Symptoms
After you configure Extended Protection in Microsoft Exchange Server, you can't change permissions on a public folder by using Microsoft Outlook if the public folder is hosted in a secondary public folder mailbox on a different server.
Resolution
To fix this issue, install the following security updates, as appropriate:
-
Description of the security update for Microsoft Exchange Server 2019: June 13, 2023 (KB5026261)
-
Description of the security update for Microsoft Exchange Server 2016: June 13, 2023 (KB5025903)
After you install the updates, you must configure a setting override across all Exchange servers in the organization that host public folders. To add the setting override as a global override that's applicable to all Exchange servers, run the following commands in the given order.
Important: Before you enable the override, make sure that the June 2023 (or later) security update is installed on all Exchange servers. Because the June 2023 (or later) update isn't available for Microsoft Exchange Server 2013, you must move all public folders to servers that are running Exchange Server 2019 or 2016 before you enable the override.
- New-SettingOverride -Name "UseMrsProxyForPublicFolderSync" -Component Mapi -Section UseMrsProxyForPublicFolderSync -Parameters ("Enabled=True") -Reason "Enable MRS Proxy for PF Sync"
- Get-ExchangeDiagnosticInfo -Process Microsoft.Exchange.Directory.TopologyService -Component VariantConfiguration -Argument Refresh
- Restart-Service -Name W3SVC, WAS -Force
Notes:
-
If you experience any issues after you enable the setting override, contact Microsoft Support.
-
To delete the setting override, run the following commands, in the given order:
- Remove-SettingOverride -Identity "UseMrsProxyForPublicFolderSync"
- Get-ExchangeDiagnosticInfo -Process Microsoft.Exchange.Directory.TopologyService -Component VariantConfiguration -Argument Refresh
- Restart-Service -Name W3SVC, WAS -Force
