Exchange item security woes
Everyone knows you can mail-enable a global security group in order to have it’s members’ mailbox account logons gain access to an object (I mean, c’mon!). But, you might be pulling your hair out as to why, say…. a public folder you’ve added an ACE for this mail-enabled security group is not reflected on the users’ mailboxes via their Outlook session (it’s my friend’s Outlook session, I swear).
Simple… as you do with user sessions and group membership (by way of kerberos cert grants), you need to log out and back on. What’s that you say? “I’ve rebooted several times and still nothing. It’s Friday afternoon… I don’t need this shit.”
Well, silly! Why don’t you just go into Outlook’s account settings> email account settings> more settings> security tab> check off “always prompt for logon credentials” under “User identification”> OK your way out. Close outlook. Reopen it. Log back on to Exchange, and the god damn permissions granted by the m*fing ACE will actually be reflected.
Go back in and uncheck that option, and you’re back to normal. And you only developed a single twitch in process.