Unable to set Public Folder Permissions

I have created a Public Folder Mailbox and Public Folder. When I go to set permissions via the EAC, the "User" field is grayed out...when I Browse for a user I can search and select a user, but that user is not carried over to the User field where
you would set permissions. I am unable to see ANYYONE with permissions via the EAC. However, when I access my Public Folders in Outlook 2013, I and a co-worker both have "Author" level permissions.
I am an Administrator on the system and have added myself to the Public Folders role and anything else that looked even remotely related :-o
Thanks for the help!
-Nick

Hi,
We can try settings the permission on the specific folders by using the exFolders tool:
https://gallery.technet.microsoft.com/office/Exchange-2010-SP1-ExFolders-e6bfd405
Thanks,
Simon Wu
TechNet Community Support

Similar Messages

Exchange 2013 SP1 RU4 Public Folder Permissions

Hi All,
Exchange 2013 SP1 RU4 Public Folder Permissions
We have a weird problem after migrating our PF from Exchange 2010 to 2013.
Users do not have permission to create or delete in PF even thou they have owner permissions.
Example:-
I have created a '\test1' folder in the root which has the following permissions (this works OK):-
Myself - Owner
Default - Author
Anonymous - None
I have created another folder '\admin\test2' folder which has the same permissions as above but i get the "cannot create the folder. you don't have appropriate permissions to perform this operation"
I get this problem across all of the folders that were migrated. clean folders created at the root with the correct permission function as per expected.
Regards
Paul Sheldon

Hi,
I recommend you use the Get-PublicFolderClientPermission -Identity publicfolder command to check the client access permissions to a public folder.
If possible, please remove permission and re-add permission to check the result.
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Unable to set send-as permissions because of hundrets of duplicate permissions

hello,
we are unable to set send-as permissons to mailboxes where more than 10 users already habe send-as permissions.
when i use get-adpermission -identity "mailbox_abc" i get 4309 lines with permissions. But most are duplicates. every permission is set 31 times.
when i remove a user there are 4278 lines, when i add an user there are 4309 lines.
it seems that every account has between 1000 and 4000 permission lines
when i use the GUI i only see 10 different permissions
how can i fix it?
thankyou in advance boris

my problem are the hundreds of duplicates
this is the output
Get-ADPermission -Identity "mailbox_abc" | ?{($_.ExtendedRights -like "*send-as*") -and -not ($_.User -like "nt authority\self")} | select identity,user
Identity
User
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           NT-AUTORITÄT\SELBST
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\gka
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\ma
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\zr
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\fh
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\MT
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           NT-AUTORITÄT\SELBST
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\gka
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\ma
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\zr
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\fh
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\MT
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           NT-AUTORITÄT\SELBST
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\gka
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\ma
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\zr
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\fh
sample.domain/MyBusiness/Users/SBSUsers/sample Mitglied           SAMPLE\MT
alltogether 4300 duplicate lines but only 5 different accounts
rg. borris

Exchange 2013 - ECP shows wrong public folder permissions

Hi everybody,
I just migrated from Exchange 2007 to 2013 SP1 CU7 and we have an issue with the public folder permissions in ECP. ECP doest not show the correct permissions, here an example:
Get-PublicFolder "\Folder" | Get-PublicFolderClientPermission | ft
FolderName User AccessRights
Folder Default {Author}
Folder Anonymous {None}
Folder Administrator {Owner}
Thank you very much and best regards,
Sebastian

Hi,
Based on your description, the public folder permissions you get using command aren't the same with that you view from EAC.
Please check if you can change the wrong permissions to right in EAC.
If you have multiple public folder mailbox, please move affected public folders to another public folder mailbox and move back to check result.
And if you have multiple DCs, please make sure there is no replication issue between DCs or you can force DC replication and then to check result.
Best regards,
Belinda Ma
TechNet Community Support

Public Folder permissions to groups not working

Hello Together,
I have some problems with permission of Exchange 2010 (SP2) public folders. Although I can't find an TechNet article which describes the procedure to add a group to a public Folder client permission list, it should be possible because the
Add-PublicFolderClientPermission cmd-let will accept Users and groups as parameter for -user.
But if I give permissions to groups the members of the Groups can't access the public folders.
What I exactly do is this:
- Create a Distribution Group for example TEST (Universal Distribution Group)
- Add User "Testuser" to this Group
- Add public folder Clientpermissions to the Group "Test" which autmatically changes the group type to Universal Security Group (there is no difference if I do this with the GUI or management shell)
Result: No Access for User "Testuser"
If I add the User directly to the Public folder he can acces the folder.
I can reproduce this problem in my test- and my Productionenvironment.
Any ideas?
Best regards
Hans Moggert
Hans Moggert Technical Account Manager Geschäftsbereich Technologie & Service Allgeier IT Solutions GmbH

Hi Martina,
thank you for your very fast answer, but this was exactly what I had done ...
But Today, if I tried to access the Public Folder again everything works as expected, so I tried to find out why I have to wait so long until the expected permissions work and now I think I have found the reason:
- Exchange 2010 uses Universal Groups for Distribution and Security Groups
- Universal Groups are the only Grouptypes which saves the member list at the Global Catalog server
- the default Global Catalog Caching interval is 1440 Minutes (24 hours)
So if you change membership of universal Groups you have to wait 24 hours until Exchange recognizes this change!
If you want to force this you can do one of the following steps:
- reduce the "Cached Membership Refresh Interval (minutes)"
http://technet.microsoft.com/en-us/library/how-global-catalog-servers-work(v=ws.10).aspx
- Use the following VB-Script:
set objRoot = GetObject("LDAP://rootDSE")
objRoot.Put "UpdateCachedMemberships", 1
objRoot.SetInfo
msgbox "Universal Group Cache refreshed!"
This forces the Group members to refresh immediatly.
I think I am not the only person who had this problem so I hope I can help others with this solution ...
Best regards and thx
Hans Moggert Technical Account Manager Geschäftsbereich Technologie & Service Allgeier IT Solutions GmbH

Setting SharePoint folder permissions

Our school has just got SharePoint 2013, and I have been tasked with setting up a folder structure for the Teachers.
What they want is a Department Folder in the Root, and inside the Department Folder the Facility Folder, and inside that the Subject Folder, and lastly a private Teacher Folder for storing and preparing work.
EG:
Department/Science/Biology/MGreen
Department/Languages/French/RSmith
Department/Languages/Latin/TJones
I have setup the directory structure already, my question is how do make the Teacher Folder Private, so only they can view files inside?
Many thanks

Hi,
According to your description, my understanding is that you want to make the Teacher Folder with unique permissions so that only the specific teacher has permissions to it.
The following are the steps to set up unique permissions:
Navigate to the subfolder you want to configure with unique permissions.
On that subfolder, select Manage Permissions from the drop-list under that subfolder.
Under Permissions Tools, click: Stop Inheriting Permissions.
A dialog box that says, "You are about to create unique permissions for this folder. Changes made to the parent folder will no longer affect this folder." Click OK.
Then delete all SharePoint security groups. After that, assign permissions to the specific teacher.
Best Regards,
Wendy
Wendy Li
TechNet Community Support

Unable to view Public Folder Under Excel SpreadSheets in BO Explorer 3.1

Hi ,
I require to create Info Space using the data in an excel sheet. I am unable to configure the excel since the public folder is not present under the Excel Sheet option. Pls brief if this is got something to do with the version?
Thanks in advance!

Hi Priyank,
To find your audit reports:
https://service.sap.com/sap/support/notes/1389973
For more information on audit, have a look at this post which contains usefull information about audit
BOE XI R3 -- Auditing Parameters.
Regards,
Philippe

Unable to expand public folder in Outlook 2013 and Exchange 2013 CU6

Hello,
we have just migrated Exchange 2010 to 2013. Everything works great, except public folders, which we are not able to expand in Outlook 2013. Public folders can be added to OWA without any problem, so just the Outlook 2013 is a problem (we never tried any
other version, as all the e-mail clients installed here are Outlook 2013).
The public folders are visible under node Favorities in Outlook 2013, but whenever we click any folder, the Public folders disappear completely from the left navigation pane or the message is shown on the right pane, that the public folder cannot be opened.
When Outlook is started, a dialog is sometimes opened, which contains prefilled Microsoft exchange server, mailbox, button Check name, which is disabled. The only thing which can be done with that dialog is clicking the button Ok.
Any help is appreciated, the desperation level starts to be reaching max threshold.
Kind regards,
John.

Thank you for your quick response. I have tried removing and creating new Outlook profile many times, without any effect.
1) When I switch to the online mode, only the node All Public Folders is displayed in the left navigation pane and after I start the Outlook the dialog mentioned above is displayed. The node Favourities is not visible.
2) In offline node, node App Public folders is visible and whenever I click it, message "Cannot expand the folder" is shown. After checking Download favourities, the list of public folders is available, but whenever I click any folder, it shows
"We didn't find anything to show here." and "The folder is up to date." in the bottom status bar. The content is rendered correctly in OWA and these public folders contain many e-mails and subfolders. None of these is rendered in Outlook.
Thanks in advance for any tips and inspiration, we start to run out of ideas. I am more than sure that it will be something simple, but we can't still figure it out.

Unable to remove public folder

Hi i am doing transition of Exchange 2007 to Exchange 2013
During Testing i could not remove public folder database in Exchange 2007 so i had to remove it from schema.
CONFIGURATION -- CN=Microsoft Exchange,CN=Services,CN=MyOrganization,CN=AdministrativeGroup,
CN=MyServer,CN=InformationStore,CN=PublicFolderStorate,CN=PublicFolderDatabase
I have deleted the PublicFolderDatabase object. then it worked.
I just need to cross check, is this right object in schema to be deleted

Hi ,
Yes the above mentioned path is right.But the above mentioned path belongs to the configuration partition in AD not on schema partition.
Thanks & Regards S.Nithyanandham

Powershell Setting Share Folder Permissions

I have a script that create a shared folder and I am trying to set permissions. Here is what I have so far:
$serverName = "myfileserver"
$folderName = "d:\Personal"
$shareName = $newSAM+"$"
$fullName = "\\$serverName\"+$folderName.Replace(":", "$")+"\$newSAM"
# Creating the Directory
$finalResult = New-Item $fullName -type directory
$trustee = ([wmiclass]"Win32_trustee").psbase.CreateInstance()
$trustee.Domain = "domain.com"
$trustee.Name = $newSAM
$ace = ([wmiclass]"Win32_ACE").psbase.CreateInstance()
$ace.AccessMask = 2032127
$ace.AceFlags = 3
$ace.AceType = 0
$ace.Trustee = $trustee
$trustee2 = ([wmiclass]"Win32_trustee").psbase.CreateInstance()
$trustee2.Domain = "domain.com"
$trustee2.Name = "administrator"
$ace2 = ([wmiclass]"Win32_ACE").psbase.CreateInstance()
$ace2.AccessMask = 2032127
$ace2.AceFlags = 3
$ace2.AceType = 0
$ace2.Trustee = $trustee2
$trustee3 = ([wmiclass]"Win32_trustee").psbase.CreateInstance()
$trustee3.Domain = $serverName
$trustee3.Name = "administrator"
$ace3 = ([wmiclass]"Win32_ACE").psbase.CreateInstance()
$ace3.AccessMask = 2032127
$ace3.AceFlags = 3
$ace3.AceType = 0
$ace3.Trustee = $trustee3
$sd = ([wmiclass]"Win32_SecurityDescriptor").psbase.CreateInstance()
$sd.ControlFlags = 4
$sd.DACL = $ace, $ace2, $ace3
$sd.group = $trustee3
$sd.owner = $trustee3
# Creating the Folder Share
$finalResult = Invoke-WmiMethod -Class win32_share -name Create -ArgumentList @($sd,"",4294967295,$shareName,"","$folderName\$newSAM",0) -computername $serverName
The folder is created correctly but I am getting this error when setting permissions:
Exception setting "DACL": "Unable to cast object of type 'System.Management.Automation.PSObject' to type 'System.Manage
ment.ManagementBaseObject'."

I am testing it against a remote 2003 R2 SP2 server...
I have upgraded to Powershell v3 in my frustation (although I would rather have worked with the default like our helpdesk folks who will be running this - now we have to install this on all their machines)... Anyway...
I do not get any more errors when I run it, but it still does not add and share permissions... All it had is 'Everyone' as the sole group in the Permissions area...
Here again is the code I ran:
$serverName = "myServer"
$folderName = "d:\Users"
$shareName = $newSAM+"$"
$fullName = "\\$serverName\"+$folderName.Replace(":", "$")+"\$newSAM"
# Creating the Directory
$finalResult = New-Item $fullName -type directory
# AccessMasks:
# 2032127 = Full Control
# 1245631 = Change
# 1179817 = Read
$trustee = ([wmiclass]"Win32_trustee").psbase.CreateInstance()
$trustee.Domain = "domain"
$trustee.Name = "administrator"
$ace = ([wmiclass]"Win32_ACE").psbase.CreateInstance()
$ace.AccessMask = 2032127
$ace.AceFlags = 3
$ace.AceType = 0
$ace.Trustee = $trustee
$trustee2 = ([wmiclass]"Win32_trustee").psbase.CreateInstance()
$trustee2.Domain = "BUILTIN" #Or domain name
$trustee2.Name = "Administrators"
$ace2 = ([wmiclass]"Win32_ACE").psbase.CreateInstance()
$ace2.AccessMask = 2032127
$ace2.AceFlags = 3
$ace2.AceType = 0
$ace2.Trustee = $trustee2
$trustee3 = ([wmiclass]"Win32_trustee").psbase.CreateInstance()
$trustee3.Domain = "domain"
$trustee3.Name = $newSAM
$ace3 = ([wmiclass]"Win32_ACE").psbase.CreateInstance()
$ace3.AccessMask = 2032127
$ace3.AceFlags = 3
$ace3.AceType = 0
$ace3.Trustee = $trustee3
$sd = ([wmiclass]"Win32_SecurityDescriptor").psbase.CreateInstance()
$sd.ControlFlags = 4
$sd.DACL = [System.Management.ManagementBaseObject[]] ($ace, $ace3)
$sd.group = $trustee2
$sd.owner = $trustee2
# Creating the Folder Share
$finalResult = Invoke-WmiMethod -Class win32_share -name Create -ArgumentList @($sd, "", 4294967295, $shareName, "", "$folderName\$newSAM", 0) -computername $serverName -EnableAllPrivileges
I will change this manually so that I perform this on my laptop and report what results I get....

Public Folder Permissions

I have a csv with a list of names of public folders. Header of column is called PublicFolder. I’m basically wanting to loop through all the folder names using the command below in EMS:
Import-CSV "c:\publicfolder\users.csv" | ForEach-Object -Process {Get-PublicFolder -Recurse -Identity '\$_.PublicFolder' | Add-PublicFolderClientPermission -User '$_.UserName' -AccessRights Owner -Confirm:$false}
However, I keep getting this error:
No existing 'PublicFolder' matches the following Identity: '\$_.PublicFolder'. Make sure that you specified the correct 'PublicFolder' Identity and that you have the necessary permissions to view 'PublicFolder'.
The users.csv looks like this:
PublicFolder,UserName
PublicFolder1,User1
PublicFolder2,User2

Hi,
Please use the following scripts to check result.
$Folders = Import-CSV "c:\publicfolder\users.csv"
ForEach ($Folder in $Folders) {
$myfolder = '\' + $Folder.PublicFolder
Get-PublicFolder -Identity $myfolder | Add-PublicFolderClientPermission -User $Folder.UserName -AccessRights Owner -Confirm:$False
Actually, we have a dedicated forum about Script, you can post there to get better help.
http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?category=scripting
Best regards,
Belinda Ma
TechNet Community Support

Set NTFS folder permissions

When creating new file servers we always need to set up the NTFS rights manually and that takes forever...
Instead I would like to have a powershell command/script that configures the NTFS security settings on the folders.
I have two needs that hopefuly some of you allready have a solution on,
1, NTFS Settings on a homefolder share:
Users should be able to access the location of all user folders (ex:
\\server\users\). Then the user should only be able to create folder(s). Without access to any other users files or folders. The user should have have full r/w access to his/her created folder.
Below you can see my settings as it is when I created it with Windows Explorer, how can I accomplish this this with Powershell instead?
2, I need the commands to set following NTFS settings on a folder:
A List Group: I want to add a AD group that should only be able to access the folder (not any subfolder or files).
A Read Group: I want to add a AD group that should be able to read all files and subfolders in a folder.
A Write Group: I want to add a AD group that should be able to read and write on all files/subfolders in a folder.
See sceenshot below how it looks today from Windows Explorer:

Hi,
First of all, thanks all for your quick answers to me..
I decided to go with
Mike Laughlin's answer. But I think I still need some more help from you all :)
This is what my script do:
I have a string that takes the computername and then remove the numbers in the end of the name to get the sitename (ex computername VEGAS001 will be VEGAS , which is the sitename)
On D:\Fileshares I have my folderstructure, here I create all department folders under the "sitename" folder (ex D:\Fileshares\Vegas\) with the script. This works fine to create...
Then the last is to set the NTFS rights on all the folders with the module Mike recomended.
Here I try to set rights on different groups, but it doesnt work with my string $sitename (ex: Domain\$sitename_L_HR_W = Domain\VEGAS_L_HR_W)
It creates a setting in the NTFS security , but it's not the correct one (see below) , its just a none existing GUID number..
I tried to add different symbols such as + " ' between/in the AD Group name
Ex: Domain\$sitename+_L_HR_R /
Domain\$sitename+"_L_HR_R" ,
but without any success
Sometimes it didnt add the GUID above, sometimes just a long error message that I couldnt understand.
I guess for anyone with some more PowerShell skills then me will be able to fix this easy? :)
Here is my code....
#Import the PowerShell Module (PowerShellAccessControl)
Import-Module PowerShellAccessControl
# Configure sitename as an string
$sitename = $env:computername
$sitename = $sitename.Substring(0,$sitename.Length-3)
# Create folder structure
New-Item D:\Fileshares\$sitename$\DATA\Administration\IT -type directory
New-Item D:\Fileshares\$sitename$\DATA\Administration\Finance -type directory
# Configure NTFS settings on folder
Get-Item D:\Fileshares\$sitename$\DATA\Administration\IT | Add-AccessControlEntry -FolderRights Read -Principal Domain\$sitename_L_IT_R -AceType AccessAllowed -AppliesTo ChildObjects,ChildContainers,Object -Apply -Force
Get-Item D:\Fileshares\$sitename$\DATA\Administration\IT | Add-AccessControlEntry -FolderRights modify -Principal Domain\$sitename_L_IT_W -AceType AccessAllowed -AppliesTo ChildObjects,ChildContainers,Object -Apply -Force
Get-Item D:\Fileshares\$sitename$\DATA\Administration\HR | Add-AccessControlEntry -FolderRights Read -Principal Domain\$sitename_L_HR_R -AceType AccessAllowed -AppliesTo ChildObjects,ChildContainers,Object -Apply -Force
Get-Item D:\Fileshares\$sitename$\DATA\Administration\HR | Add-AccessControlEntry -FolderRights modify -Principal Domain\$sitename_L_HR_W -AceType AccessAllowed -AppliesTo ChildObjects,ChildContainers,Object -Apply -Force

Public Folders Permissions

Hi,
is there a way to set Public Folder permissions in ECP not for user but for group(distribution or security)? COnsole only shows me users, doesnt matter if its mail enabled or not. Thank you.
Pete
sfs

Hi,
If we create an universal security group in AD, and at the same time, another universal sercurity group is created via EAC. We will find that the group created in AD doesn't show in EAC, this group doesn't have an email address when we check it from AD.
After we use the Enable-DistributionGroup cmdlet to enable this group, this security group will display in EAC and we can also grant public folder permissions to this group.
Best regards,
Belinda
Belinda Ma
TechNet Community Support

Why don't permissions get set correctly when add to Public folder?

When I add files to my Public folder I expect the permissions to match my public folder. In particular, they should be readable by 'others'.
Often the permissions don't update. The result is that other users can't read files in my public folder. I have to manually apply the default Public Folder permissions to all enclosed files.
Is this only a problem on my machine? How would Public Folders work if they didn't update permissions when files are added to them?
BTW, I run as a regular non-admin user. I enter my admin un/pw only as needed. It's a good practice.
PS. I've repaired permissions, but that's a superstition anyway.

The "Public" folder in OS X is just a regular folder - it won't modify anything added to it. In the context of file sharing, the sharing of folders can be configured so that items copied from one computer to another will have their permissions modified, but this only applies to file sharing, and by default, only to a folder with "Drop Box" permissions (ie. "write only").
Regarding "read" access of files, in general (there are exceptions) files or folders created by a user are, by default, created with permissions such that everyone (user, group, other) gets at least "read" access - it shouldn't be necessary to change their permissions before making them available to others via the "Public" folder. If items don't have at least "read only" access, this suggests that the default permissions have been set to something more restrictive (possibly via a 'NSUmask' key added to the ".GlobalPreferences.plist" file). Or perhaps the files are coming from some other source. So this suggests that either the problem concerns a non-default configuration or a special case, but unfortunately there isn't enough information in the post to comment on what the problem might be.

Outlook Public Folder access and permissions

How do I add an account to a public Folder and grant management permissions to that account?

Hi,
To add permissions for client users to access Public Folder content, we can use Exchange Management Shell to add it as what ManU PhiliP posted.
Alternatively, we can use the Public Folder Management Console to add public folder permissions for a client user. For detailed steps about this, please refer to the following official article:
https://technet.microsoft.com/en-us/library/aa998834(v=exchg.141).aspx
Regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Winnie Liang
TechNet Community Support

Unable to set Public Folder Permissions

Similar Messages

Maybe you are looking for