Click Add and add the respective users to the client permission list, then click OK.. Now select the users you just added, then grant the type of permission you want the user to have by
Trang 1granted permissions on the Public Folder.
6 Click Add and add the respective user(s) to the client permission list, then click OK.
7 Now select the user(s) you just added, then grant the type of permission you want the
user to have by using the Roles drop-down box or by ticking the different permissions
individually (see Figure 4.20)
Figure 4.20 Public Folder Client Permissions
8 Click OK twice and close the Exchange 2003 System Manager
Trang 2SOME INDEPENDENT ADVICE
If you have a large Public Folder hierarchy and on a relatively frequent basis you need
to grant user permissions to the Public Folders in the hierarchy, we recommend you
use the Manage Public Folder Settings Wizard, which was introduced in Exchange
Server 2003 SP2 This wizard (see Figure 4.21) makes it a breeze to grant user
permissions to the folders in your Public Folder hierarchy, but it can also be used
to modify replica lists and more
Figure 4.21 The Manage Public Folder Settings Wizard
Trang 3then selecting Manage Settings in the context menu You can read more about this wizard in one
of our articles for MSExchange.org at www.msexchange.org/tutorials/Public-Folder-Improvements-Exchange-2003-Service-Pack-2.html
Adding client permissions using an Outlook MAPI client is done using the following steps:
1 Open the Outlook MAPI client (in this case Outlook 2007)
2 If it’s not already selected, click the yellow Folder List icon in the lower-left corner.
3 Expand Public Folders | All Public Folders.
4 Right-click the respective Public Folder and select Change Sharing Permissions in
the context menu
NOTE
If you don’t have the option of choosing Change Sharing Permissions in the context
menu, your user account most likely doesn’t have administrative permissions for that particular Public Folder
5 Under the Permissions tab, click Add and add the respective user(s), then click OK
(see Figure 4.22)
6 Now grant the user(s) the required permissions, either by using the Permission Level
drop-down box or by ticking the permissions individually
7 Finally, click OK
To add or remove Public Folder Administrative permissions, you can use the
Add-PublicFolderAdministrativePermission and Remove-Add-PublicFolderAdministrativePermission CMDlets.
To give a user account named HEW belonging to a domain named Exchangedogfood.dk
permissions to modify the ACL for a Public Folder called Finance on a server called EDFS03,
we would need to use the following command:
Add-PublicFolderAdministrativePermission -Identity \“Finance”
-User HEW -AccessRights ModifyPublicFolderACL -Server “EDSF03”
To remove this permission, again you would need to type:
Remove-PublicFolderAdministrativePermission -Identity \“Finance”
Trang 4Figure 4.22 The Permissions Tab on the Properties Page of a Public Folder
in Outlook 2007
Table 4.3 lists the parameters that are relevant to the PublicFolderAdministrativePermission and
Remove-PublicFolderAdministrativePermission CMDlets.
Trang 5Parameter Description
AccessRights This parameter is used to specify the rights to be added
Available values are:
None ModifyPublicFolderACL ModifyPublicFolderAdminACL ModifyPublicFolderDeletedItemRetention ModifyPublicFolderExpiry
ModifyPublicFolderQuotas ModifyPublicFolderReplicaList AdministerInformationStore ViewInformationStore AllStoreRights
AllExtendedRights DomainController This parameter is used to specify the domain controller to use
to write this confi guration change to Active Directory You need
to use the FQDN of the DC to be used Note: This parameter is
optional
Identity This parameter is used to specify a unique identifi er
(name) for the Public Folder
Instance This parameter is used to enable passing an entire object
to the command to be processed; primarily used in scripts where an entire object must be passed to the command
Owner This parameter specifi es the NT Owner access control list
(ACL) on the object Available values are the user principal name (UPN), domain/user, or alias
User This parameter is used to specify the UPN, domain/user, or alias
of the user that should be granted rights to the Public Folder
Deny This parameter is used to deny permission to the respective
InheritanceType This parameter is used to specify the type of inheritance
Available values are:
None All Descendents SelfAndChildren
Children
Server This parameter is used to specify the server on which the
selected operations should be performed