XADM: Folders Created in the Public Folder Root Don't Inherit Anonymous Access Control Entries (251736)



The information in this article applies to:

  • Microsoft Exchange 2000 Server

This article was previously published under Q251736

SYMPTOMS

Public folders that are created in the public folder root do not inherit anonymous Access Control Entries (ACEs). The root folder in the public information store, "All Public Folders," has a discretionary Access Control List (ACL) that permits or denies certain types of access to an anonymous logon. These ACEs are marked as CONTAINER_INHERIT_ACE and OBJECT_INHERIT_ACE, which means that they should propagate the security settings to subfolders.

STATUS

This behavior is by design.

MORE INFORMATION

When top-level folders are created, they do not inherit the anonymous logon ACL. Rights are explicitly denied to anonymous users on folders that are located directly under the IPM subtree or the EForm registry key.

Modification Type:MinorLast Reviewed:4/25/2005
Keywords:kbbug kbnofix KB251736