What are the default permissions on the ExchangeOAB directory?

  • Article

When an OAB is being built by the system the OAB Generation process (OABGen.dll) will create the main share [ExchangeOAB] so the OAB files can be placed for pickup by the FDS (File Distribution Service) which runs on the Client Access Server.

There are two locations for this directory:

  1. Exchange 2007 - x:\Program Files\Microsoft\Exchange Server\ExchangeOAB
  2. Exchange 2010 - x:\Program Files\Microsoft\Exchange Server\V14\ExchangeOAB

If this folder is deleted, OABGen will check for it and re-create it.

The following permissions are set to this folder:

  • Allow SYSTEM Full Control
  • Allow Administrators: Full Control
  • Allow Exchange Servers:
    • Traverse Folder
    • List Folder
    • Read Attributes
    • Read Extended Attributes
    • Read Permissions
    • CONTAINER_INHERIT (folder and subfolders permissions)
  • Allow Exchange Servers:
    • Read Data
    • Read Attributes
    • Read Extended Attributes
    • Read Permissions
    • CONTAINER_INHERIT + OBJECT_INHERIT (folder, subfolders and files permissions)

Dave