Forum Discussion
Shared Mailbox - keep a folder private?
Is there a way to share a mailbox with another user via Add-MailboxPermission, and still keep a specific folder private?
Explanation:
I have a customer who has chosen to let each user see each other users mailbox (this is unusual, but that's the way the customer wants it). So far, they have achieved this by manually adding each user to the local Outlook profile setting "open additional mailbox".
This is a nightmare on the IT management side and has interestingly also led to duplicate folders and calendars and some unexplainable access issues. Some users might see messages and folders, others might not, althouh they have teh same settings...
Anyway, I believe that sharing the mailboxes on Office 365 level (Add-MailboxPermission) is the better solution. Automapping will do the rest and IT does not have to touch the clients.
There is one issue with that, and this is the question. (Bob is sharing, Peter is accessing)
If I use the "open additional mailbox" approach, the owner of the mailbox (Bob) can easily deny access to a certain folder (i.e. \Inbox\private-stuff) by right-click and setting access permissions to {none}. At the end, Bob had to first add permissions for Peter to access his mailbox by basically the same right-click method ({Reviewer} in this case).
Yet, if I instead share Bob's mailbox to Peter with Add-MailboxPermission, the same will not work since each folder remains with the permissions Standard {none} and Anonymous {none}:
PS C:\> Get-MailboxFolderPermission Bob:\Inbox\private-stuff
FolderName User AccessRights SharingPermissionFlags
---------- ---- ------------ ----------------------
private-stuff Standard {None}
private-stuff Anonym {None}
The following cmdlet will fail with something like "[Set-MailboxFolderPermission], UserNotFoundInPermissionEntryException":
PS C:\> set-MailboxFolderPermission Bob:\Inbox\private-stuff -User Peter - AccessRights none
You get the picture..
So, if I share Bob's mailbox with Add-MailboxPermission, is there another way to prevent Peter to access "private-stuff"?
Thanks
Daniel
5 Replies
- AnonymousI forgot to mention that I can use
Add-MailboxFolderPermission Bob:\Inbox\private-stuff -User Peter - AccessRights none
But that does not help. Peter still can access the content of that folder.. Despite the following setting:
PS C:\> Get-MailboxFolderPermission Bob:\Inbox\private-stuff
FolderName User AccessRights
---------- ---- ------------ -------
private-stuff Standard {None}
private-stuff Anonym {None}
private-stuff Peter {None}Nope. Full Access means Full access. Period.
- Anonymous
Thanks Vasil,
So when wanting to share a mailbox and keep a certain folder still private, is there another server based method? Or do we have to keep using "open additional mailbox" in Outlook?
Daniel