How do I migrate Public Folder permissions?
Permissions for Public Folders can only be migrated from Exchange 2010+ (i.e., they cannot be migrated from Exchange 2007).
The account for the Source needs to either be an Owner of the Public Folder or be in the Public Folder Management Role Group. The Role group method resolves issues of missing ownership of a folder.
In order for Public Folder permissions to be migrated correctly, the users on the Source and Destination must be created and set up. When we migrate permissions for a Public Folder, we attempt to match on three criteria:
- Full email address
- User display name
- User alias
The following illustrates the waterfall process for checking permissions against the three criteria:
- The migration process first tries to match the primary email address; if it matches the primary email address, then permissions will migrate.
- If it does not match the email address, it then checks the user's display name; if it matches the display name, then permissions will migrate.
- If it cannot match the display name, it then attempts to match the address alias; if it matches on the alias, the permissions will then migrate. If it does not match on the alias (nor none of the previous two criteria), then permissions will not migrate.
Note: By default, Public Folder permissions are migrated for folders that do not exist. If folders already exist, permissions are not migrated.
If you would like to force permissions to be migrated when a folder already exists, you will need set the Advanced Option to migrate permissions for new folders and existing folders.
Note: Rules, such as Assistant Rules, are not migrated with Public Folder migrations.