View a users Full Access Permissions

Posted on 2010-08-12
Medium Priority
Last Modified: 2012-05-10
We have a need to audit mailbox permissions.  Is there a way to show all mailboxes that a user has full access to.  I really dont want to manually audit 300 mailboxes...
Question by:RMILLC
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
LVL 32

Expert Comment

ID: 33422038
get-mailbox | get-mailboxpermission | where { $_.isinherited -ne $true }

this will show you the mailbox permissions that are not inherited

Author Comment

ID: 33422138
That looks like it is providing the information I need, but the identity column is being truncated.  How would we show the column regardless of length?
LVL 32

Expert Comment

ID: 33422194
get-mailboxpermission mbx | fl
this will show you all the attribute values you can get using any mailbox for an example, pick the ones you want and then run something like

get-mailbox | get-mailboxpermission | where { $_.isinherited -ne $true } | ft Identity,User,AccessRights
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.


Author Comment

ID: 33422297
That helped a littled, let me show you what its doing:

Identity                   User                       AccessRights            
--------                   ----                       ------------            
sub.domain.com/OU/Na... NT AUTHORITY\SELF          {FullAccess, ReadPermi...

Im not able to see the full identify.
LVL 32

Accepted Solution

endital1097 earned 2000 total points
ID: 33422385
change it from ft to fl

Author Closing Comment

ID: 33422405
Excellent Powershell knowledge

Author Comment

ID: 33422416
Thank you very much for your time and expertise!

Featured Post

Office 365 Training for Admins - 7 Day Trial

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question