Users with Owner rights are unable to create or delete sub-folders in folders they have appropriate permissions

Migration from 2007 to 2013 cu1 and then updated to 2013cu2v2. The issue i am seeing is any user that has owner rights cannot delete or create subfolders under any public folder on which they are set as owner. I have attempted to remove and readd users
permissions but still doesnt allow them to create or delete. Further troubleshooting has revealed if i create a new top level folder and then assign the users DefaultPublicFolderMailbox to the primary public folder mailbox then they are able to create and
delete subfolders. Has anyone else run across this. Right now the only way i can get around this is to create folders and delete folders for users in the ECP.

I think I found the solution for this.
When migration is finished and PublicFolder is 'assigned' to the mailbox databases/users, it is assigned random.
In my case, I had 11 different Public Folder mailboxes witch the PBF is distributed over.
Users was assigned 'random' default public folder mailbox. As long as the default PBF mailbox ISNT the top-level mailbox (witch in my case was PBF1), these random issues occured.
When I assigned the top-level Public Folder Mailbox as the Default Public Folder Mailbox, the issue was resolved.
TLDR; Get-Mailbox | Set-Mailbox -defaultpublicfoldermailbox <top-level PBF mailbox>

Similar Messages

Users unable to create or delete folders in migrated public folders using Outlook

We have an Exchange 2013 CU3 environment migrated from Exchange 2007.
The public folder migration was completed over the weekend.
The environment has several public folder mailboxes.
Post migration users are unable to create/delete new sub folders, or modify permissions using Outlook on any of the migrated public folders. Users can however create new top level folders using outlook. They can also create and delete new posts
in migrated public folders.
Admins are able to create folders and set permissions on migrated folders using the EAC.
Test User accounts used for testing are set to use the Primary Hierarchy mailbox as their default public folder mailbox.
Test Users have been given Owner permissions from the root down on the folders we are testing with.
We have tested with Outlook 2010 and 2013 getting the same "Cannot create the folder" error.

Further testing
We moved a top level folder from a secondary PF mailbox to the primary PF mailbox using the New-PublicFolderMoveRequest command in powershell.
After the move completed we could create new folders under the moved top level folder.
The top level folder that was moved had it's own sub-folders that we did not move to the primary mailbox. (We didn't move the whole branch.. Just the top level folder)
We still cannot create or modify the existing sub-folders after moving the top level folder.
We then moved the newly created sub-folder to a secondary PF mailbox.
At that point we could no longer create sub-folders in the folder form outlook.
From what I can tell you can only create new sub-folders in folders homed to the primary PF mailbox when using outlook.
Is this a bug or as designed?
According to this Tech ed presentation Clients connecting to a secondary PF mailbox should have folder changes proxy to the primary PF mailbox.. (See slide 10)
http://channel9.msdn.com/Events/TechEd/NorthAmerica/2013/OUC-B329#fbid=
Update : 2-5-2014
Not much new to report other than it appears that users need to be homed to the primary PF mailbox to delete calendar meetings.
Opened a ticket with Premier support.
Update 2-11-2014
Premier support continues to look into the issue. No ideas as to the cause yet.
2-24-13
Still no resolution from support or even a clue what is causing this.

Same user with administrative rights on all the servers in single domain versus domainadmin as a part of administrator group in all the servers

same user with administrative rights on all the servers in single domain user as a part of administrator group in all the servers:
same user is configured as administrator on all the servers in one domain at windows 2003 server. Should this user be made part of domain admin and then this can be set up in the group of administrator for all the servers.
How this is technically different?
If same user is set up as an administrator on all the servers in domain, will it have the same access on all the files as a domain admin user?
dhomya

If the account is not admin on the domaincontrollers and the account is not member of domain admins or any other privileged AD group, the account has only user privileges on AD and thus cannot perform actions like creating and managing accounts,
groups, OUs,policies, sites, ...in other words cannot potentially ruin Active Directory.
I think that is a pretty big difference.
In fact, it is bad practice to perform you daily server management with an AD privileged account.
In regards of file access. The domain administrator will be just an admin, and thus has the privilies assigned to the local admin group, just as any other admin. But if it are different accounts they might be member of different groups assigning different
privileges. Always be carefull when assuming resulting privileges will be the same.
MCP/MCSA/MCTS/MCITP

Install for users with limited rights.

Is there a way to install Flash player so users with limited rights can perform updates? I don't want to touch hundreds of machines each time a minor upgrade is released. Security policies dictate that users cannot have local admin rights.

Hi, not that I have heard of. If you can't update, then most likely you are under Group Policy and the IT Department would be in charge of that.
If it is possible, then someone else would need to reply to you.
Thanks,
eidnolb

Additional User with admin rights

Hi all,
i checked the documentation but i could not found a possibility to create an additional user with admin rights to access the Vibe Management Console.
Does anybody know if this is possible and how to do this?
Thanks in advance
Alex

Hi Willem,
thank you for the great post. It did the job very well.
Alex
>>> <[email protected]> schrieb am 1.8.2013 um 07:46 AM:
> arlorenz;2275156 Wrote:
>> Hi all,
>>
>> i checked the documentation but i could not found a possibility to
>> create an additional user with admin rights to access the Vibe
>> Management Console.
>> Does anybody know if this is possible and how to do this?
>>
>> Thanks in advance
>>
>> Alex
>
> Hey Alex,
>
> Yes, that's possible. It's somewhat a twofold/threefold process, as
> you have to give an accounts right to administer the zone, and then also
> have to give that account rights to the personal workspace root (to be
> able create/delete user accounts) and any workspaces that need to be
> administered.
>
> I always create an vibe-admins group (local group) that gets the rights
> to the zone and workspace roots. Then add the needed users to that
> group.
>
> Access for the zone can be set within the administration console:
> https://www.novell.com/documentation...ata/bk4saug.ht
> ml
>
> Then add the needed rights on the workspace roots, Global, personal &
> team workspaces.
>
>
> !Do note that admin is the only user that is not allowed to get
> blocked. Other admin users can be filtered out via ACL's.
>
>
> Cheers,
> Willem

I have 2 children with iPods and I need to create 2 different accounts for them so they can play the same games. How do I do this?

I have 2 children with iPods and I need to create 2 different accounts for them so they can play the same games. How do I do this?

To restore the classic menu bar, you can do any of these:
orange Firefox button > Options > Menu Bar
tap the Alt key > View > Toolbars > Menu Bar
right-click a blank area of the tab bar or navigation bar > Menu Bar

Unable to create virtual folder. Too many folders

Hi,
We are getting this error while trying to create new folder in UCM (even trying directly from UCM throws same error)
oracle.stellent.ridc.protocol.ServiceException: Unable to create virtual folder. Too many folders
Has anyone experienced this? If yes, please let us know how you resolved it.
Thanks!

You don't "store" anything in contribution folders. They are just webdav access points. I recommend zero folders personally.
If you want to upload files using webdav, then I suggest using one staging folder, where files can enter the system. When the document is workflowed and/or verified, it is moved out of the folder. It's more likely however that you'll need a few access points for various types of content as each folder enforces specific metadata.
Now I imagine you are after a way to store all the HR bits and pieces of one person together as a unit. Some people use Content Folios. Personally, I'd just use a metadata field that contains the ContentID of the person's master record. Any new content for that person just gets the master ContentID stamped on it. Just search for that ContentID to get all their stuff.
Regarding best practices, there are lots of quality blogs floating around. Stellent/Oracle don't talk about best practice because each system is used by their clients in a unique way... well, that's what they say.

Hi ,How can I get a list of all laptops or users with folder direction enabled or offline files enabled, be it sccm or poerwshell . i have struggled for a week.

Hi ,how can I get a list of all laptops or users with folder direction enabled or offline files enabled, be it sccm
or poerwshell . i have struggled for a week
tchocr

Hi,
There is no such PowerShell command can achiev this. Maybe you can use a script to get the user name with folder redirection enabled. However, I am not familiar with writing script, and it would be better for you to ask in script forum below for professional
assistance:
http://social.technet.microsoft.com/Forums/en-US/home?forum=ITCG&filter=alltypes&sort=lastpostdesc
Best Regards,
Mandy
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How can I get a list of all laptops or users with folder direction enabled or offline files enabled, be it sccm or poerwshell . i have struggled for a week.

How can I get a list of all laptops or users with folder direction enabled or offline files enabled, be it sccm or poerwshell . i have struggled for a week.

Hi,
There is no such PowerShell command can achiev this. Maybe you can use a script to get the user name with folder redirection enabled. However, I am not familiar with writing script, and it would be better for you to ask in script forum below for professional
assistance:
http://social.technet.microsoft.com/Forums/en-US/home?forum=ITCG&filter=alltypes&sort=lastpostdesc
Best Regards,
Mandy
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

HT204150 My iphone contacts got synced with my daughter's ipod contacts and she deleted my contacts and now they are gone from my iphone. How do I recover my contacts?

My iphone contacts got synced with my daughter's ipod contacts and she deleted my contacts and now they are gone from my iphone. How do I recover my contacts?

First, your daughter needs her own iCloud account, otherwise her ipod will sync will all your data (email, calendars, contacts...). If you have a backup or a copy on your computer, you could turn off iCloud syncing on your iphone, then restore from your contacts via iTunes. After you get a new account for daughter, you can then turn on iCloud.

At work we have many who travel with train alot, where the internet is very unstable at best. And they have trouble getting their e-mails. So the question is if there is a way to increase the mail cache in iOS 7, to lower the dependence of internet.

At work we have many who travel with train alot, where the internet is very unstable at best. And they have trouble getting their e-mails.
So the question is if there is a way to increase the mail cache in iOS 7, to lower the dependency of a very poor internet connection.

I don't think so. Unless it's in the settings, there's not much that can be done.
are they using wifi on the train? If so, maybe switching to cellular. There are devices like the Mifi, which is a battery operated portable wifi hotspot that they can connect their device to.
If the wifi on the train is solid, I know I've had issues using certain hotspots. For example, my yahoo mail simply will not pull down via the mail app if I'm on some AT&T hot spots. But if I go in via safari then it works. So if the signal is good, maybe using a different way can help.
Or maybe looking for a mail interface that isn't apple's. There are others in the app store that may have better function or more control.

Hi, I have got three ipad minis which I would like to use in a business environment whereby the users can see and update a single calender. Is this possible? Would they have to be run form one account?

Hi, I have got three ipad minis which I would like to use in a business environment whereby the users can see and update a single calender. Is this possible? Would they have to be run form one account?

Drrhythm2 wrote:
What's the best solution for this? I
Copy the entire /Music/iTunes/ folder from her old compouter to /Music/ in her account on this new computer.

SP2010: Users with Contribute rights can Add but not edit items in Calendar View

Hello,
One of our users was recently trying to update a Calendar item in the Calendar view, but was unable to do so. Here are the facts of the case:
- The members of the user's group have Contribute rights on the Calendar list, and on each of the specific Calendar items tested
- I logged in as a member of the same group and am able to Add items in the calendar view, but when I click on an item title the Ribbon options (including Edit) are not available - whether I created the item or not
- While logged in as a member of that group, I can edit calendar items using the Allitems view, using the dropdown menu and Edit Item (if I click on the item title, I get the item details without the Ribbon)
- I created a new Calendar view ("Calendar2") but the problem was the same
When logged in with admin rights, I get the Edit ribbon when I click on an item title from the Calendar view. Is there a way to do the same for non-admin users? Thanks.

Hi,
According to your post, my understanding is that you were able to add items into a Calendar List, but you couldn’t edit some items of the Calendar List in Calendar View as a member of your group with Contribute rights. And if you edit the Calendar List’s
items in the “All Events” view or log in with admin rights, you can edit these items.
Therefore, I wonder if you use the “Calendar Overlays” to display some items of other Calendar Lists in the current Calendar List as John suggested.
And if you don’t have permissions to edit items of other Calendar Lists, you can’t edit those items of other Calendar Lists in the current Calendar List in Calendar View.
So, I recommend that you should check if using the “Calendar Overlays” to display some items of other Calendar Lists in the current Calendar List at first.
If yes, you need to check if you have permissions to edit items of other Calendar Lists.
For test, I suggest that you can create a new Calendar List and test to see how it works.
Best Regards,
Thanks
Victoria Xia
TechNet Community Support

Access Denied for User with Contribute Rights to a SP list

I have two users that I have given Contribute Rights on a SharePoint 2010 site - the SP list in question is inheriting permissions from the Parent site, as well as other lists in the site. These two users can edit items in the all other lists on the
site except for this one in question.
It is only one list that they cannot view or edit list items. They can view the items in the list, but when they try to open an item in display or edit form, it gives the access denied.
Other users on the site are NOT having these issues - with the same permissions.
I researched this problem and have tried various solutions with no luck. I have checked to see that there are NO item level permissions set up; I have deleted the user from the site collection, then added them back, with no luck.
I am at a loss on what to do.
Please help

Timestamp              Process
TID   Area                          Category
EventID Level     Message Correlation
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg4 Verbose Groups for process identity 'DOMAIN\spadmin': 'DOMAIN\Domain Users', 'Everyone', 'SHAREPOINT\WSS_ADMIN_WPG', 'SHAREPOINT\WSS_RESTRICTED_WPG_V4', 'SHAREPOINT\WSS_WPG', 'BUILTIN\IIS_IUSRS', 'BUILTIN\Performance Monitor Users', 'BUILTIN\Users',
'BUILTIN\Administrators', 'NT AUTHORITY\SERVICE', 'CONSOLE LOGON', 'NT AUTHORITY\Authenticated Users', 'NT AUTHORITY\This Organization', 'NT SERVICE\SPTimerV4', 'LOCAL', 'DOMAIN\Group Policy Creator Owners', 'DOMAIN\Department_Schedules_ReadWrite', 'DOMAIN\Sage50_ReadWrite',
'DOMAIN\GrainCleaners_ReadWrite', 'DOMAIN\Domain Admins', 'DOMAIN\IT Department', 'DOMAIN\RDP_Users', 'DOMAIN\Engineering_ReadWrite', 'DOMAIN\Inventory_ReadWrite', 'DOMAIN\Schema Admins', 'DOMAIN\FabTrol', 'DOMAIN\Enterprise Admins', 'DOMAIN\Software', 'DOMAIN\Denied
RODC Password Replication Group', 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg1 High    Group WSS_WPG... 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\spadmin 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: NT AUTHORITY\LOCAL SERVICE 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\spservice 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\SearchSvc 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\spContent 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\WebAnalProcessSvc 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: DOMAIN\svcAppPoolSecure 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_WPG: NT AUTHORITY\SYSTEM 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg1 High    Group WSS_ADMIN_WPG... 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_ADMIN_WPG: BUILTIN\Administrators 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_ADMIN_WPG: DOMAIN\spadmin 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:41:06.17 OWSTIMER.EXE (0x01E4)                   0x0AD0 SharePoint Server Search      Administration
dmg2 High    Group WSS_ADMIN_WPG: DOMAIN\rawtecadmin 17e8c7b4-fa35-4040-ac83-fe55f721590d
03/11/2014 10:50:15.56 w3wp.exe (0x0098)                       0x19B8 SharePoint Foundation
Monitoring                    b4ly Medium Leaving Monitored Scope (Request (GET:https://portal.emw.ca:443/ehs/Lists/InvestigationReports/DispForm.aspx?ID=40&Source=https%3A%2F%2Fportal%2Eemw%2Eca%2Fehs%2FLists%2FInvestigationReports%2FMyInvestigations%2Easpx&ContentTypeId=0x0100E352DB580E29424FB1C52A1D93E09345&IsDlg=1)).
Execution Time=115.2334 0c90a46f-e4ea-46b5-a566-e7a9f404c0aa
03/11/2014 10:50:15.66 w3wp.exe (0x0098)                       0x16CC SharePoint Foundation
Monitoring                    nasq Medium Entering monitored scope (Request (GET:https://portal.emw.ca:443/ehs/_layouts/AccessDenied.aspx?Source=https%3A%2F%2Fportal%2Eemw%2Eca%2Fehs%2FLists%2FInvestigationReports%2FDispForm%2Easpx%3FID%3D40%26Source%3Dhttps%253A%252F%252Fportal%252Eemw%252Eca%252Fehs%252FLists%252FInvestigationReports%252FMyInvestigations%252Easpx%26ContentTypeId%3D0x0100E352DB580E29424FB1C52A1D93E09345%26IsDlg%3D1&Type=list&name=%7BD3F44F01%2DC738%2D409A%2DA491%2DDD0F905CC83B%7D&IsDlg=1))
03/11/2014 10:50:15.66 w3wp.exe (0x0098)                       0x16CC SharePoint Foundation
Logging Correlation Data      xmnv Medium Name=Request (GET:https://portal.emw.ca:443/ehs/_layouts/AccessDenied.aspx?Source=https%3A%2F%2Fportal%2Eemw%2Eca%2Fehs%2FLists%2FInvestigationReports%2FDispForm%2Easpx%3FID%3D40%26Source%3Dhttps%253A%252F%252Fportal%252Eemw%252Eca%252Fehs%252FLists%252FInvestigationReports%252FMyInvestigations%252Easpx%26ContentTypeId%3D0x0100E352DB580E29424FB1C52A1D93E09345%26IsDlg%3D1&Type=list&name=%7BD3F44F01%2DC738%2D409A%2DA491%2DDD0F905CC83B%7D&IsDlg=1) 9446cae0-8ef5-4ffa-aad8-798d3139a2e7

Users with Administrator rights not being allowed to install programs.

I have 3 users in my office that are not able to download and install programs due to a security prompt that says that they are unable to install the program due to not having administrator rights. But in the users menu the user accounts are setup with
full administrator rights. Is this a common problem?

Hi,
Are they domain administrator or local administrator? Is there any group policy restriction?
Please refer to this similar thread:
http://answers.microsoft.com/en-us/windows/forum/windows_7-desktop/unable-to-install-program-and-getting-error-do-not/cd28bdae-ae0c-4dcc-96cb-00fb2490dd24
Karen Hu
TechNet Community Support

Users with Owner rights are unable to create or delete sub-folders in folders they have appropriate permissions

Similar Messages

Maybe you are looking for