stats and permissions

in active directory usesr and computers is there any way to list in like a report /table view when domain accounts were created in descending order (oldest first).

Also is there anyway to check exchange mailbox/public folder permissions associated with domain accounts/domain groups in ADUC?
LVL 3
pma111Asked:
Who is Participating?
 
soostibiConnect With a Mentor Commented:
ESM is not freely downloadable, but it is part of the Exchange setup disk, if you have Exchange Server you may be able install it onto your desktop and use.
Exchange 2007 has both 32 and 64 versions (32 bit is only demo, but it is good for managing Exchange from a 32 bit client)
Unfortunately Exchange 2010 has only 64 bit setup disk.

You can run Get-... cmdlets with only low privileges, so you do not have to be Domain Admin.
0
 
markpalinuxConnect With a Mentor Commented:

Active Directory - you can dump the accounts to csv file then open that csv with Excel and save as Excel. In Excel you can sort away.

csvde -f export-activedirectory1.csv -d dc=mydomainname,dc=com

http://computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm


I know I have seen scripts for Exchange mailbox permission reports, they are different for Exchange 2007, Exchange 2010 and 2003.

There are easy to use tool which provide free 30 day use. I would recommend using one of them if you are not planning on running the report often or are looking for an easy to use tool.

Mark
0
 
pma111Author Commented:
>>There are easy to use tool which provide free 30 day use. I would recommend using one of them if you are not planning on running the report often or are looking for an easy to use tool.

Thanks

Can you provide a link to such tools for 2003 ^^

Also:

csvde -f export-activedirectory1.csv -d dc=mydomainname,dc=com

Where are you runing this command?
I have active directory users and computers, can you execute such queries in there, or is csvde a specialist tool?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
soostibiConnect With a Mentor Commented:
First, if you have Exchange Management Shell:

get-user | Sort-Object -Property whencreated | Select-Object name, samaccountname, recipienttype, whencreated

Open in new window


The second: unfortunately you can only enumerate permissions by objects, not by users/groups. To get a user/group based list of permissions, you have to browse through all the objects. Here is an example for mailboxes:

$account = "yourdomain\userorgroupname"

$mbxs = Get-Mailbox 
$mbxs | ?{$_ | Get-MailboxPermission -User $account}

$pfs = Get-PublicFolder -Recurse 
$pfs | ?{$_ | Get-PublicFolderClientPermission -User $account} | Select-Object identity

Open in new window

0
 
soostibiCommented:
and also for public folders in the second part of the above solution.
0
 
pma111Author Commented:
Ah I dont have exchange management shell, can I run such scripts with just a basic domain user rights or am I going to need domain admin type priveleges in the domain. Is exchaneg management shell a free download?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.