XADM: The Owner of a Public Folder Can Change the ACL After Deny Control Access Has Been Enabled (813284)



The information in this article applies to:

  • Microsoft Exchange 2000 Server

SYMPTOMS

When you enable the "Deny Control Access" feature for the owner of a public folder, the owner may still be able to modify the folder Access Control List (ACL).

CAUSE

The issue may occur if the owner of the folder has full control of the folder and can modify the ACL.

WORKAROUND

To work around this issue, note that when a user owns a public folder, the user has complete control of the folder and can access the ACL. If you want to deny access to the ACL by the user who is currently the owner of the file, you may change their client permissions from Owner to Publishing Editor. To do so:
  1. Start Exchange System Manager.
  2. Expand the Organization tree to find the public folder that you want to change client permissions.
  3. Right-click the public folder, click Properties, click the Permissions tab, and then click Client Permissions.
  4. In the Names box, click the name of the public folder owner.
  5. In the Roles box, click Publishing Editor.
  6. In the Names box, click the name of the new owner of the folder. If you cannot see the name, click Add, and then add the name of the new user.
  7. In the Roles box, click Owner.
  8. Click OK two times, and then quit Exchange System Manager.
.

Modification Type:MinorLast Reviewed:6/13/2003
Keywords:kbprb KB813284