Remove Public Folder Administrative Permissions

Applies to: Exchange Server 2010 SP3, Exchange Server 2010 SP2

Topic Last Modified: 2012-07-23

This topic shows you how to use the Exchange Management Shell to remove public folder administrative permissions from a user.

Note:
You can't use the Remove-PublicFolderAdministrativePermission cmdlet to remove the rights of a member of the Public Folder Management role group. You must use the Remove-RoleGroupMember cmdlet.

There are two methods by which a user is granted the permissions to administer public folders:

Public Folder Management role group

Adding the user to the Public Folder Management role group is similar to assigning the Public Folder Administrator role in Exchange 2007. It grants the user all the permissions necessary for managing public folders.
PublicFolderAdminstrativePermission cmdlet set

Using these cmdlets is more granular and gives you the ability to specify the scope for the user in the organization by modifying the database's access control lists (ACLs).

Looking for other management tasks related to public folder permissions? Check out Managing Public Folder Permissions.

Use the Shell to remove a user from the Public Folder Management role group

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Role groups" entry in the Role Management Permissions topic.

Note:
You can't use the EMC to remove a user from the Public Folder Management role group.

This example removes the user Chris from the Public Folder Management role group.

	Copy Code
Remove-RoleGroupMember -Identity "Public Folder Management" -Member Chris

For detailed syntax and parameter information, see Remove-RoleGroupMember.

Use the Shell to remove administrative permissions for a user to access a specific public folder or public folder hierarchy

You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "Public folder administrative permissions" entry in the Mailbox Permissions topic.

Note:
You can't use the EMC to remove administrative permissions for a user to access a specific public folder or public folder hierarchy.

This example removes all administrative permissions to the entire public folder tree from the user Kim.

	Copy Code
Remove-PublicFolderAdministrativePermission -Identity "\" -User "Kim" -AccessRights AllExtendedRights -InheritanceType All

A warning appears asking if you're sure you want to perform this action. Type Y to confirm.

For detailed syntax and parameter information, see Remove-PublicFolderAdministrativePermission.