Friday, 21 November 2008

Managing Exchange mailbox folder permissions

If you're familiar with Outlook mailbox permissions, you'll know that permissions on mailboxes (and sub-items) can be set in a variety of ways. I'll list some of the possible methods a User or Administrator can set mailbox permissions:
A User can set permissions:
  • Using the delegates tab in Outlook
  • With a folder selected, using file -> folder -> sharing
  • Using the "Share my calendar" or "Share my contacts" links in the left column
  • Right-clicking a folder and selecting "properties" or "sharing"
Also, An Administrator can set permissions on the Mailbox using the Active Directory Users and Computers snap-in. But, using the default tools an Administrator cannot view and set permissions on mailbox sub folders.
This is where PFDAVAdmin comes into play. Originally designed to administer public folder permissions (hence the name), PFDAVAdmin is also a powerful tool for viewing, configuring, and exporting mailbox folder permissions. PFDAVAdmin can view and set permissions on all mailbox folders including the inbox, calendar and contacts.
PFDAVAdmin can be used to configure all users to share a read-only version of the calendar with everyone in the organisation. Also, you can use PFDAVAdmin to export/import permissions - With this facility you can simply set your permissions as required, export and then import as required to return your permissions to the correct level.

1 comment:

  1. As a good alternative to PFDAVAdmin there is a much more powerful and complex solution that is called security explorer for exchange.

    This tool is a great answer for managing exchange security permissions on a very granular level.

    It's suatable not only for view and management permissions on personal folders like calendars, contacts and inbox but also for permissions cloning, backup and reporting.

    ReplyDelete