Mailbox Permissions/ACL issue

Discussion in 'Windows Small Business Server' started by C. Berry, May 25, 2006.

  1. C. Berry

    C. Berry Guest

    I have a user on my SBS system who can't change his calendar permissions.
    Symptoms:
    -Click "Share my Calendar"
    -Result: "The permssions could not be modified. The client operation failed"

    -Try to access his permissions from another user with rights to change his.
    -Result: The dialog is empty

    -Try to reset ACL via setting a delegate
    -Result: "THere was a problem writing to the Access Control List"

    I have removed Exchange attributes and then reconnected the mailbox to the
    user with no changes in the issue.


    Thanks in advance!
     
    C. Berry, May 25, 2006
    #1
    1. Advertisements

  2. C. Berry

    chace zhang Guest

    Hi,

    Thank you for posting here!


    According to your description, I understand that this issue is: you can not
    share user's calendar. If I'm off base, please feel free to let me know.
    First of all, I would like to confirm that you have shared the calendar
    using the follow steps:

    - On the Tools menu, click Options.
    - On the Delegates tab, click Add.
    - Type or select the user account that need to maintain the calendar, click
    Add, and then click OK.
    - In the Delegate Permissions dialog box, click to assign ?Reviewer?
    permission for only calendar and select None for others.
    - Click OK twice.

    This error can also occur because the group you are assigning permissions
    to is a Distribution Group and not a Security Group. Distribution Groups
    are used for sending mail to a group of users. Security groups are used for
    sending mail to users and for assigning security attributes, like object
    access permissions.

    If this is your case, please create a mail-enabled Security Group and
    assign permissions to it.

    If it is not your case or the issue still happens, please help me collect
    the follow information:
    1. First please make sure the Calendar folder resides on the user's
    Exchange mailbox as we can not share a Calendar in PST files using this
    method. If we confirm this, I suggest that we create a new Calendar folder
    on the user's mailbox and try

    2. I suggest that we create a new profile to check if it can resolve the
    issue. A new profile is a new environment for us to use Outlook. To create
    a new profile is only for a test to see if the problem is related to the
    corrupt profile of Outlook. Please follow the steps in the Microsoft KB
    article below:

    How to create a new e-mail profile in Outlook 2003
    http://support.microsoft.com/?id=829918

    Note; The easiest way to create the SBS 2K3 Outlook profile is to remove
    all the Outlook Profile, make sure Outlook is closed, and then locate to
    the client computer folder 'C:\Program Files\Microsoft Windows Small
    Business Server\Clients' , double click sbsdefault.prf, this will
    automatically create the outlook profile with the correct settings (which
    also include the FAX Transport) for the corresponding domain user.

    3. Please configure the problematic user account on another known-good
    user's machine and test if the same issue occurs.

    4. Please also configure another user account on the problematic user's
    machine to see if the issue persists.


    In addition, please temporary to disable or remove antivirus application on
    your problematic client.


    Hope this helps. I look forward to your update.




    Best Regards,

    Chace Zhang (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.

    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    chace zhang, May 26, 2006
    #2
    1. Advertisements

  3. C. Berry

    C. Berry Guest

    Chace:

    Thanks for your response.

    The Calendar is shared, the problem is we can't change the sharing
    permissions.

    I can't even set a delegate - that's one of the times I get an error writing
    to the ACL.

    This is absolutely a calendar on the Exchange server. I and others can
    subscribe to it, so it's on the server, and has its previously set
    permissions, but the user can't change the permissions.

    Let me make it clearer: in the properties dialog for the calendar, there is
    a permissions tab, and it can be chosen. However, once it is chosen, the "can
    not modify permissions. The client operation failed" error message appears.
    There is no question of try

    I have already created a new profile, using the Mail contol panel and tested
    the issue from that profile, with the same reults, pointing to a problem on
    the server side. I will try recreating the profile using the instructions in
    the KB article you specify below.
     
    C. Berry, May 26, 2006
    #3
  4. C. Berry

    chace zhang Guest

    Hi,


    Thanks for your update

    I suggest you use the PfDavAdmin tool to reset the client permission of the
    public folder. For more information about the tool, please refer to the
    following resource.

    http://www.microsoft.com/downloads/details.aspx?FamilyID=635be792-d8ad-49e3-
    ada4-e2422c0ab424&DisplayLang=en

    PFDavAdmin accesses the information store through WebDAV and can be used
    with Exchange Server 2000 and Exchange Server 2003. Originally written to
    correct non-canonical discretionary access control lists on public folders,
    it eventually expanded to include imports and exports of permissions and
    replicas in pfadmin 1.3 command syntax.

    Also, you may check the Administrative Rights of the public folder. If it's
    changed unexpectedly, please change it back to the default settings. To get
    the default settings, you may create a new public folder and check it.

    Hope this helps! If you have further concern, feel free to let me know.


    Best Regards,

    Chace Zhang (MSFT)

    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.

    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.
     
    chace zhang, May 29, 2006
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.