before and knows a fix please share it.
Thanks

Hi,
Please check the ownership of the affected public folder to make sure it points to the right server.
Here is a similar thread which may help you, please following the suggests in this thread to check result.
https://social.technet.microsoft.com/Forums/office/en-US/0960b944-82b2-42f1-b438-a7d57b7ab783/insuffaccessrights?forum=exchangesvrgenerallegacy
Best regards,
Belinda Ma
TechNet Community Support

Changing permissions on a top level public folder WITHOUT affecting the folders underneath it in Exchange 2007

Hello everyone,
We have a pubilc folder we woudl like to lockdown to just the IT techs, but we want eveything below to function as it normally has been. We have several folders underneath this folder with various permissions for our end users that we dont want changed.
How would you change the permissions on a top level folder without affecting (propagating) the folders underneath it? Also, If I go into the "Administration" tab of the properties of the top level Public Folder I see an option to
make this folder available to: "All users with access permission" or "Owners only". Would it be as simple to select "Owners only" here or will that restrict the down level folders as well to just the owners?
Thanks,
John

Hi,
You use PFDAVAdmin to customize your permission level for mailbox and public folder. This is good tool which helped me a lot in most of the permission issue for PF and Mailbox. Follow the below article for more detail of PFDAVAdmin Tool
http://www.nigelboulton.co.uk/2010/12/delegating-and-propagating-exchange-folder-permissions-using-pfdavadmin/
Exchange Queries

Problems with permissions on Public folder?

I can see my wife's Public folder and drop box but she can't see mine, although she can log in as a guest. We're both using Leopard. I think it's some kind of permissions problem because in the info for my Public folder there are three users:
me: read & write
unknown: read only (that's the weird one)
everyone: read only
My wife has:
her: read & write
staff: read only
everyone: read only
When I checked the permissions for my Public folder by running ls -ld Public in Terminal I got the following: drwxr-xr-x@ 5 xbodhipaksa xbodhipaksa 170 Jun 13 08:45 Public
I'm not sure what that @ symbol is doing there.
I ran chmod -vv 755 Public in Terminal but that didn't change anything.
Since I know nothing about permissions I've been following the instructions in this thread: http://discussions.apple.com/thread.jspa?messageID=7243511&#7243511
Any help gratefully received.

The Public folder isn't visible when she logs in as a guest. I just created an account for her a few minutes ago and gave her read only access to the public folder, but when I logged in remotely using her computer and that new account the public folder still didn't show up.
File sharing is and has been enabled in the system preferences, and her new account is showing up there.

Please help setting permissions on a Public folder

I've just migrated from a G4 running 10.4.x to a Mac Pro running 10.5.1, and now when I create files/folders on a Public folder located on a Xserver, I can't set permissions to allow everyone to Read & Write.
Here's what's happening. Let's say I create a new folder in the Public folder and select Get Info to change the permission to allow everyone to Read & Write. The folder starts with the permissions as g42 (my account) "Read & Write", admin "Read only", everyone "Read only". If I click to change the Privileges of "everyone" to Read & Write, all of a sudden g42's Privileges change to "No Access", admin disappears and everyone (which I had selected as Read & Write) changes to "No Access". And the folder icon now has a minus symbol on the lower right corner.
With that said, lets say I try and correct this by clicking the Privileges of g42 to "Read & Write". Nothing happens. I then try and correct the Privileges of everyone to "Read & Write". After doing this the list of permissions is osxserver "No Access", (unknown) "Read & Write", everyone "Read & Write". And the folder still has a minus symbol on the lower right corner.
I'm sorry if this is confusing but it's just as confusing to me and I can't figure out what I'm doing wrong.
I Can set all the correct permissions if I do it via the Xserver. But I don't want to have to do this everytime I create a file/folder. And no one else connected to the network, running 10.4.x, has this problem which makes me think its a Leopard problem.
Any suggestions? Need me to clarify anything?
Thanks.

Hey Aaron...
I just ran thru this with my nephew at college who wanted to share .mp3 files with his roomies, and yes, I'm afraid it's all about permissions.
In a way, Apple has made this a bit harder than it needs to be.
1. You could create a new user for your computer, say User1, and let all your co-workers log in as that user, and they would have access to the all the docs in User1's home folder, including the ability to create, edit, move, and delete files. The problem here is that you'll be logged in as "you", and won't have the same priviledges, and no amount of manual changing of permissions will make this easier.
2. If you have a spare HD(they are pretty cheap), you can add that to your computer, and set the the permissions to "Ignore". Your co-workers can log in to your computer as Guest, and have access to all the docs on that drive, and you will as well, since docs on that drive respond to permissions issues.
3. The last option would be if you have an older, spare Mac to set up as a file server. Create a user for it, and you and your co-workers can log in as that user (all at the same time) and see, edit, and delete docs on the computer.
BUT, as far as I know, I have tried numerous times to do what you want to do, and can't get it to work. Unless you don't have any "secrets" on your computer, you could give your co-workers your username and password, they log into your computer and have access to all the docs in your home folder.... but ALL the docs... anything and everything in your home folder will be available for perused by anyone logged in with your username. LIkewise, establishing a 2nd user on your computer only goes most of the way to a solution, since you can't (easily) be logged in as both users and create, open, edit, save and delete docs.
I suppose there may be a script out there that will automatically change permissions on the fly, but I'm unaware of any.
Hope this helps.

Public Folder Permissions

Similar Messages

Maybe you are looking for