How to Remove Public Folder Administrative Permissions
Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.
Applies to: Exchange Server 2007, Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3
This topic explains how to remove administrative permissions from users to access a public folder or public folder hierarchy. If you have Microsoft Exchange Server 2007 Service Pack 1 (SP1) installed, you can use the Exchange Management Console or the Exchange Management Shell to perform this procedure. If you have the release to manufacturing (RTM) version of Exchange 2007 installed, you must use the Exchange Management Shell.
Note
You cannot use the Remove-PublicFolderAdministrativePermission cmdlet to remove a public folder administrator's access rights. You must use the Remove-ExchangeAdministrator cmdlet or the Organization Configuration node in the Exchange Management Console.
Before You Begin
Before you perform the following procedure, you must perform the actions in one of the following sections based on whether you are working with the RTM version of Microsoft Exchange 2007 or Exchange 2007 SP1.
For more information about permissions, delegating roles, and the rights that are required to administer Exchange 2007, see Permission Considerations.
Also, before you perform this procedure, be sure to read Configuring Public Folder Permissions.
Permissions and Prerequisites for Exchange 2007 SP1
To perform the following procedure in Exchange 2007 SP1, the account you use must be delegated the following:
To remove a user from the Public Folder Administrator role by using the Exchange Management Console or the Add-ExchangeAdministrator cmdlet in the Exchange Management Shell, the account you use must be delegated the following permissions:
- Exchange Organization Administrator role and local Administrators group for the target server
To remove administrative permissions from a user by using the Remove-PublicFolderAdministrativePermission cmdlet, the account you use must be delegated the following permissions:
- Exchange Public Folder Administrator role and local Administrators group for the target server
Permissions and Prerequisites for Exchange 2007 RTM
To perform the following procedure in Exchange 2007 RTM, the account you use must be delegated the following:
- Exchange Server Administrator role and local Administrators group for the target server
Procedure
Exchange 2007 SP1
To use the Exchange Management Console to remove the Public Folder Administrator role from a user
Start the Exchange Management Console.
In the console tree, click Organization Configuration.
In the result pane, under the Identity column, select the user from which you want to remove the Exchange Public Folder Administrator role.
In the action pane, click Remove.
A warning appears asking if you are sure you want to perform this action. Click Yes to confirm.
To use the Exchange Management Shell to remove the Public Folder Administrator role from a user
To remove Public Folder Administrator role from the user Paula, run the following command.
Remove-ExchangeAdministrator -Identity Paula -Role PublicFolderAdmin
A warning appears asking if you are sure you want to perform this action. Type Y to confirm.
To use the Exchange Management Shell to remove administrative permissions for a user to access a public folder or public folder hierarchy
To remove all administrative rights to the entire public folder tree from the user Kim, run the following command.
Remove-PublicFolderAdministrativePermission -Identity "\" -User "Kim" -AccessRights AllExtendedRights -InheritanceType All
A warning appears asking if you are sure you want to perform this action. Type Y to confirm.
For detailed syntax and parameter information, see the Remove-ExchangeAdministrator and Remove-PublicFolderAdministrativePermission reference topics.
Exchange Server RTM
To use the Exchange Management Shell to remove administrative permissions for a user to access a public folder or public folder hierarchy
To remove all administrative rights to the entire public folder tree from the user Kim, run the following command:
Remove-PublicFolderAdministrativePermission -Identity "\" -User "Kim" -AccessRights AllExtendedRights -InheritanceType All
A warning appears asking if you are sure you want to perform this action. Type Y to confirm.
For detailed syntax and parameter information, see the Remove-PublicFolderAdministrativePermission (RTM) reference topic.
For More Information
To learn more about public folders, see Understanding Public Folders.
For more information about managing public folders, see Managing Public Folders.
For more information about using the Exchange Management Shell, see Using the Exchange Management Shell.