Whats changed in the security model for the Exchange store?
The Exchange store supports folder and item level access control and stores this information based on the Microsoft Windows® server operating systems security descriptor format. This means that applications can modify permissions on any item in the Exchange store and properties of these items using both grant and deny access control entries using Windows server security principals directly. For backward compatibility, the per-folder MAPI PR_ACL_TABLE format is still supported. For more information, see Security. The Exchange store provides access to an item’s security descriptor through an XML format. This format enables application developers to read and write item security descriptors by using only XML. For more information, see Security. Any client with the proper access rights that has the Microsoft XML (MSXML) Component Object Model (COM) component can read, modify and write security descriptors for Exchange store items. The MSXML COM component is part of Microsoft Internet Explor
