Share via

Remove or Replace Public Folder Client Permissions

  • Article

 

Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

When removing public folder permissions, you can either use predefined permission roles (which consist of specific access rights) or manually remove the available access rights. To remove the permissions from the client user, you can use the Public Folder Management Console, the Remove-PublicFolderClientPermission cmdlet, or the RemoveUserFromPFRecursive.ps1 user management script.

To replace the users or permissions, use the following scripts:

  • ReplaceUserWithUserOnPFRecursive.ps1   This script replaces a user with a new user in the client permissions list for a public folder and any folders that exist within it. Existing permissions for the first user are retained. Public folders that don't contain permissions for the user aren't modified.

  • ReplaceUserPermissionOnPFRecursive.ps1   This script replaces a user's permissions to a public folder and any folders that exist under it with a new set of permissions. Public folders that don't contain permissions for the user aren't modified.

Looking for other management tasks related to public folders? Check out Managing Public Folders or Managing Public Folder Permissions.

Use the Public Folder Management Console to remove a client user's permissions to public folders

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.

  1. In the console tree, click Toolbox.

  2. In the result pane, double-click Public Folder Management Console.

  3. In the public folder tree of the Public Folder Management Console, expand Default Public Folders, and then click the parent public folder of the public folder you want to configure.

  4. In the result pane, click the public folder you want to configure.

  5. In the action pane, click Manage Settings.

  6. On the Introduction page, complete the following fields:

    • Update client permissions   Click this button to update the client access permissions for this public folder.

    • Apply client permission changes to this folder and all its subfolders   Select this check box if you want the changes that you make to the selected public folder to apply to all of the child public folders. This option is available only if the public folder you're modifying has one or more child public folders.

  7. On the Specify Action page, click Remove users to remove users from folders to which they have permissions, and then click Next.

  8. On the Select Users page, you can select users from whom you want to remove their permissions. Click Add to select the user you want to remove, and then click Next.

  9. On the Remove Users page, review your configuration settings. Click Remove to remove the user's permissions. Click Back to make configuration changes. Exchange will remove any existing permissions from the user.

  10. On the Completion page, review the following, and then click Finish to close the wizard:

    • A status of Completed indicates that the wizard completed the task successfully.

    • A status of Failed indicates that the task wasn't completed. If the task fails, review the summary for an explanation, and then click Back to make any configuration changes.

  11. Click Finish to close the wizard.

Use the Shell to remove a client user's permissions to public folder items

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.

Note

You can't use the EMC to remove a client user's permissions to public folder items.

This example removes the user David's permissions to create items in the public folder Oregon.

Remove-PublicFolderClientPermission -Identity "Sales\West Coast\Oregon" -User David -AccessRights CreateItems

For detailed syntax and parameter information, see Remove-PublicFolderClientPermission.

Use the RemoveUserFromPFRecursive.ps1 script to remove a client user's permissions to access public folders

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.

This example removes the user David's permissions to access the public folder Oregon and all folders under it.

RemoveUserFromPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder -"\Sales\Oregon" -User "David"

For more information about using the RemoveUserFromPFRecursive.ps1 script, see Scripts for Managing Public Folders in the Exchange Management Shell.

Use the ReplaceUserWithUserOnPFRecursive.ps1 script to replace a user with a new user in the client permissions list

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.

Using the script to replace public folder permissions saves you time because you only have to run the script once. If you were to use cmdlets to perform this task, you would have to perform multiple steps to accomplish the same task.

This example replaces the user David with the user Kim as a person who can access the items in the public folder Sales and all folders under it.

ReplaceUserWithUserOnPFRecursive.ps1 -TopPublicFolder "\Sales" -UserOld "David" -UserNew "Kim"

For more information about using the ReplaceUserWithUserOnPFRecursive.ps1 script, see Scripts for Managing Public Folders in the Exchange Management Shell.

Use the ReplaceUserPermissionOnPFRecursive.ps1 script to replace client permissions with a new set of permissions

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.

Using the script to replace public folder permissions saves you time because you only have to run the script once. If you were to use cmdlets to perform this task, you would have to perform multiple steps to accomplish the same task.

This example replaces the user Kim's current permission to access the public folder Marketing and all folders under it with the Publishing Editor permissions.

ReplaceUserPermissionOnPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder "\Marketing" -User "Kim" -Permissions PublishingEditor

For more information about using the ReplaceUserPermissionOnPFRecursive.ps1 script, see Scripts for Managing Public Folders in the Exchange Management Shell.

 © 2010 Microsoft Corporation. All rights reserved.