In the past, end users who should not have had the ability to delete certain Exchange Public Folders from within their Outlook client accidentally were able to do so. When these users were initially set up for access to the folders, they were given the permission of 'Owner.' Reason being, staff at the time were not set on how to grant the proper least priority permissions which would enable the users to make changes within in the folders without escalated permission that also allowed them to delete the folders.
To correct the problem, I first needed to know who had what permissions to each folder. What follows are several commands which can be used within the Microsoft Exchange Management Shell that allows you to obtain such information. You can either output the information on screen, or to a file where you can use such a tool such as Excel to examine and sort the data.
In the following examples, replace FOLDERNAME with the name of your Public Folder. The -recurse command in the statements will allow the statement to also pull data on the sub-folders of the Public Folder name you entered. Simply omit -recurse from the statement if you don't need the sub-folder information.
Examples...
OUTPUT TO A FILE
get-publicfolder -identity "\FOLDERNAME" -recurse | get-publicfolderclientpermission > FILENAME.csv
TO INCLUDE ALL PUBLIC FOLDERS AND SUB-FOLDERS FROM YOUR EXCHANGE SERVER and OUTPUT TO A FILE
get-publicfolder -recurse | get-publicfolderclientpermission > FILENAME.csv
VIEW ON SCREEN ON PAGE AT A TIME
get-publicfolder -identity "\FOLDERNAME" -recurse | get-publicfolderclientpermission | more
Comments
Post a Comment