Exchange 2010 Mail box delegation

Hi

I'm looking for a way to extract information on who has access to what Mail boxes.. in in a Org that only has around 600 users but they have over 200 inboxes/shared mail boxes before you start looking at who has delegated access to each other mailboxes.

Thanks in Advance

Martyn
NytramAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mahesh SharmaCommented:
You can configure auditing in see event log for mailbox access logs.

set-EventLogLevel  "mailbox  server name"\MSExchangeIS\9000 Private\Send As  -level low

http://social.technet.microsoft.com/Forums/en-US/exchangesvradmin/thread/9d2f4b24-ae17-49b4-a43b-88f7ced07840/
0
NytramAuthor Commented:
Mks

Yes this would be great, but the ownership of ALL boxes is messed up so I would get 1000s of lines of stuff.. so its actual permissions extraction would be better..

M
0
Mahesh SharmaCommented:
This may help you:
http://exchangepedia.com/2008/02/how-to-list-mailboxes-with-full-mailbox-access-permission-assigned.html


Get-Mailbox | Get-MailboxPermission | ?{($_.AccessRight
s -eq "FullAccess") -and ($_.User -like 'DOMAIN\user') -and ($_.IsInherited -eq $false)} | ft Id*
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

NytramAuthor Commented:
Mks

This looks good but I got this

WARNING: By default, only the first 1000 items are returned. Use the ResultSize parameter to specify the number of
 items returned. To return all items, specify "-ResultSize Unlimited". Be aware that, depending on the actual
number of items, returning all items can take a long time and consume a large amount of memory. Also, we don't
recommend storing the results in a variable. Instead, pipe the results to another task or script to perform batch
changes.

And nothing else

M
0
NytramAuthor Commented:
I have added -ResultSize unlimited

Get-Mailbox -ResultSize unlimited | Get-MailboxPermission | ?{($_.AccessRights -eq "FullAccess") -and ($_.User -like 'DOMAIN\user') -and ($_.IsInherited -eq $false)} | ft Id*
0
Mahesh SharmaCommented:
Correct, add Get-Mailbox -ResultSize Unlimited
This will cover all mailboxes.
Let me know if this solution works for you.
0
NytramAuthor Commented:
OK its sort of working now.. Its come back with this.. but nothing useful

WARNING: The object xxx.xxx.xx/Administrative/Users/Shared Mailbox Accounts/Offers has been corrupted, and it's in an inconsistent state. The following validation errors happened:
WARNING: There is no primary SMTP address.
WARNING: The object xxx.xxx.xx/Administrative/Users/Shared Mailbox Accounts/Services has been corrupted, and it's in an inconsistent state. The following validation errors happened:
WARNING: There is no primary SMTP address.
WARNING: The object xxx.xxx.xx/Administrative/Users/Shared Mailbox Accounts/SPAM has been corrupted, and it's in an inconsistent state. The following validation errors happened:
WARNING: There is no primary SMTP address.
WARNING: The object xxx.xxx.xx/Administrative/Users/Shared Mailbox Accounts/tailoring has been corrupted, and it's in an inconsistent state. The following validation errors happened:
WARNING: DisplayName is mandatory on UserMailbox.

M
0
NytramAuthor Commented:
Looking at this ($_.User -like 'DOMAIN\user')  I need it to report on all users
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Outlook

From novice to tech pro — start learning today.