Remove or Replace Public Folder Client Permissions

Applies to: Exchange Server 2010

When removing public folder permissions, you can either use predefined permission roles (which consist of specific access rights) or manually remove the available access rights. To remove the permissions from the client user, you can use the Remove-PublicFolderClientPermission cmdlet or the RemoveUserFromPFRecursive.ps1 user management script.

To replace the users or permissions, use the following scripts:

• ReplaceUserWithUserOnPFRecursive.ps1   This script replaces a user with a new user in the client permissions list for a public folder and any folders that exist within it. Existing permissions for the first user are retained. Public folders that don't contain permissions for the user aren't modified.
• ReplaceUserPermissionOnPFRecursive.ps1   This script replaces a user's permissions to a public folder and any folders that exist under it with a new set of permissions. Public folders that don't contain permissions for the user aren't modified.

Looking for other management tasks related to public folders? Check out Managing Public Folders or Managing Public Folder Permissions.

Use the Shell to remove a client user's permissions to public folder items

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.

This example removes the user David's permissions to create items in the public folder Oregon.

Remove-PublicFolderClientPermission -Identity "Sales\West Coast\Oregon" -User David -AccessRights CreateItems

For detailed syntax and parameter information, see Remove-PublicFolderClientPermission.

Use the RemoveUserFromPFRecursive.ps1 script to remove a client user's permissions to access public folders

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.

This example removes the user David's permissions to access the public folder Oregon and all folders under it.

RemoveUserFromPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder -"\Sales\Oregon" -User "David"

For more information about using the RemoveUserFromPFRecursive.ps1 script, see Scripts for Managing Public Folders in the Exchange Management Shell.

Use the ReplaceUserWithUserOnPFRecursive.ps1 script to replace a user with a new user in the client permissions list

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.

Using the script to replace public folder permissions saves you time because you only have to run the script once. If you were to use cmdlets to perform this task, you would have to perform multiple steps to accomplish the same task.

This example replaces the user David with the user Kim as a person who can access the items in the public folder Sales and all folders under it.

ReplaceUserWithUserOnPFRecursive.ps1 -TopPublicFolder "\Sales" -UserOld "David" -UserNew "Kim"

For more information about using the ReplaceUserWithUserOnPFRecursive.ps1 script, see Scripts for Managing Public Folders in the Exchange Management Shell.

Use the ReplaceUserPermissionOnPFRecursive.ps1 script to replace client permissions with a new set of permissions

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.

Using the script to replace public folder permissions saves you time because you only have to run the script once. If you were to use cmdlets to perform this task, you would have to perform multiple steps to accomplish the same task.

This example replaces the user Kim's current permission to access the public folder Marketing and all folders under it with the Publishing Editor permissions.

ReplaceUserPermissionOnPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder "\Marketing" -User "Kim" -Permissions PublishingEditor

For more information about using the ReplaceUserPermissionOnPFRecursive.ps1 script, see Scripts for Managing Public Folders in the Exchange Management Shell.