Re: Public Folder permission issue after migration to Exch2003

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Steven Halsey [MSFT] (Stevhal_at_Online.Microsoft.com)
Date: 05/06/04


Date: Thu, 6 May 2004 10:25:22 -0700

Did you run the 5.5 Public Store IS/DS consistency checker? On Exchange
2003 if a public folder permission ACE can't be resolved to an object in the
Active directory the ACE is ignored on the ACL list and that person/group
will get the default permissions for the folder. Look at this KB:
http://support.microsoft.com/default.aspx?scid=kb;en-us;328287&Product=exch2003

Are the groups that are used in the Public Folder ACLs being upgraded to
Universal Security Groups by the Store? Check a groups whose permissions
are not working and see what kind of group it is in Active Directory Users
and Computers. The store should be upgrading the Universal Distribution
groups to Universal Security Groups to be used as permissioning objects
(this happens when someone access the public folder). The store can only
upgrade the group if the group resides in a Windows 2000 Native Domain (or
Windows 2003 Native Domain).

Does this help?

-- 
Steven Halsey
Stevhal@online.microsoft.com
Microsoft Exchange
Please do not send email directly to this alias.  This alias is for
newsgroup purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Martin Egerter" <do_not@mail.me> wrote in message 
news:u%23jUQMuMEHA.3096@TK2MSFTNGP12.phx.gbl...
> Hi everbody,
>
> I guess this is gonna be tough one   ;-)
>
> Ok, this is the situation:
> After migrating our NT4-Domain to Active Directory under W2K3 (Native 
> Mode)
> we setup ADC to replicate between our Exch5.5 sites and ADS (using 
> recipient
> CA's and PF CA's) and then installed Exch2003 on an new hardware into the
> same organization as the Exch5.5 server. Well, so far, so good. Everything
> replicates perfectly. Exch5.5 distribution lists are being replicated into
> universal distribution/security groups in ADS having with correct accounts
> as members. Now here it is: After moving mailboxes from Exch5.5 to 
> Exch2003
> the users no longer see "their" public folders. Some are visible, but
> inaccessible. Some are not visible at all. Some are visible and 
> accessible,
> but they should not be. Seems like public folder permissions got 
> completely
> messed up, although when checking permisssions using both, System Manager
> and Outlook, permissions seem to set correctly. Also, when reassigning
> permissions to individual public folders by user, that works just fine.
>
> Actually, I don't know what's going on there. Has anyone of you ever
> experienced the same thing?
>
> I certainly do appreciate any hint.
>
> Regards,
>
> Martin
>
> P.S.: When responding to posts, please "Reply to Group" via your 
> newsreader
> so
> that others may learn and benefit from this issue.
>
> 


Relevant Pages

  • RE: Public Folder Permissions Not Displaying Correctly in Outlook
    ... Use ISINTEG Utility to fix the possible logical errors in Exchange ... Information Store as the following. ... Dismount the Public Folder Store and Mailbox Store "Mailbox Store ... Public Folder Permissions Not Displaying Correctly in Outlook ...
    (microsoft.public.exchange.admin)
  • Re: Public Folder permission issue after migration to Exch2003
    ... Security Groups by the Store. ... couple of them that remain a Universal Distribution Group, ... > will get the default permissions for the folder. ... > Are the groups that are used in the Public Folder ACLs being upgraded to ...
    (microsoft.public.exchange.setup)
  • Re: NT4DC /Exchange 5.5 to Exch2003
    ... The main thing for the native domain is the permissions in public folders. ... public folder then that is what the problem is. ... the Distribution List as a Universal Distribution Group into the Active ... you had a public folder "Managers", and only members of the DL "Managers" ...
    (microsoft.public.exchange.setup)
  • Re: NT4DC /Exchange 5.5 to Exch2003
    ... It is refering to the Client Permissions. ... Exchange validates when a public folder is accessed. ... > the DL "Managers" ...
    (microsoft.public.exchange.setup)
  • Re: Public Folder Permissions Not Displaying Correctly in Outlook
    ... You won't corrupt the Public Folder Store by running isinteg. ... is simply a tool to verify the integrity of the ...
    (microsoft.public.exchange.admin)