Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2
Topic Last Modified: 2012-07-23
When removing public folder permissions, you can either use predefined permission roles (which consist of specific access rights) or manually remove the available access rights. To remove the permissions from the client user, you can use the Public Folder Management Console, the Remove-PublicFolderClientPermission cmdlet, or the RemoveUserFromPFRecursive.ps1 user management script.
To replace the users or permissions, use the following scripts:
-
ReplaceUserWithUserOnPFRecursive.ps1 This
script replaces a user with a new user in the client permissions
list for a public folder and any folders that exist within it.
Existing permissions for the first user are retained. Public
folders that don't contain permissions for the user aren't
modified.
-
ReplaceUserPermissionOnPFRecursive.ps1 This
script replaces a user's permissions to a public folder and any
folders that exist under it with a new set of permissions. Public
folders that don't contain permissions for the user aren't
modified.
Looking for other management tasks related to public folders? Check out Managing Public Folders or Managing Public Folder Permissions.
Use the Public Folder Management Console to remove a client user's permissions to public folders
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.
- In the console tree, click Toolbox.
- In the result pane, double-click Public Folder Management
Console.
- In the public folder tree of the Public Folder Management
Console, expand Default Public Folders, and then click the
parent public folder of the public folder you want to
configure.
- In the result pane, click the public folder you want to
configure.
- In the action pane, click Manage Settings.
- On the Introduction page, complete the following
fields:
- Update client permissions Click this
button to update the client access permissions for this public
folder.
- Apply client permission changes to this folder and all its
subfolders Select this check box if you want
the changes that you make to the selected public folder to apply to
all of the child public folders. This option is available only if
the public folder you're modifying has one or more child public
folders.
- Update client permissions Click this
button to update the client access permissions for this public
folder.
- On the Specify Action page, click Remove users to
remove users from folders to which they have permissions, and then
click Next.
- On the
Select Users page, you can select users from whom you want
to remove their permissions. Click Add to select the user
you want to remove, and then click Next.
- On the Remove Users page, review your configuration
settings. Click Remove to remove the user's permissions.
Click Back to make configuration changes. Exchange will
remove any existing permissions from the user.
- On the Completion page, review the following, and then
click Finish to close the wizard:
- A status of Completed indicates that the wizard
completed the task successfully.
- A status of Failed indicates that the task wasn't
completed. If the task fails, review the summary for an
explanation, and then click Back to make any configuration
changes.
- A status of Completed indicates that the wizard
completed the task successfully.
- Click Finish to close the wizard.
Use the Shell to remove a client user's permissions to public folder items
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.
Note: |
---|
You can't use the EMC to remove a client user's permissions to public folder items. |
This example removes the user David's permissions to create items in the public folder Oregon.
Copy Code | |
---|---|
Remove-PublicFolderClientPermission -Identity "Sales\West Coast\Oregon" -User David -AccessRights CreateItems |
For detailed syntax and parameter information, see Remove-PublicFolderClientPermission.
Use the RemoveUserFromPFRecursive.ps1 script to remove a client user's permissions to access public folders
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.
This example removes the user David's permissions to access the public folder Oregon and all folders under it.
Copy Code | |
---|---|
RemoveUserFromPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder -"\Sales\Oregon" -User "David" |
For more information about using the RemoveUserFromPFRecursive.ps1 script, see Scripts for Managing Public Folders in the Exchange Management Shell.
Use the ReplaceUserWithUserOnPFRecursive.ps1 script to replace a user with a new user in the client permissions list
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.
Using the script to replace public folder permissions saves you time because you only have to run the script once. If you were to use cmdlets to perform this task, you would have to perform multiple steps to accomplish the same task.
This example replaces the user David with the user Kim as a person who can access the items in the public folder Sales and all folders under it.
Copy Code | |
---|---|
ReplaceUserWithUserOnPFRecursive.ps1 -TopPublicFolder "\Sales" -UserOld "David" -UserNew "Kim" |
For more information about using the ReplaceUserWithUserOnPFRecursive.ps1 script, see Scripts for Managing Public Folders in the Exchange Management Shell.
Use the ReplaceUserPermissionOnPFRecursive.ps1 script to replace client permissions with a new set of permissions
You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder client permissions" entry in the Mailbox Permissions topic.
Using the script to replace public folder permissions saves you time because you only have to run the script once. If you were to use cmdlets to perform this task, you would have to perform multiple steps to accomplish the same task.
This example replaces the user Kim's current permission to access the public folder Marketing and all folders under it with the Publishing Editor permissions.
Copy Code | |
---|---|
ReplaceUserPermissionOnPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder "\Marketing" -User "Kim" -Permissions PublishingEditor |
For more information about using the ReplaceUserPermissionOnPFRecursive.ps1 script, see Scripts for Managing Public Folders in the Exchange Management Shell.