Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-08-27

This topic explains how to remove administrative permissions from users to access a public folder or public folder hierarchy. If you have Microsoft Exchange Server 2007 Service Pack 1 (SP1) installed, you can use the Exchange Management Console or the Exchange Management Shell to perform this procedure. If you have the release to manufacturing (RTM) version of Exchange 2007 installed, you must use the Exchange Management Shell.

Note:
You cannot use the Remove-PublicFolderAdministrativePermission cmdlet to remove a public folder administrator's access rights. You must use the Remove-ExchangeAdministrator cmdlet or the Organization Configuration node in the Exchange Management Console.

Before You Begin

Before you perform the following procedure, you must perform the actions in one of the following sections based on whether you are working with the RTM version of Microsoft Exchange 2007 or Exchange 2007 SP1.

For more information about permissions, delegating roles, and the rights that are required to administer Exchange 2007, see Permission Considerations.

Also, before you perform this procedure, be sure to read Configuring Public Folder Permissions.

Permissions and Prerequisites for Exchange 2007 SP1

To perform the following procedure in Exchange 2007 SP1, the account you use must be delegated the following:

  • To remove a user from the Public Folder Administrator role by using the Exchange Management Console or the Add-ExchangeAdministrator cmdlet in the Exchange Management Shell, the account you use must be delegated the following permissions:

    • Exchange Organization Administrator role and local Administrators group for the target server

  • To remove administrative permissions from a user by using the Remove-PublicFolderAdministrativePermission cmdlet, the account you use must be delegated the following permissions:

    • Exchange Public Folder Administrator role and local Administrators group for the target server

Permissions and Prerequisites for Exchange 2007 RTM

To perform the following procedure in Exchange 2007 RTM, the account you use must be delegated the following:

  • Exchange Server Administrator role and local Administrators group for the target server

Procedure

Exchange 2007 SP1

To use the Exchange Management Console to remove the Public Folder Administrator role from a user

  1. Start the Exchange Management Console.

  2. In the console tree, click Organization Configuration.

  3. In the result pane, under the Identity column, select the user from which you want to remove the Exchange Public Folder Administrator role.

  4. In the action pane, click Remove.

  5. A warning appears asking if you are sure you want to perform this action. Click Yes to confirm.

To use the Exchange Management Shell to remove the Public Folder Administrator role from a user

  • To remove Public Folder Administrator role from the user Paula, run the following command.

    Copy Code
    Remove-ExchangeAdministrator -Identity Paula -Role PublicFolderAdmin
    

    A warning appears asking if you are sure you want to perform this action. Type Y to confirm.

To use the Exchange Management Shell to remove administrative permissions for a user to access a public folder or public folder hierarchy

  • To remove all administrative rights to the entire public folder tree from the user Kim, run the following command.

    Copy Code
    Remove-PublicFolderAdministrativePermission -Identity "\" -User "Kim" -AccessRights AllExtendedRights -InheritanceType All
    

    A warning appears asking if you are sure you want to perform this action. Type Y to confirm.

For detailed syntax and parameter information, see the Remove-ExchangeAdministrator and Remove-PublicFolderAdministrativePermission reference topics.

Exchange Server RTM

To use the Exchange Management Shell to remove administrative permissions for a user to access a public folder or public folder hierarchy

  • To remove all administrative rights to the entire public folder tree from the user Kim, run the following command:

    Copy Code
    Remove-PublicFolderAdministrativePermission -Identity "\" -User "Kim" -AccessRights AllExtendedRights -InheritanceType All
    

    A warning appears asking if you are sure you want to perform this action. Type Y to confirm.

For detailed syntax and parameter information, see the Remove-PublicFolderAdministrativePermission (RTM) reference topic.

For More Information

To learn more about public folders, see Understanding Public Folders.

For more information about managing public folders, see Managing Public Folders.

For more information about using the Exchange Management Shell, see Using the Exchange Management Shell.