How to centrally set the calendar access rights in Exchange 2010

by Thomas Forsmark Sørensen 2. June 2010 02:34

In exchange 2003 or Exchange 2007 you had to use PFADMIN to centrally set the rights on the users calendars, or you had to open every mailbox and set the rights on the calendar.

(Setting the user rights on the calendar is the same as what is happening when you share a calender from Outlook. It will then add the rights for the user to the calendar).

PFADMIN is not supported on Exchange 2010 because Exchange 2010 does not support WebDAV. (a replacement for PFADMIN can be found here that will support Exchange 2007 and Exchange 2010)

Starting with Exchange 2010 the calendar rights can be set centrally "out of the box". This can be done with the "Add-MailboxFolderPermission" cmdlet. 

The actual permissions for a calendar can be viewed using the "Get-MailboxFolderPermission" command, and permissions can be removed using the "Remove-MailboxFolderPermission" command.


The following command will give everybody read rights to the calender in the "MeetingRoom" calendar.

Add-MailboxFolderPermission MeetingRoom@domain.local:\calendar -User Default -AccessRights reviewer

The following command will give the users that are members of the AD group Res-CalendarAdmins read and write access to the calendar. (The AD group must be mail enabled and cannot be hidden from the address book when executing the command).

Add-MailboxFolderPermission MeetingRoom@domain.local:\calendar -User Res-CalendarAdmins -AccessRights editor

The following command will remove access rights for the default user on mailbox

Remove-MailboxFolderPermission MeetingRoom@domain.local:\calendar -User Default -AccessRights editor

The following command will show the actual rights to the calendar for the MeetingRoom.

Get-MailboxFolderPermission MeetingRoom@domain.local:\calendar

If you want further details on the "Add-MailboxFolderPermission" command you can have a look at Ilse Van Criekinge's Weblog

Powered by BlogEngine.NET
Theme by Mads Kristensen | Modified by Mooglegiant

About Me


My name is Thomas Forsmark Sørensen.

I live in Odense in Denmark and work for Globeteam in Virum.

I am working as a Microsoft Infrastructure consultant with main focus on application and Operating System Deployment.

I work mostly with Microsoft System Center Configuration Manager 2012 R2 and MDT 2013, but I also work with other of Microsofts products. 


<<  February 2021  >>

View posts in large calendar