Microsoft Knowledge Base Email Alertz

In Microsoft Exchange 2000 Server, by default, all users have permission to create top-level folders. You can set this extended right on the Security page of the properties of the organization container.

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 256131 - Last Review: February 26, 2007 - Revision: 4.3

Restricting users from creating top-level folders in Exchange 2000 Server

This article was previously published under Q256131

SUMMARY

By default, all users of Microsoft Exchange 2000 Server have permission to create top-level folders. You can set this extended right on the Security page of the properties of the organization container.

MORE INFORMATION

If you do not want to grant all users the permission to create top-level public folders, modify the permissions as follows:
  1. Open the properties of the Organization object, and then click the Security tab.

    NOTE: In order to display the Security Tab, you have to add the following registry entry:

    Open Regedt32.
    HKEY_CURRENT_USER\Software\Microsoft\Exchange\ExAdmin
    Click Edit, add Value, and then click DWORD value in the file menu.

    Type the value:
    ShowSecurityPage
    and set the value to 1
  2. Click to clear the "allow" permission on the Everyone security principal for the "Create Top Level Public Folder" right.
NOTE: When a new Exchange server is added to an organization, the Everyone Security Principle permission to Create Top Level Public Folder is reset to "allow". Thus, after any new Exchange install into an Organization, you must click to clear the "Create Top Level Public Folder" right for Allow.

NOTE: Some rights take precedence over others. Specifically, "deny" has precedence over "allow," and "explicit permissions" has precedence over "inherited rights."

This behavior is consistent with Microsoft Exchange Server versions 4.x and 5.x. Everyone has the rights to create top-level folders by default.

APPLIES TO
  • Microsoft Exchange 2000 Server Standard Edition
Keywords: 
kbhowto KB256131
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate