Direct Booking

Hi,

Some questions regarding direct booking.

We have a resource account (conference room) set up with
rights granted to a particular group of users to do
direct booking. The permissions we permit to the group
is "Create items", "Read items", "Folder visible" and
with "Edit items" set to "All" and "Delete items" set
to "Own".
With this settings, we found that everyone in the group
could view the appointment in the Outlook resource even
though he/she is not one of attendees or the meeting
organizer.
Please advise what permissions we should set to allow
only the attendees and the organizer to see the
booking. Thanks in advance.

Esmond,

The minimum permissions for getting the Direct Booking feature to work allow
any authorized user access to the Calendar folder for the Resource account.
So, at any time, an authorized user can always do a File - Open - Other
User's Folder and open the Calendar folder. These permissions are the
minimum permissions to get the direct booking feature to work. If these
permissions expose too much information on the resource then you might have
to resort to a Delegate manually accepting/declining the meeting requests
for the resource.

Hope this helps.

--
Greg Mansius [MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights.

"Esmond Koo" wrote in message
...
Hi,

Some questions regarding direct booking.

We have a resource account (conference room) set up with
rights granted to a particular group of users to do
direct booking. The permissions we permit to the group
is "Create items", "Read items", "Folder visible" and
with "Edit items" set to "All" and "Delete items" set
to "Own".
With this settings, we found that everyone in the group
could view the appointment in the Outlook resource even
though he/she is not one of attendees or the meeting
organizer.
Please advise what permissions we should set to allow
only the attendees and the organizer to see the
booking. Thanks in advance.

Hi Greg,

Thanks for the response.

I spent this whole afternoon to check all the technical
document trying to learn more about direct booking. I
have few more questions and hope you can help.

1. You said using Delegate is one way to tackle the
problem we have. Does it mean that I could not use
direct booking? If not, is there way to assign a
delegate to accept meeting requests automatically. The
thing is somehow the problem I mentioned was not there
before until one day we might have accidentally deleted
some user/group objects in AD during the AD housekeeping
process and we think the deleted user/group objects might
be one(s) granted appropriate rights to access the
Calender folder of the resource account. That is,
previously, all our department users could do resource
booking but could not view other bookings of which he/she
is not one of the attendees.

2. One thing I tried this afternoon was that I changed
the permission for the department user group to access
the Calendar folder with "Create items" and set
the "edit" and "delete" items rights to "Own". But then
those users are still able to read/delete details of
other bookings he/she not an attendee. Shouldn't the
user group has access to other bookings if the group is
not given "Read items" rights. I am really confused.

3. Currently, we have direct booking configured, but then
we also have 2 individual users configured as Delegate to
the Calendar folder with "Editor" rights. Is this OK? I
mean can we have Direct Booking and Delegate both
activated at the same time.

I thank you in advance for your time.

Esmond

-----Original Message-----
Esmond,

The minimum permissions for getting the Direct Booking
feature to work allow
any authorized user access to the Calendar folder for
the Resource account.
So, at any time, an authorized user can always do a
File - Open - Other
User's Folder and open the Calendar folder. These
permissions are the
minimum permissions to get the direct booking feature to
work. If these
permissions expose too much information on the resource
then you might have
to resort to a Delegate manually accepting/declining the
meeting requests
for the resource.

Hope this helps.

--
Greg Mansius [MSFT]

This posting is provided "AS IS" with no warranties, and
confers no rights.

"Esmond Koo" wrote
in message
...
Hi,

Some questions regarding direct booking.

We have a resource account (conference room) set up
with
rights granted to a particular group of users to do
direct booking. The permissions we permit to the group
is "Create items", "Read items", "Folder visible" and
with "Edit items" set to "All" and "Delete items" set
to "Own".
With this settings, we found that everyone in the group
could view the appointment in the Outlook resource even
though he/she is not one of attendees or the meeting
organizer.
Please advise what permissions we should set to allow
only the attendees and the organizer to see the
booking. Thanks in advance.


.