kam_uk
asked on
Verify Exchange permissions - Exchange 2010
Hi
I have an administrator account, Domain\Admin1, that should have been given some Exchange permissions by our Exchange admins.
I would like to clarify exact what permissions that account has.
Does anyone know how to do this? I think we need to use powershell now but I'm not sure of the command.
I have an administrator account, Domain\Admin1, that should have been given some Exchange permissions by our Exchange admins.
I would like to clarify exact what permissions that account has.
Does anyone know how to do this? I think we need to use powershell now but I'm not sure of the command.
What exactly do you mean by permissions? Were they added to a group like Exchange Admins which gives them rights?
You can use below PS script
$root=([adsi]“”).distingui shedName
$ou=[adsi](“LDAP://ou=x,ou =y,ou=z,”+ $root)
# fill with user CN “Common Name”
$user=$ou.psbase.children. find(“cn=t artetCN “)
$groups = $user.memberof
foreach($group in $groups)
{
$strGroup = $group.split(‘,’)[0]
$strGroup = $strGroup.split(‘=’)[1]
$strGroup
}
$root=([adsi]“”).distingui
$ou=[adsi](“LDAP://ou=x,ou
# fill with user CN “Common Name”
$user=$ou.psbase.children.
$groups = $user.memberof
foreach($group in $groups)
{
$strGroup = $group.split(‘,’)[0]
$strGroup = $strGroup.split(‘=’)[1]
$strGroup
}
ASKER
Hi
Yes, they should have been added to an Exchange group but I don't know how to check this?
Is there no powershell command like "get-exchpermissions -user xxx" etc?
Yes, they should have been added to an Exchange group but I don't know how to check this?
Is there no powershell command like "get-exchpermissions -user xxx" etc?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
no you would need to create a powershell script to do that. Do you have access to the Exchange console or Active Directory Users and Computers mmc?
ASKER
Thanks!
I ran that command, but I can't see the "User" column easily, do you know if it's possible to specify that it displays the full characters?
Secondly, I want to check if the account is an Exchange View-Only Admin, is this possible via the powershell command?
I ran that command, but I can't see the "User" column easily, do you know if it's possible to specify that it displays the full characters?
Secondly, I want to check if the account is an Exchange View-Only Admin, is this possible via the powershell command?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.