What are the default permissions on the ExchangeOAB directory?
When an OAB is being built by the system the OAB Generation process (OABGen.dll) will create the main share [ExchangeOAB] so the OAB files can be placed for pickup by the FDS (File Distribution Service) which runs on the Client Access Server.
There are two locations for this directory:
- Exchange 2007 - x:\Program Files\Microsoft\Exchange Server\ExchangeOAB
- Exchange 2010 - x:\Program Files\Microsoft\Exchange Server\V14\ExchangeOAB
If this folder is deleted, OABGen will check for it and re-create it.
The following permissions are set to this folder:
- Allow SYSTEM Full Control
- Allow Administrators: Full Control
- Allow Exchange Servers:
- Traverse Folder
- List Folder
- Read Attributes
- Read Extended Attributes
- Read Permissions
- CONTAINER_INHERIT (folder and subfolders permissions)
- Allow Exchange Servers:
- Read Data
- Read Attributes
- Read Extended Attributes
- Read Permissions
- CONTAINER_INHERIT + OBJECT_INHERIT (folder, subfolders and files permissions)
Dave