• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 584
  • Last Modified:

List Distribution-Groups and the users that can change them


as the title already says, I need to list every distribution-group in our Exchange 2007 environment and the users that are able to change these groups (i.e. add or remove members).

I was able to Google a script that would do this, but it only lists users that have the "WriteMember" and "ReadMember" property and nothing else:
Get-DistributionGroup | Get-ADPermission | ? {$_.Properties -like "member"} | Select Identity,User

Open in new window

However, it does not list users that have either full access or at least write access (via the ADUC console) on a distribution group which I found strange because full/write access includes the "WriteMember" property.
1 Solution
Give this one a try. Hopefully it'll do what your after.

Get-DistributionGroup |
Get-ADPermission |
Where { ($_.AccessRights -match 'Write') -or ($_.AccessRights -eq 'GenericAll') }

Open in new window

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Tackle projects and never again get stuck behind a technical roadblock.
Join Now