stats and permissions

Posted on 2011-05-10
Last Modified: 2012-05-11
in active directory usesr and computers is there any way to list in like a report /table view when domain accounts were created in descending order (oldest first).

Also is there anyway to check exchange mailbox/public folder permissions associated with domain accounts/domain groups in ADUC?
Question by:pma111
    LVL 15

    Assisted Solution


    Active Directory - you can dump the accounts to csv file then open that csv with Excel and save as Excel. In Excel you can sort away.

    csvde -f export-activedirectory1.csv -d dc=mydomainname,dc=com

    I know I have seen scripts for Exchange mailbox permission reports, they are different for Exchange 2007, Exchange 2010 and 2003.

    There are easy to use tool which provide free 30 day use. I would recommend using one of them if you are not planning on running the report often or are looking for an easy to use tool.

    LVL 3

    Author Comment

    >>There are easy to use tool which provide free 30 day use. I would recommend using one of them if you are not planning on running the report often or are looking for an easy to use tool.


    Can you provide a link to such tools for 2003 ^^


    csvde -f export-activedirectory1.csv -d dc=mydomainname,dc=com

    Where are you runing this command?
    I have active directory users and computers, can you execute such queries in there, or is csvde a specialist tool?
    LVL 13

    Assisted Solution

    First, if you have Exchange Management Shell:

    get-user | Sort-Object -Property whencreated | Select-Object name, samaccountname, recipienttype, whencreated

    Open in new window

    The second: unfortunately you can only enumerate permissions by objects, not by users/groups. To get a user/group based list of permissions, you have to browse through all the objects. Here is an example for mailboxes:

    $account = "yourdomain\userorgroupname"
    $mbxs = Get-Mailbox 
    $mbxs | ?{$_ | Get-MailboxPermission -User $account}
    $pfs = Get-PublicFolder -Recurse 
    $pfs | ?{$_ | Get-PublicFolderClientPermission -User $account} | Select-Object identity

    Open in new window

    LVL 13

    Expert Comment

    and also for public folders in the second part of the above solution.
    LVL 3

    Author Comment

    Ah I dont have exchange management shell, can I run such scripts with just a basic domain user rights or am I going to need domain admin type priveleges in the domain. Is exchaneg management shell a free download?
    LVL 13

    Accepted Solution

    ESM is not freely downloadable, but it is part of the Exchange setup disk, if you have Exchange Server you may be able install it onto your desktop and use.
    Exchange 2007 has both 32 and 64 versions (32 bit is only demo, but it is good for managing Exchange from a 32 bit client)
    Unfortunately Exchange 2010 has only 64 bit setup disk.

    You can run Get-... cmdlets with only low privileges, so you do not have to be Domain Admin.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Resolve Outlook connectivity issues after moving mailbox to new Exchange 2016 server
    Easy CSR creation in Exchange 2007,2010 and 2013
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    This video discusses moving either the default database or any database to a new volume.

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now