powershell add permissions to an exchange department

http://technet.microsoft.com/en-us/library/bb738155(EXCHG.80).aspx

This topic lists the filterable properties for the -Filter parameter in Exchange Server 2007/2010

Hi,

did you provide the following permission to mailbox

Organization Management

Recipient Management

Help Desk

Hi,

check this one

http://jacobddixon.wordpress.com/2011/09/11/cannot-bind-parameter-recipientfilter-to-the-target-exception-setting-recipientfilter/

oops, working link :
http://technet.microsoft.com/en-us/library/bb738155(EXCHG.80).aspx

Department attribute only works with

Get-Contact

Get-Recipient

Get-User

Make sure your command is as follows

 

Get-mailbox -Filter {(Department -eq "Work Program")}

Select allOpen in new window

I've only corrected the first part of the command, up to the first pipe. The error looks like there are too many quotes

Please show us the line you're using.

Department is not an attribute on objects returned by Get-Mailbox, which is why you're getting the failure.

You may need to nest an Get-ADUser Command combined with a Get-Mailbox command to get it to filter users which have Departments set.

ahh i see, i also tried doing it the same way i do dynamic distrbutions that failed too, heres my attempts (the first which i now know wont work as i cant filter by department

Get-mailbox -Filter {(Department -eq "Work Programme")} |  ForEach-Object {Add-MailboxFolderPermission $_":\Calendar" -User "User@domain" -AccessRights Reviewer}

Get-mailbox -RecipientFilter {(Department -eq "Work Programme")} | ForEach-Object {Add-MailboxFolderPermission $_":\Calendar" -User "User@domain" -AccessRights Reviewer}

Select allOpen in new window

Ahh, I just realised that your trying to use the department attribute, this wont work as Department is only available to filter when using

Get-Contact
Get-Recipient
Get-User

Your going to have to amend it which is why the example in the blog was talking about using customattribute1

how do i ammed to make the above work via dept?

Try this or something similar:

Import-Module ActiveDirectory
ForEach-Object (Get-AdUsers -Filter {(Department -eq "Work Programme")}) {
	Get-mailbox -Identity $_.Name | ForEach-Object {Add-MailboxFolderPermission $_":\Calendar" -User "User@domain" -AccessRights Reviewer}
}

Select allOpen in new window

Sorry I had a typo.

Get-AdUsers should be Get-AdUser

I've modified the script a bit, this seems more robust:

Import-Module ActiveDirectory
$users = Get-AdUser -Filter {(Department -eq "Work Programme")}
foreach ($user in $users) { 
	Get-mailbox -Identity $user.name | Add-MailboxFolderPermission $_":\Calendar" -User "User@domain" -AccessRights Reviewer
	}

Select allOpen in new window

it wont run, keeps just giving me the double >>

for future ref what does it mean when its doing this and how can i break out of it?
i tried exit and ctrl + C

Thanks

VERBOSE: Connected to AXWELL.domain.local.
[PS] C:\Windows\system32>Import-Module ActiveDirectory
[PS] C:\Windows\system32>$users = Get-AdUser -Filter {(Department -eq "Work Programme")}
[PS] C:\Windows\system32>foreach ($user in $users) { Get-mailbox -Identity $user.name | Add-MailboxFolderPermission $_":
\Calendar" -User User@domain.local"  -AccessRights Reviewer }
>>
>>
>>
>>

Select allOpen in new window

>> means it's waiting for more input.  Just hit enter :)

You can save the text I've given you to a .ps1 file and run it from the powershell like so:

.\script.ps1

Select allOpen in new window

you forgot a quote

-User User@domain.local"  

ahh i see,

i hit enter and it just gives more >> how many times before i can break out of the >> ?

got another error now

The input object cannot be bound to any parameters for the command either because the command does not take pipeline in
put or the input and its properties do not match any of the parameters that take pipeline input.
    + CategoryInfo          : InvalidArgument: (User Name:PSObject) [Add-MailboxFolderPermission], ParameterB
   indingException
    + FullyQualifiedErrorId : InputObjectNotBound,Add-MailboxFolderPermission

Can you please show us the whole code you're using now.

excatly what you put above... (obivously user is replaced with an actual user)

Import-Module ActiveDirectory
$users = Get-AdUser -Filter {(Department -eq "Work Programme")}
foreach ($user in $users) { Get-mailbox -Identity $user.name | Add-MailboxFolderPermission $_":\Calendar" -User "user@domain.local"  -AccessRights Reviewer }

Select allOpen in new window

I should point out that you cannot pipe to Add-MailboxFolderPermission, so Get-Mailbox is not required at all :)  I've tested my last snippet of code.

Thanks a bunch :)