182 Chapter 4 • Managing the Exchange 2007 Mailbox Server Role 5. Click the Client Permissions button. Here you can see each user that already has been granted permissions on the Public Folder. 6. Click Add and add the respective user(s) to the client permission list, then click OK. 7. Now select the user(s) you just added, then grant the type of permission you want the user to have by using the Roles drop-down box or by ticking the different permissions individually (see Figure 4.20). Figure 4.20 Public Folder Client Permissions 8. Click OK twice and close the Exchange 2003 System Manager. Managing the Exchange 2007 Mailbox Server Role • Chapter 4 183 SOME INDEPENDENT ADVICE If you have a large Public Folder hierarchy and on a relatively frequent basis you need to grant user permissions to the Public Folders in the hierarchy, we recommend you use the Manage Public Folder Settings Wizard, which was introduced in Exchange Server 2003 SP2. This wizard (see Figure 4.21) makes it a breeze to grant user permissions to the folders in your Public Folder hierarchy, but it can also be used to modify replica lists and more. Figure 4.21 The Manage Public Folder Settings Wizard 184 Chapter 4 • Managing the Exchange 2007 Mailbox Server Role You launch the Manage Public Folder Settings Wizard by right-clicking a top Public Folder, then selecting Manage Settings in the context menu. You can read more about this wizard in one of our articles for MSExchange.org at www.msexchange.org/tutorials/Public-Folder-Improvements- Exchange-2003-Service-Pack-2.html. Adding client permissions using an Outlook MAPI client is done using the following steps: 1. Open the Outlook MAPI client (in this case Outlook 2007). 2. If it’s not already selected, click the yellow Folder List icon in the lower-left corner. 3. Expand Public Folders | All Public Folders. 4. Right-click the respective Public Folder and select Change Sharing Permissions in the context menu. NOTE If you don’t have the option of choosing Change Sharing Permissions in the context menu, your user account most likely doesn’t have administrative permissions for that particular Public Folder. 5. Under the Permissions tab, click Add and add the respective user(s), then click OK (see Figure 4.22). 6. Now grant the user(s) the required permissions, either by using the Permission Level drop-down box or by ticking the permissions individually. 7. Finally, click OK. To add or remove Public Folder Administrative permissions, you can use the Add- PublicFolderAdministrativePermission and Remove-PublicFolderAdministrativePermission CMDlets. To give a user account named HEW belonging to a domain named Exchangedogfood.dk permissions to modify the ACL for a Public Folder called Finance on a server called EDFS03, we would need to use the following command: Add-PublicFolderAdministrativePermission -Identity \“Finance” -User HEW -AccessRights ModifyPublicFolderACL -Server “EDSF03” To remove this permission, again you would need to type: Remove-PublicFolderAdministrativePermission -Identity \“Finance” -User HEW -ModifyPublicFolderACL ModifyPublicFolderACL -Server “EDSF03” Managing the Exchange 2007 Mailbox Server Role • Chapter 4 185 Figure 4.22 The Permissions Tab on the Properties Page of a Public Folder in Outlook 2007 Table 4.3 lists the parameters that are relevant to the PublicFolderAdministrativePermission and Remove-PublicFolderAdministrativePermission CMDlets. 186 Chapter 4 • Managing the Exchange 2007 Mailbox Server Role Table 4.3 Public Folder Administrative Permission Parameters Parameter Description AccessRights This parameter is used to specify the rights to be added. Available values are: None ModifyPublicFolderACL ModifyPublicFolderAdminACL ModifyPublicFolderDeletedItemRetention ModifyPublicFolderExpiry ModifyPublicFolderQuotas ModifyPublicFolderReplicaList AdministerInformationStore ViewInformationStore AllStoreRights AllExtendedRights DomainController This parameter is used to specify the domain controller to use to write this confi guration change to Active Directory. You need to use the FQDN of the DC to be used. Note: This parameter is optional. Identity This parameter is used to specify a unique identifi er (name) for the Public Folder. Instance This parameter is used to enable passing an entire object to the command to be processed; primarily used in scripts where an entire object must be passed to the command. Owner This parameter specifi es the NT Owner access control list (ACL) on the object. Available values are the user principal name (UPN), domain/user, or alias. User This parameter is used to specify the UPN, domain/user, or alias of the user that should be granted rights to the Public Folder. Deny This parameter is used to deny permission to the respective Public Folder. InheritanceType This parameter is used to specify the type of inheritance. Available values are: None All Descendents SelfAndChildren Children Server This parameter is used to specify the server on which the selected operations should be performed. . OK twice and close the Exchange 2003 System Manager. Managing the Exchange 2007 Mailbox Server Role • Chapter 4 183 SOME INDEPENDENT ADVICE If you have a large Public Folder hierarchy and on a. yellow Folder List icon in the lower-left corner. 3. Expand Public Folders | All Public Folders. 4. Right-click the respective Public Folder and select Change Sharing Permissions in the context. to enable passing an entire object to the command to be processed; primarily used in scripts where an entire object must be passed to the command. Owner This parameter specifi es the NT Owner