Wrong permissions being set on public folders at the root OU level, exposing them to other Exchange users across the AD forest.
This problem may occur if the Mail Update Settings are not set in HC panel on the Exchange Provisioning Node (added in HC cluster with Mail role). In order to fix this, please follow the below instructions:
- Please make sure that you have enabled the Mail Scheduler Settings on the Provisioning node from schedulers settings by navigating to this path: Panel Configuration :: Configure Services :: Scheduler Settings at host admin level.
- Also restart the Hosting Controller Sync services on the Exchange Provisioning node.
After this permissions will be set correctly on Public Folders at the root O.U. level.