Microsoft KB Archive/815916

= XADM: Administrative Rights Are Not Automatically Applied to Public Folder Subfolders =

Article ID: 815916

Article Last Modified on 2/27/2007

-

APPLIES TO


 * Microsoft Exchange 2000 Server Standard Edition
 * Microsoft Exchange 2000 Enterprise Server

-





SYMPTOMS
When you configure administrative rights to propagate from a public folder to all its sub-folders, the administrative rights that you have configured are not inherited by new sub-folders that you create.



CAUSE
This behavior occurs because the Microsoft Information Store (IS) is designed with static inheritance for permissions.



WORKAROUND
To work around this behavior, manually propagate the administrative rights to the subfolders:
 * 1) Start the Exchange System Manager utility.
 * 2) Under your organization, expand Folders, expand Public Folders, and then locate the public folder whose administrative rights you want to propagate.
 * 3) Right-click the parent public folder, point to All Tasks, and then click Propagate Settings.
 * 4) Click to select the Administrative rights check box, and then click OK.



STATUS
This behavior is by design.



MORE INFORMATION
The Information Store has static permission inheritance instead of automatically inherited permissions. When you create a new sub-folder under a public folder where you have configured administrative rights, you must manually propagate the parent folder permissions. When you propagate folder settings by using Exchange System Manager, it retrieves the child folders and their child folders, recursively, and then changes their security descriptors to apply the inheritable access control entries (ACEs) from the parent folder.

Although there are advantages and disadvantages for both the automatically-inherited permission method and the static permission method of propagating permissions, the use of static permissions typically has the following advantages:
 * It is easier to use and to control the applied permissions.
 * It has less chance of creating uncontrolled replication traffic.
 * It is more flexible in providing a finer level of applied permissions.

Keywords: kbprb KB815916

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.