Changes in Outlook 2010 folder permissions not shown in Active Directory

问题

I'm using the IADs object from VBA to get permissions information on mailboxes from ActiveDirectory and get plausible results but after I give a user permission to read my mailbox using the Folder Permissions dialog in Outlook Client and run the code again I see no change in the Active Directory permissions for msExchMailBoxSecurityDescriptor.

回答1:

Folder level (unlike mailbox level) permissions are stored in the folders, not in the Active Directory.

Permissions can be accessed using

1. Extended MAPI (C++ or Delphi) - open PR_ACL_TABLE property using IMAPIFolder::OpenProperty. You can see that data in OutlookSpy - click IMAPIFolder button, go to the PR_ACL_TABLE tab.

2. Redemption (it wraps Extended MAPI and can be used from any language) - see RDOACL object (accessing through the RDOFolder.ACL property).

来源：https://stackoverflow.com/questions/21325153/changes-in-outlook-2010-folder-permissions-not-shown-in-active-directory