[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 310
  • Last Modified:

stats and permissions

in active directory usesr and computers is there any way to list in like a report /table view when domain accounts were created in descending order (oldest first).

Also is there anyway to check exchange mailbox/public folder permissions associated with domain accounts/domain groups in ADUC?
0
pma111
Asked:
pma111
  • 3
  • 2
3 Solutions
 
markpalinuxCommented:

Active Directory - you can dump the accounts to csv file then open that csv with Excel and save as Excel. In Excel you can sort away.

csvde -f export-activedirectory1.csv -d dc=mydomainname,dc=com

http://computerperformance.co.uk/Logon/Logon_CSVDE_Export.htm


I know I have seen scripts for Exchange mailbox permission reports, they are different for Exchange 2007, Exchange 2010 and 2003.

There are easy to use tool which provide free 30 day use. I would recommend using one of them if you are not planning on running the report often or are looking for an easy to use tool.

Mark
0
 
pma111Author Commented:
>>There are easy to use tool which provide free 30 day use. I would recommend using one of them if you are not planning on running the report often or are looking for an easy to use tool.

Thanks

Can you provide a link to such tools for 2003 ^^

Also:

csvde -f export-activedirectory1.csv -d dc=mydomainname,dc=com

Where are you runing this command?
I have active directory users and computers, can you execute such queries in there, or is csvde a specialist tool?
0
 
soostibiCommented:
First, if you have Exchange Management Shell:

get-user | Sort-Object -Property whencreated | Select-Object name, samaccountname, recipienttype, whencreated

Open in new window


The second: unfortunately you can only enumerate permissions by objects, not by users/groups. To get a user/group based list of permissions, you have to browse through all the objects. Here is an example for mailboxes:

$account = "yourdomain\userorgroupname"

$mbxs = Get-Mailbox 
$mbxs | ?{$_ | Get-MailboxPermission -User $account}

$pfs = Get-PublicFolder -Recurse 
$pfs | ?{$_ | Get-PublicFolderClientPermission -User $account} | Select-Object identity

Open in new window

0
Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

 
soostibiCommented:
and also for public folders in the second part of the above solution.
0
 
pma111Author Commented:
Ah I dont have exchange management shell, can I run such scripts with just a basic domain user rights or am I going to need domain admin type priveleges in the domain. Is exchaneg management shell a free download?
0
 
soostibiCommented:
ESM is not freely downloadable, but it is part of the Exchange setup disk, if you have Exchange Server you may be able install it onto your desktop and use.
Exchange 2007 has both 32 and 64 versions (32 bit is only demo, but it is good for managing Exchange from a 32 bit client)
Unfortunately Exchange 2010 has only 64 bit setup disk.

You can run Get-... cmdlets with only low privileges, so you do not have to be Domain Admin.
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now