Export (0) Print
Expand All

How to Remove or Replace Public Folder Client Permissions

 

Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007

Topic Last Modified: 2007-03-26

This topic explains how to use the Exchange Management Shell to perform the following tasks:

  • Remove permissions for users of client programs (such as Microsoft Outlook) to access and modify the content within a public folder or public folder hierarchy.

  • Replace a user with a new user in the client permissions list for a public folder or public folder hierarchy.

  • Replace permissions for users of client programs to access and modify the content within a public folder or public folder hierarchy.

noteNote:
You cannot use the Exchange Management Console to perform this procedure.

When removing these permissions, you can either use predefined permission roles (which consist of specific access rights) or manually remove the available access rights. To remove the permissions from the client user, you can use the Remove-PublicFolderClientPermission cmdlet or the RemoveUserFromPFRecursive.ps1 user management script.

To replace the users or permissions, use the following scripts:

  • ReplaceUserWithUserOnPFRecursive.ps1   This script replaces a user with a new user in the client permissions list for a public folder and any folders that exist within it. Existing permissions for the first user are retained. Public folders that do not contain permissions for the user are not modified.

  • ReplaceUserPermissionOnPFRecursive.ps1   This script replaces a user's permissions to a public folder and any folders that exist under it with a new set of permissions. Public folders that do not contain permissions for the user are not modified.

For more information about the public folder management scripts, see Scripts for Managing Public Folders in the Exchange Management Shell.

To perform these procedures, the account you use must be delegated the following:

  • Exchange Server Administrator role and local Administrators group for the target server

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.

Also, before you perform these procedures, be sure to read the topic Configuring Public Folder Permissions.

  • To remove user David's permissions to create items in the public folder named Oregon, run the following command:

    Remove-PublicFolderClientPermission -Identity "Sales\West Coast\Oregon" -User David -AccessRights CreateItems
    

For detailed syntax and parameter information, see Remove-PublicFolderClientPermission.

  • To remove user David's permissions to access the public folder named Oregon and all folders under it, run the following command:

    RemoveUserFromPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder -"\Sales\Oregon" -User "David"
    

  • To replace user David with user Kim to access items in the public folder Sales and all folders under it, run the following command:

    ReplaceUserWithUserOnPFRecursive.ps1 -TopPublicFolder "\Sales" -UserOld "David" -UserNew "Kim"
    

  • To replace user Kim's current permissions to access the public folder named Marketing and all folders under it with Publishing Editor permissions, run the following command:

    ReplaceUserPermissionOnPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder "\Marketing" -User "Kim" -Permissions PublishingEditor
    

To learn more about public folders, see Understanding Public Folders.

For more information about managing public folders, see Managing Public Folders.

 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft