There are two approaches to allow users to create folders at the root. One scenario is an administrator
can create the root folders and grant permissions to users the ability to create subfolders. This can be
done with the Outlook client or with the PowerShell Add-PublicFolderClientPermission cmdlet:
Add-PublicFolderClientPermission -Identity < PublicFolderIdParameter > -AccessRights
< Collection > -User < PublicFolderUserIdParameter > [-DomainController < Fqdn > ]
[-Server < ServerIdParameter > ]
[ < CommonParameters > ]
For example:
Add-PublicFolderClientPermission -Identity \SampleFolder -User
jeffreyrosen -AccessRights owner
Chapter 5: Public Folders
149
Another approach is to grant users the rights to create top - level folders. This can be done with
PowerShell or with an Active Directory editing tool, such as ADSI Edit. The command to grant permissions
requires the distinguished name (DN) of the public folder configuration object. The DN can be
found in the Configuration partition in Active Directory, and will look similar to the following:
CN=Public folderPublic foldersPublic folders,CN=Folder Hierarchies,CN=Exchange
Administrative Group
(FYDIBOHF23SPDLT),CN=Administrative Groups,CN= < company > ,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC= < company > ,DC=com
The cmdlet to change top - level permissions is Add-ADPermission :
Add-ADPermission -Identity < ADRawEntryIdParameter > -User
< SecurityPrincipalIdParameter > [-AccessRights < ActiveDirectoryRights[] > ]
[-ChildObjectTypes < ADSchemaObjectIdParameter[] > ] [-Deny < SwitchParameter > ]
[-DomainController < Fqdn > ] [-ExtendedRights < ExtendedRightIdParameter[] > ]
[-InheritanceType < None | All | Descendents | SelfAndChildren | Children > ]
[-InheritedObjectType < ADSchemaObjectIdParameter > ] [-Properties
< ADSchemaObjectIdParameter[] > ][ < CommonParameters > ]
For example:
Add-ADPermission -id ???CN=Public folders,CN=Folder Hierarchies,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=contosolab,
CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=contosolab,DC=com??? -User
jeffreyrosen -ExtendedRights ms-exch-create-top-level-public-folder -
AccessRights readproperty,GenericExecute
Exchange Server 2007 Service Pack 1 adds a new administrator role, Exchange Public folder
Administrators.
Pages:
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247