Setting calendar permissions centrally...

A common requirement in some organisations is to ensure that everyone has read-only access to everyone else's calendars in Outlook. As you no doubt know, this is hard to achieve, since it normally involves asking your users to set the permissions correctly.

Fortunately, help is at hand via Kevin Snook's SetPerm utility. This excellent utility can be used to centrally set the DEFAULT role on the folders within a mailbox. That includes folders other than the Calendar, such as Inbox, Tasks, Contacts, etc.

The download includes a readme file and the actual EXE. You'll also need ACL.DLL which is included for download here.

Don't forget to make sure you test this program on a test system first.

Neil Hobson


No warranty, express or implied, is provided. This code is supplied here "as is".

Chris Meirick on July 21, 2003 at 07:09 AM in Useful Info
« Upgrading to Exchange 2003? | Main | What are they? »

Comments

Hi,

Where do I put the ACL.dll file? Winnt\System32?

Thanks,

TOm

Posted by: Tom at Apr 19, 2004 10:41:18 AM

Hi,

When I try and run the SetPerm utility, I get the following error.

Run-time error '429':
ActiveX component can't create object

Posted by: Tom at Apr 19, 2004 11:38:19 AM

Hi,

Never mind, I figured it out. You put ACL.dll in the Winnt\system directory of the client machine you are connecting from, and register it using the following command...
REGSVR32.EXE ACL.DLL You also must have permission to access the mailboxes, as referenced in the README file; Q262054 explains it.

Thanks,

Tom

Posted by: Tom at Apr 19, 2004 2:44:18 PM

I really could use the setperm tool.
Sadly the mailsoftware site seems dead & mail is undeliverable.

Is there an alternative download site for this tool (and the other tools)?

best regards
glenn

Posted by: Glenn at May 27, 2004 8:16:33 AM

Hey, can't download this tool either. Any alternative download site
available?

Regards,

Dennis

Posted by: Dennis at Jun 17, 2004 6:29:12 AM

I can't download the SetPerm utility from the link in the BLOG. Can someone email it to me or point me to another URL ?

Posted by: Rikard Strand at Jun 22, 2004 12:15:02 AM

You can now get SetPerm (and some other useful files) at:

http://www.fnds.net/html/downloads.html

Posted by: Mike at Jul 9, 2004 2:41:18 PM

Is the source code for this available anywhere?

Posted by: Rob at Aug 26, 2004 10:50:37 AM

Is the source code for this available anywhere?

Posted by: Rob at Aug 26, 2004 10:50:39 AM

I have a query. I need to download others' calendar and export to a DB or excel.

1. What kind of permissions to need for downloading the same?
2. Any tool available for the same?

Thanks
Cruz

Posted by: Cruz at Sep 21, 2004 8:25:08 AM

Great app, except it ONLY changes permission on the top-level folders. If there are any sub-folders you're SOL and have to go hand-edit the permissions yourself. I'd REALLY love it if someone could find the source and fix it so that it will give you the option to change the permissions on a mailbox-wide basis, no matter how many sub-folders! I realize this is not necessary with Exchange 2000 or newer, but I'm stuck with Exchange 5.5.

Posted by: John Aldrich at Mar 7, 2005 8:27:29 AM

I have tried this app six ways from Sunday and I cannot get past the Run-time error '429':

Have tried this logged on as both Domain admin and Exchange Service Account
Have repeatedly registered acl.dll
I am using the correct syntax
Outlook 2000 and Exchange 2000
Nothing seems to correct this Run-time error. Is there a new security update from MS that hobbles this???
Any help is greatly appreciated.

Posted by: Mark at Mar 9, 2005 3:24:48 PM

Since a couple of weeks I'm trying to figure out where in the world MS Exchange stores a Public Folder's per-user read/unread status. Could it be put in some ACL of sort? Somewhere accessible/manageable via ACL.dll? Thanks for any insight.

--
Giuliano

Posted by: Giuliano at Apr 12, 2005 1:47:17 AM

Hi all,

Can anyone shed some light on my problem....

I have owa configured as front-end servers, when setting permissions
via outlook, for users to access calender info. When users logon via
owa, they can view the calender but cannot write to the calender. They
can only write to the calender if they have admin permissions, which i cannot give.
Any ideas anyone who can help with this..!!


Thanks in advance..

Raj

Posted by: raj at May 31, 2005 4:55:19 AM

Hi all,

For setting calendar permissions centrally, and indeed in general set permissions on mailbox folders and public folders manually or automatically via templates etc., may I recommend our product Symprex Folder Permissions Manager. More information about this product is available here:

http://www.symprex.com/products/fpm/

A free evaluation version is available for download.

Setting permissions correctly, and especially on calendar folders, via the ACL component is no simple task. When changing permissions on certain Outlook folders, you must also change permissions on certain related folders (and in some cases different permissions). Otherwise, users that try to access those folders may run into issues.

Posted by: Symprex at Oct 27, 2005 2:47:39 AM

Sorry, here is a working link for Symprex Folder Permissions Manager:

http://www.symprex.com/products/fpm/

You can change permissions on default folders, user-defined folders, sub-folders etc. with a lot of flexibility. You can set, append, remove, update existing permissions and more.

Posted by: Symprex at Oct 27, 2005 2:54:52 AM

I am using exchange server 5.5 for testing purpose.I found this setperm utility very useful.There are various options for setting the permissins in each of the mailboxes.
We have "owner","publishing editor","Editor","Publishing author","reviewer"& "contributor" for each of the folders.
Can you pleaese help what these options stand for??

Posted by: Himabindu at Mar 26, 2006 9:01:07 PM

I need Microsoft Exchange Server, where can i download it?

Thanks.

Posted by: Renato Andrade at Jul 1, 2006 12:09:49 PM

I am getting the runtime error '429' message Active x component can't create object. trying to open individual contact in my contacts folder w/ Outlook. I have microsoft office XP and have no idea how to fix it. I have average computer knowledge. can someone walk me thru it.

thanks

Posted by: Sarah at Aug 9, 2006 12:08:08 PM

You should try making sure CDO is registered.

regsvr32 c:\windows\system32\cdo.dll

People who want the source code might be able to make use of this

http://www.cdolive.com/aclviewer.htm

I've not tried it but it's a VB project that uses ACL.dll to change folder perms.

Posted by: Gareth at Aug 17, 2006 1:11:21 AM

myself k.p.satish ,contuning my MCSA COURSE , NOW I want do ms exchange course please sir guide me
thank you
k.p.satish
bhilai(CG)
INDIA

Posted by: k.p.satish at Dec 5, 2006 12:30:03 AM

A few weeks ago we migrated all mailboxes from Exchange 2000 to 2003.
The migration completed succesfully; all user-accounts where fully functional.

A few days ago we removed the Exchange 2000 server following the MS best practises.
Since then, the additional permissions on a mailbox do not work if they where granted to a mailgroup.
The permissions are visible, but not functional.
The workaround is to remove the permissions, and add them again.

Is anyone familiair with this problem?
And more important: does anyone have a solution?

(It would be nice if Setperm would be able to export settings and import them again)

Posted by: Dave van Lare at Feb 8, 2007 1:09:39 AM

Dave,

Are the permissions granted to a Mail Distribution Group, or a Security Group with an exchange email address?

I ask because in AD, Mail Distribution Groups do just that: they distribute mail. They cannot be used for assigning access permissions. On the other hand, Security Groups can be used for both emails and assigning security permissions.

Maybe this is the root of your issue.

Ben

Posted by: Ben Wong at Apr 23, 2007 7:59:14 AM

If you run in to the ActiveX problem, you need to install the CDO files. These can be found at:
http://www.microsoft.com/downloads/details.aspx?familyid=2714320d-c997-4de1-986f-24f081725d36&displaylang=en

Regards,

Mischa

Posted by: Mischa Oudhof at May 16, 2007 2:04:15 AM

Has anyone tried this on Exchange 2008?

Posted by: Greg at Jul 8, 2008 12:33:28 PM