How to Remove or Replace Public Folder Client Permissions

Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.

 

Applies to: Exchange Server 2007, Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3

This topic explains how to use the Exchange Management Shell to perform the following tasks:

  • Remove permissions for users of client programs (such as Microsoft Outlook) to access and modify the content within a public folder or public folder hierarchy.

  • Replace a user with a new user in the client permissions list for a public folder or public folder hierarchy.

  • Replace permissions for users of client programs to access and modify the content within a public folder or public folder hierarchy.

Note

You cannot use the Exchange Management Console to perform this procedure.

When removing these permissions, you can either use predefined permission roles (which consist of specific access rights) or manually remove the available access rights. To remove the permissions from the client user, you can use the Remove-PublicFolderClientPermission cmdlet or the RemoveUserFromPFRecursive.ps1 user management script.

To replace the users or permissions, use the following scripts:

  • ReplaceUserWithUserOnPFRecursive.ps1   This script replaces a user with a new user in the client permissions list for a public folder and any folders that exist within it. Existing permissions for the first user are retained. Public folders that do not contain permissions for the user are not modified.

  • ReplaceUserPermissionOnPFRecursive.ps1   This script replaces a user's permissions to a public folder and any folders that exist under it with a new set of permissions. Public folders that do not contain permissions for the user are not modified.

For more information about the public folder management scripts, see Scripts for Managing Public Folders in the Exchange Management Shell.

Before You Begin

To perform these procedures, the account you use must be delegated the following:

  • Exchange Server Administrator role and local Administrators group for the target server

For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.

Also, before you perform these procedures, be sure to read the topic Configuring Public Folder Permissions.

Procedure

To use the Exchange Management Shell to remove a client user's permissions to access a public folder

  • To remove user David's permissions to create items in the public folder named Oregon, run the following command:

    Remove-PublicFolderClientPermission -Identity "Sales\West Coast\Oregon" -User David -AccessRights CreateItems
    

For detailed syntax and parameter information, see Remove-PublicFolderClientPermission.

To use the Exchange Management Shell to remove a user's client permission for a public folder and all folders under it

  • To remove user David's permissions to access the public folder named Oregon and all folders under it, run the following command:

    RemoveUserFromPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder -"\Sales\Oregon" -User "David"
    

To use the Exchange Management Shell to replace a user with a new user in the client permissions list for a public folder and all public folders under it

  • To replace user David with user Kim to access items in the public folder Sales and all folders under it, run the following command:

    ReplaceUserWithUserOnPFRecursive.ps1 -TopPublicFolder "\Sales" -UserOld "David" -UserNew "Kim"
    

To use the Exchange Management Shell to replace the permissions of a user in the client permissions list for a public folder with a new set of permissions

  • To replace user Kim's current permissions to access the public folder named Marketing and all folders under it with Publishing Editor permissions, run the following command:

    ReplaceUserPermissionOnPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder "\Marketing" -User "Kim" -Permissions PublishingEditor
    

For More Information

To learn more about public folders, see Understanding Public Folders.

For more information about managing public folders, see Managing Public Folders.