Applies to: Exchange Server 2007 SP3, Exchange Server
2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-03-26
This topic explains how to use the Exchange Management Shell to perform the following tasks:
- Remove permissions for users of client programs (such as
Microsoft Outlook) to access and modify the content within a public
folder or public folder hierarchy.
- Replace a user with a new user in the client permissions list
for a public folder or public folder hierarchy.
- Replace permissions for users of client programs to access and
modify the content within a public folder or public folder
hierarchy.
 Note: |
|---|
| You cannot use the Exchange Management Console to perform this procedure. |
When removing these permissions, you can either use predefined permission roles (which consist of specific access rights) or manually remove the available access rights. To remove the permissions from the client user, you can use the Remove-PublicFolderClientPermission cmdlet or the RemoveUserFromPFRecursive.ps1 user management script.
To replace the users or permissions, use the following scripts:
-
ReplaceUserWithUserOnPFRecursive.ps1 This
script replaces a user with a new user in the client permissions
list for a public folder and any folders that exist within it.
Existing permissions for the first user are retained. Public
folders that do not contain permissions for the user are not
modified.
-
ReplaceUserPermissionOnPFRecursive.ps1 This
script replaces a user's permissions to a public folder and any
folders that exist under it with a new set of permissions. Public
folders that do not contain permissions for the user are not
modified.
For more information about the public folder management scripts, see Scripts for Managing Public Folders in the Exchange Management Shell.
Before You Begin
To perform these procedures, the account you use must be delegated the following:
- Exchange Server Administrator role and local
Administrators group for the target server
For more information about permissions, delegating roles, and the rights that are required to administer Microsoft Exchange Server 2007, see Permission Considerations.
Also, before you perform these procedures, be sure to read the topic Configuring Public Folder Permissions.
Procedure
To use the Exchange Management
Shell to remove a client user's permissions to access a public
folder
-
To remove user David's permissions to create items in the public folder named Oregon, run the following command:
Copy CodeRemove-PublicFolderClientPermission -Identity "Sales\West Coast\Oregon" -User David -AccessRights CreateItems
For detailed syntax and parameter information, see Remove-PublicFolderClientPermission.
To use the Exchange Management
Shell to remove a user's client permission for a public folder and
all folders under it
-
To remove user David's permissions to access the public folder named Oregon and all folders under it, run the following command:
Copy CodeRemoveUserFromPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder -"\Sales\Oregon" -User "David"
To use the Exchange Management
Shell to replace a user with a new user in the client permissions
list for a public folder and all public folders under it
-
To replace user David with user Kim to access items in the public folder Sales and all folders under it, run the following command:
Copy CodeReplaceUserWithUserOnPFRecursive.ps1 -TopPublicFolder "\Sales" -UserOld "David" -UserNew "Kim"
To use the
Exchange Management Shell to replace the permissions of a user in
the client permissions list for a public folder with a new set of
permissions
-
To replace user Kim's current permissions to access the public folder named Marketing and all folders under it with Publishing Editor permissions, run the following command:
Copy CodeReplaceUserPermissionOnPFRecursive.ps1 -Server "SERVER01" -TopPublicFolder "\Marketing" -User "Kim" -Permissions PublishingEditor
For More Information
To learn more about public folders, see Understanding Public Folders.
For more information about managing public folders, see Managing Public Folders.