Forum Discussion

Biohazzard's avatar
Biohazzard
Level 4
16 years ago

Default and Anonymous Permissions...

I have EV7.5SP4 for Exchange.

I found a couple old threads discussing this but thout i would see if there is new info I wasnt aware of.  I get tons of warnings in my event viewer about not syncing these permission to users' archive. I know i can configure EV to not generate these warnings but I was wondering if there was a tool out there to easily fix it. The most apparent way is to contact each user and have them fix the permissions on the folders or somehow log into outlook as them and do it myself. Both of these would take alot of time.

I am not an Exchange admin but is there a policy of some sort that would prevent people from setting these permissions to begin with?  OR is there a tool that can go though all the users and reset it back?  Like EVPM or something?

thanks

Enterprise Vault
Information Governance
  • Wayne_Humphrey's avatar
    Wayne_Humphrey
    16 years ago
    Hi,

    Enterprise Vault cannot do this, as philit states You can do this using PFDAVAdmin and create a root DACL permission that  can be propagated through all mailboxes. PFDAVAdmin works pretty much the same as propagating client permissions via the Public Folder tools in ESM.

    Take a look at the PFDAVAdmin documentation for more help.

    Info:
    http://www.msexchange.org/articles/PFDavAdmin-tool-Part1.html
    http://www.msexchange.org/articles/PFDavAdmin-tool-Part2.html

    MS Download:
    http://www.microsoft.com/downloads/details.aspx?FamilyId=635BE792-D8AD-49E3-ADA4-E2422C0AB424&displaylang=en

  • Paul_Grimshaw's avatar
    Paul_Grimshaw
    Level 6
    16 years ago
    I do not belive so as a user will always have the ability to perform this operation as the SELF permission has full mailbox access. If there is some sort of tool out there that can reset these options back to a permission level of none then I am not aware of one but I suppose you could pose that question to a specific exchange/outlook forum,
    Also would you really want to do this as this change would have to have been done by a user or admin at some point as the default Permission level is none. You may get a lot of irate users.
  • philt's avatar
    philt
    Level 5
    16 years ago
    Have a look for a tool called PFDAVAdmin. You can change permissions without using Outlook. Might be nice to let your users know before hand.

    Hope that helps.
    Cheers,
    Phil
  • Wayne_Humphrey's avatar
    Wayne_Humphrey
    Level 6
    16 years ago
    Hi,

    Enterprise Vault cannot do this, as philit states You can do this using PFDAVAdmin and create a root DACL permission that  can be propagated through all mailboxes. PFDAVAdmin works pretty much the same as propagating client permissions via the Public Folder tools in ESM.

    Take a look at the PFDAVAdmin documentation for more help.

    Info:
    http://www.msexchange.org/articles/PFDavAdmin-tool-Part1.html
    http://www.msexchange.org/articles/PFDavAdmin-tool-Part2.html

    MS Download:
    http://www.microsoft.com/downloads/details.aspx?FamilyId=635BE792-D8AD-49E3-ADA4-E2422C0AB424&displaylang=en