Home > Exchange 2010 AKA E14, Exchange and UC > Exchange 2010/2007 Virtual Directory Default Permissions

Exchange 2010/2007 Virtual Directory Default Permissions


We see that a lot on forums users asking for the default permissions on virtual directories, also in some troubleshooting we found that
wrong NTFS permissions or in-correct IIS authentication might affect autodiscover, EWS, OAB or OWA/ECP, so for reference here they are:
virtual
Directory
Authentication
Configured
NTFS permissions
Autodiscover
Anonymous
Authentication Users
(read, Read and Execute)
Basic Auth.
System (Full Control)
Windows Auth.
Administrators (Full Control)
ECP
Anonymous
Authentication Users (read)
Basic Auth.
System (Full Control)
Administrators (Full Control)
EWS
Anonymous
Authentication Users (read)
Windows Auth.
System (Full Control)
Administrators (Full Control)
EAS
Basic Auth.
Authentication Users (read)
System (Full Control)
Administrators (Full Control)
OAB
Windows Auth.
System (Full Control)
Organization Management
 (Traverse, Read & Execute,
Read Attribute, Read Extended Attribute)
View only organizations Managenet
(Traverse, Read & Execute
, Read Attribute, Read Extended Attribute)
Administrators (Full Control)
IIS_IUSR (Traverse, Read &
Execute, Read Attribute,
 Read Extended Attribute)
OWA
Basic Auth.
Authentication Users (read)
System (Full Control)
Administrators (Full Control)
PowerShell
Anonymous
Authentication Users (read)
System (Full Control)
Administrators (Full Control)
RPC
Basic Auth
Windows Auth.
  1. solgae
    February 20, 2013 at 6:00 pm

    Above spreadsheet is ONLY for Exchange 2010. With Exchange 2007, EWS needs to have Anonymous Authentication disabled.

  2. solgae
    February 20, 2013 at 6:02 pm

    Same thing goes for Autodiscover, and there’s no ECP or EAS in Exchange 2007. If you want specific details for Exchange 2007, look here:
    http://blogs.technet.com/b/exchange/archive/2008/02/01/3404755.aspx

  1. December 12, 2013 at 12:34 am

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: