Microsoft Exchange Server 2010 : Managing Public Folder Settings (part 2) - Granting and Revoking Send As Permissions for Public Folders, Propagating Public Folder Settings and Data

Granting and Revoking Send As Permissions for Public Folders

If you want to allow a user to send messages on behalf of the public folder, you can do this using the Manage Send As Permission Wizard. In the Public Folder Management Console, select the folder's parent in the left pane, click the folder in the main pane, and then click Manage Send As Permission on the Action menu or in the Action pane. In the Manage Send As Permission Wizard, click Add, and then use the Select User or Group dialog box to choose the user or users who should have Send As permission on the public folder. To revoke Send As permission, select an existing user name in the Security Principal list box, and then click the Remove button. Click Manage to set the desired access permissions.

In the Exchange Management Shell, you can use the Add-ADPermission and Remove-ADPermission cmdlets to manage Send As permissions. Samples Example 5 and Example 6 show examples using these cmdlets. Here, the ExtendedRights parameter is set to Send-As to indicate that you are setting Send As permissions on the mailbox.

Example 5. Adding Send As permissions for public folders

Syntax

Add-ADPermission -Identity PublicFolderIdentity
-User UserBeingGrantedPermission -ExtendedRights Send-As


Usage

Add-ADPermission
-Identity "CN=Managers,CN=Microsoft Exchange System Objects,
DC=cpandl,DC=com" -User "CPANDL\andyc" -ExtendedRights "Send-As"

Example 6. Removing Send As permissions for public folders

Syntax

Remove-ADPermission -Identity PublicFolderIdentity
-User UserBeingRevokedPermission -ExtendedRights Send-As
-InheritanceType All -ChildObjectTypes $null
-InheritedObjectTypes $null
-Properties $null


Usage

Remove-ADPermission
-Identity "CN=Managers,CN=Microsoft Exchange System Objects,
DC=cpandl,DC=com" -User "CPANDL\andyc" -ExtendedRights "Send-As"
-InheritanceType "All" -ChildObjectTypes $null
-InheritedObjectTypes $null
-Properties $null

Propagating Public Folder Settings and Data

Any property changes you make to public folders aren't automatically applied to subfolders or replicated to other Mailbox servers hosting public folder replicas. You must either wait for the maintenance/replication interval to begin or manually propagate setting changes by using the Update Hierarchy feature in the Public Folder Management Console or the Update-PublicFolderHierarchy cmdlet.

In the Public Folder Management Console, you can update the entire public folder hierarchy by selecting the Public Folders node in the left pane and then clicking Update Hierarchy on the Action menu or in the Action pane. Example 7 provides the syntax and usage for the Update-PublicFolderHierarchy cmdlet.

Example 7. Update-PublicFolderHierarchy syntax and usage

Syntax

Update-PublicFolderHierarchy -Server Server


Usage

Update-PublicFolderHierarchy -Server "CorpSvr257"

Similarly, changes users make to individual public folders aren't automatically replicated to other Mailbox servers hosting replicas. You must either wait for replication to begin or manually replicate data changes by using the Update Content feature in the Public Folder Management Console or the Update-Public-Folder cmdlet.

In the Public Folder Management Console, you can update an individual public folder and its subfolders by selecting the parent folder in the left pane, clicking the folder in the main pane, and then clicking Update Content on the Action menu or in the Action pane. Example 8 provides the syntax and usage for the Update-PublicFolder cmdlet.

Example 8. Update-PublicFolder syntax and usage

Syntax

Update-PublicFolder -Identity PublicFolderIdentity
 -Server Server [-DomainController DCName]


Usage

Update-PublicFolder -Identity "\Projects"
 -Server "CorpSvr257"

You can suspend and resume public folder replication by using Suspend-PublicFolderReplication and Resume-PublicFolderReplication, respectively. Simply enter the cmdlet name in the Exchange Management Shell.