How to fix: Cannot move or copy folders. Cannot copy folder. A top-level cannot…

The Error

When copy and paste folders/contacts in Outlook/Office 365 from/to public folders, the following error pops up.

Cannot move or copy folders. Cannot copy folder. A top-level cannot be copied to one of its subfolders. Or, you may not have approriate permissions for the folder. To check your permissions for the folder, right-click the folder, and then click Properties on the shortcut menu.

The Fix

1 Open Exchange admin center (https://outlook.office365.com/ecp)

2 Navigate to “public folder -> public folders”

Exchange admin center - public folders
Exchange admin center – public folders

3 Navigate to the public folder which is having the problem.

4 Assign that user as “Owner” of that specific public folder

Exchange admin center - public folders
Exchange admin center – public folders
Exchange admin center - public folders - Public folder permissions
Exchange admin center – public folders – Public folder permissions
Exchange admin center - public folders - Public folder permissions
Exchange admin center – public folders – Public folder permissions

5 Try the operation again, once finished, change back the permission for that user to “Author” or other permission.


How to: Connect PowerShell to Office 365 Exchange with Multi-factor authentication (MFA) enabled

Keywords: Microsoft, Microsoft Windows, Microsoft Office 365, Microsoft Windows PowerShell, Microsoft Office 365 Exchange, Multi-factor authentication, MFA, ecp, connect to Microsoft Office 365 Exchange via PowerShell with MFA enabled

1 Use Microsoft Edge or Internet Explorer (You have to use Microsoft Edge or Internet Explorer for this one) to login to: https://outlook.office365.com/ecp/

2 Click on “hybrid”, find “The Exchange Online PowerShell Module supports multi-factor authentication. Download the module to manage Exchange Online more securely. Learn more” click on “configure”

Microsoft Office 365 Exchange admin center
Microsoft Office 365 Exchange admin center

3 Click on “Open” button from the browser

Microsoft Edge - Microsoft Office 365 Exchange admin center - hybrid - configure
Microsoft Edge – Microsoft Office 365 Exchange admin center – hybrid – configure

4 If you get a pop up asking “How do you want to open this?” Select “Microsoft Edge” then click on “OK” button

Microsoft Edge - "How o you want to open this?"
Microsoft Edge – “How o you want to open this?”

5 A Windows PowerShell window will pop up upon finishing downloading.

Microsoft Windows PowerShell
Microsoft Windows PowerShell

6 Enter following command and press “Enter” key (Change “[email protected]” to proper administrator email address)

Connect-EXOPSSession -UserPrincipalName [email protected]

e.g.

Connect-EXOPSSession -UserPrincipalName [email protected]

7 Sign with “Sign in to your account” pop up window, enter your password then authorise via MFA

Microsoft Windows PowerShell - MFA login
Microsoft Windows PowerShell – MFA login

8 The warning is fine, we can still use the PowerShell to manage Microsoft Office 365 Exchange

 Microsoft Windows PowerShell - Exchange logged in
Microsoft Windows PowerShell – Exchange logged in

Now, you have successfully connected to Microsoft Office 365 Exchange via Windows PowerShell.

Bonus:

You can use following command to list identity information from your groups

Get-UnifiedGroup -Identity "Group Name" | Format-List

e.g.

Get-UnifiedGroup -Identity "Financial" | Format-List

How to hide users from address lists (GAL/Global Address List etc.) By configuring Office 365/Exchange server

(This article is for Office 365/Exchange server Administrators)

Keywords: hide users from GAL, hide users from global address list, office 365, exchange server, hide users from address list, Office 365 administrator, O365

1 Login to https://outlook.office365.com/ecp with Office 365 Administrator account

2 Click on “recipients” -> double click on the name of the user you want to hide from address list

Microsoft Exchange admin center - recipients
Microsoft Exchange admin center – recipients

3 Check the “Hide from address lists” box, click on “Save” button

Microsoft Exchange admin center - User editor
Microsoft Exchange admin center – User editor

4 Wait for 2 minutes, check the Outlook Global Address List again, the hidden user should not appear in the list anymore.

How long does it take for Microsoft Exchange mail flow rule to take effect (And what is Enforce, Test with Policy Tips, Test without Policy Tips)

From the real world test, it can take up from 2-10 minutes (usually it will not work instantly, you have to wait at least 2-10 minutes.)

From Microsoft documents: They suggest to wait 30 minutes.

Important

Wait 30 minutes after creating a rule before you test it. If you test immediately after you create the rule, you may get inconsistent behaviour. If you’re using Exchange Server and have multiple Exchange servers, it may take even longer for all the servers to receive the rule.

https://docs.microsoft.com/en-us/exchange/security-and-compliance/mail-flow-rules/test-mail-flow-rules

Bonus:

Modes

Enforce: Apply the rule

Test with Policy Tips: Use this mode together with an incident report action, and you can receive an email message each time an email matches the rule.

Test without Policy Tips: This mode is only available if you’re using Data loss prevention (DLP), which is available with some Exchange Online and Exchange Online Protection (EOP) subscription plans. With this mode, a message is set to the sender when a message they are sending matches a policy, but no mail flow actions are taken.

Find out more from “Test a mail flow rule in Exchange Online

Office 365 Mailbox/Shared mailbox Litigation hold

Shared Mailbox

1.1 Sign in from https://admin.microsoft.com then click on “Exchange” or use this link to open the “Exchange admin center” directly https://outlook.office365.com/ecp

Microsoft Office 365 admin center -> Exchange
Microsoft Office 365 admin center -> Exchange

1.2 Click on recipients -> shared -> double click on one of the shared mailbox

Exchange admin center -> recipients -> shared
Exchange admin center -> recipients -> shared

1.3 Click on mailbox features -> Enable (Under “Litigation hold: Disabled”)

Exchange admin center -> mailbox features
Exchange admin center -> mailbox features

1.4 You can click on “Save” button in next window, or specify hold duration in days, message you want to show to the user (If leave them empty, users will not know Litigation is enabled)

Exchange admin center -> litigation hold
Exchange admin center -> litigation hold

Users

2.1 Sign by following step 1.1

2.2 Following step 1.2 (Note: Instead of click on “shared”, this time we click on “mailboxes”)

2.3 Follow step 1.3 to 1.4

Extended reading:

In-Place Hold (Retention policy) and Litigation Hold: https://docs.microsoft.com/en-us/exchange/security-and-compliance/in-place-and-litigation-holds

How to configure Office 365, Microsoft Outlook Send As & Force Oultook update Global Address List (GAL)

Keywords: Office 365, Oultook Send As, Force Global Address List (GAL) update, This message could not be sent

1 Configure Send As permission in Microsoft Exchange

1.1 Login to Office 365 Exchange: https://outlook.office365.com/ecp

1.2 Click on “recipients” -> “mailboxes” or “shared”

1.3 Double click on one of the mailbox from the results list

1.4 Click on “mailbox delegation”

1.5 Scroll to “Send As” section

1.6 Click on “+” button, add user who should have Send As permission for the mailbox.

1.7 Click on “Save” button.

2 Send As from Outlook Online

2.1 Login to https://outlook.office365.com as the user we have specified in step 1.6

2.2 Click on your profile image at top right corner

2.3 Click on “Open another mailbox”

2.4 Enter the mailbox we give permission to from step 1.3 and click on “Open”

2.5 Now you can send email from this email address.

3 Send As from Microsoft Outlook Desktop Application

3.1 Launch Desktop Outlook

3.2 Click on “New Email” button

3.3 Click on “Options” from Menu then click on “From”

3.4 Click on From, if the address you want to send as appear underneath the “From” button, select it, if not, Click on “Other Email Address…”

3.5 Type the email address you have configured from step 1.3

3.6 Now you can send email from this email address.

4 How to resolve following Error

Note: You may encounter following error after step 3.6

This message could not be sent. You do not have the permission to send the message on behalf of the specified user.

This message could not be sent. You do not have the permission to send the message on behalf of the specified user.
(Microsoft Outlook - Send As)
This message could not be sent. You do not have the permission to send the message on behalf of the specified user.
(Microsoft Outlook – Send As)

To resolve this issue, try following method to Force Oultook update Global Address List (GAL) to resolved the issue.

4.1 Make sure the Desktop Outlook is closed

4.2 Open following path from Windows File Explorer

%userprofile%\AppData\Local\Microsoft\Outlook\Offline Address Books\

4.3 Cut everything within this folder

4.4 Create a new folder name it backup and open it

4.5 Paste to the backup folder

4.6 Try to launch Desktop Outlook and follow Section 3 again to Send As, this time there should be no error.

How to: Manage junk mail settings for shared mailbox – Office 365

Keyword: Junk mail, shared mailbox, mailbox, ECP, Exchange admin center

While users can login to Office 365 to modify their mailbox settings, it is a bit tricky to modify settings for shared mailbox.

Add email address to safe sender for shared mailbox Via Exchange admin center

1 Access the mailbox settings page from here:

https://outlook.office365.com/ecp/[email protected] (Sample Shared Mailbox Email Address)

2 On the options, click block or allow. Add email address to safe sender and click Save.

This method can also be used for non-shared mailboxes