Microsoft KB Archive/295599

= XADM: How to Prevent Inherited Permissions on Public Folders for All Users =

Article ID: 295599

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Exchange 2000 Server Standard Edition

-



This article was previously published under Q295599



SUMMARY
This article describes how to prevent All Users from creating top-level public folders in Microsoft Exchange 2000.



MORE INFORMATION
When you use Exchange 2000, All Users have the permission to create top-level folders by default and this permission is inherited from the  object. This behavior is consistent with previous versions of Microsoft Exchange Server.

WARNING: If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows 2000 Server, Microsoft Exchange 2000 Server, or both. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes at your own risk.

To prevent All Users from inheriting the permission to create top-level public folders, or the permission to create any public folders, perform the following procedure to modify the permissions:

Open ADSI Edit from the Windows 2000 Support Tools, and locate the following item:

CN=[ ],CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=[ ],DC=com

 To locate this item, click to expand each of the following objects:

Configuration Container [Computer.Domain.Com]

CN=Configuration, DC=,DC=com

CN=Services

CN=Microsoft Exchange

CN=

 Right-click CN= to locate the properties, and then click the Security tab. Under Names, click the Everyone group. Under Permissions, click to clear the Allow check box, for the Create top level public folder permission. To prevent the users from inheriting the Create Public Folders permission, click to clear the Allow check box, for the Create Public Folders permission. Click Apply, and then click OK. On the Console menu, click Exit.</li></ol>

You can grant explicit rights to any individual user or group on the parent folder or public folder tree that you choose.

Keywords: kbinfo KB295599

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.