Pages

Tuesday, June 16, 2009

Exchange 2007: One or more users cannot be added to the folder access list. Non-local users cannot be given rights on this server

Summary: When attempting to add a user to a public folder permssion you receive the following error.

One or more users cannot be added to the folder access list. Non-local users cannot be given rights on this server

In addition when you look in the GAL the user has a red circle.

Cause: It appears to be because the user is a mailbox of type "Shared"

Solution: Convert the mailbox type to regular.

Set-mailbox user1 -type regular

If the mailbox is already set as type regular then you need to verify that the following properties are set correctly in adsiedit.

RecipientDisplayType = 1073741824
RecipientTypeDetails = 1


Exchange 2007 and Recipient Type Details
http://blogs.technet.com/b/benw/archive/2007/04/05/exchange-2007-and-recipient-type-details.aspx



James Chong (MVP)
MCITP | EA | EMA; MCSE | M+, S+
Security+, Project+, ITIL
msexchangetips.blogspot.com

25 comments:

  1. nice blog,

    Hi Blogger!
    Interested to share comments & visitors through Link Exchange, add my blog and leave a comment or mail me at harimegha@gmail.com

    ReplyDelete
  2. Thanks for the update about adding users in public folder permission. This is pretty good to see your reply on the blog like as a post. Actually, most of us are not aware about this problem so far.
    Thanks,

    ReplyDelete
  3. Joe L9:47 AM

    I am having this issue on assigning a distribution list (or a mail enabled security group) to a public folder.

    ReplyDelete
  4. Anonymous9:25 AM

    Interesting story you got here. I'd like to read something more about this matter.
    BTW check the design I've made myself Young escort

    ReplyDelete
  5. Anonymous1:31 PM

    Blogspot Related Links :


    Buy Cialis


    Harvard

    ReplyDelete
  6. Anonymous12:45 PM

    this worked thanks.

    it appears to modify these attributes:

    RecipientType :UserMailbox
    RecipientTypeDetails :UserMailbox

    ReplyDelete
  7. Anonymous12:59 PM

    @Joe L - Regarding distribution groups, check the ExchangeVersion via the Exchange Management Shell: Get-DistributionGroup * | Format-List DisplayName, ExchangeVersion

    The issue I noticed was some distribution groups could be selected and some couldn't. Those that can are ExchangeVersion 0.0 (6.5.6500.0) and those that can't are 0.1 (8.0.535.0)--basically Exchange 2003 vs 2007.

    In Exchange 2007 you can create mail-enabled universal security groups for this purpose. A distribution group is inappropriate for assignment of permissions now.

    ReplyDelete
  8. Get quality writing assistance in any subject. 100% custom writing. Specialist who can provide an do my college homework service.

    ReplyDelete