Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Using security groups to set calendar permissions does not work in an Exchange resource forest

Using security groups to set calendar permissions does not work in an Exchange resource forest

View products that this article applies to.

Symptoms

Consider the following scenario:
  • You have a resource forest and an account forest in a Microsoft Exchange Server environment.
  • A user in the account forest has a linked mailbox (MB1) in the resource forest.
  • You create a mailbox (MB2) in the resource forest.
  • You add MB1 to a mail-enabled security group in the resource forest.
  • You grant the Free/Busy time, subject, location permission for the Calendar folder of MB2 to the security group.
  • The user logs on to MB1 and creates a meeting request, and then clicks the Scheduling Assistant tab in Microsoft Outlook.
  • The user adds MB2 as an attendee.
In this scenario, the user cannot see the details of existing appointments of MB2.

↑ Back to the top

Cause

This issue occurs because the user is not recognized as a member of the security group. Therefore, only default permissions are applied to the user.

↑ Back to the top

Resolution

To resolve this issue, add a UseDisabledAccount key in the web.config file. To do this, follow these steps:
  1. Open the web.config file in the following locations:
    • %ExchangeInstallPath%\ClientAccess\Owa\web.config
    • %ExchangeInstallPath%\ClientAccess\exchweb\Ews\web.config
  2. Change the code in the web.config file as follows:
    <appSettings>
     
    // Add the following line.
           <add key="UseDisabledAccount" value="1" />
     
    </appSettings>
  3. Recycle the MSExchangeOWAAppPool and MSExchangeServicesAppPool application pools. Or, run the iisreset command to reset Internet Information Services (IIS).
Note For Exchange 2010, apply the following update rollup or a later one:

          2866475  Description of Update Rollup 2 for Exchange Server 2010 Service Pack 3  

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

More Information

For more information about how to create a linked mailbox, go to the following Microsoft website:
How to create a linked mailbox
For more information about the Free/Busy time, subject, location permission, go to the following Microsoft website:
General information about Free/Busy and calendar permissions
For more information about how to recycle an application pool, go to the following Microsoft website:
How to recycle an application pool

↑ Back to the top

Keywords: kb, kbqfe, kbfix, kbsurveynew, kbexpertiseinter

↑ Back to the top

Article Info
Article ID : 2882961
Revision : 1
Created on : 1/7/2017
Published on : 3/7/2016
Exists online : False
Views : 260