2. June 2010 02:34
In exchange 2003 or Exchange 2007 you had to use PFADMIN to centrally set the rights on the users calendars, or you had to open every mailbox and set the rights on the calendar.
(Setting the user rights on the calendar is the same as what is happening when you share a calender from Outlook. It will then add the rights for the user to the calendar).
PFADMIN is not supported on Exchange 2010 because Exchange 2010 does not support WebDAV. (a replacement for PFADMIN can be found here that will support Exchange 2007 and Exchange 2010)
Starting with Exchange 2010 the calendar rights can be set centrally "out of the box". This can be done with the "Add-MailboxFolderPermission" cmdlet.
The actual permissions for a calendar can be viewed using the "Get-MailboxFolderPermission" command, and permissions can be removed using the "Remove-MailboxFolderPermission" command.
The following command will give everybody read rights to the calender in the "MeetingRoom" calendar.
Add-MailboxFolderPermission MeetingRoom@domain.local:\calendar -User Default -AccessRights reviewer
The following command will give the users that are members of the AD group Res-CalendarAdmins read and write access to the calendar. (The AD group must be mail enabled and cannot be hidden from the address book when executing the command).
Add-MailboxFolderPermission MeetingRoom@domain.local:\calendar -User Res-CalendarAdmins -AccessRights editor
The following command will remove access rights for the default user on mailbox
Remove-MailboxFolderPermission MeetingRoom@domain.local:\calendar -User Default -AccessRights editor
The following command will show the actual rights to the calendar for the MeetingRoom.
If you want further details on the "Add-MailboxFolderPermission" command you can have a look at Ilse Van Criekinge's Weblog