[Last Call] Learn about multicloud storage options and how to improve your company's cloud strategy. Register Now

x
?
Solved

script to identify any explicit permissions assigned to distribution lists.

Posted on 2014-02-24
4
Medium Priority
?
236 Views
Last Modified: 2014-02-26
Hello,
i am looking for a script to identify any explicit permissions assigned to distribution lists.
0
Comment
Question by:claudiamcse
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 43

Expert Comment

by:Vasil Michev (MVP)
ID: 39884871
What permissions are you looking for? SendAs/Send on behalf can be easily obtained:

$DGs = Get-DistributionGroup -ResultSize Unlimited

#For Send As permissions
$DGs | % {Get-RecipientPermission -Identity $_.Identity}

#For Send on Behalf permissions
$DGs | ? {$_.GrantSendOnBehalfTo -ne ""} | ft Name,DisplayName,PrimarySmtpAddress,GrantSendOnBehalfTo

Open in new window


Oh, and this will work for Exchange Online PowerShell only.
0
 

Author Comment

by:claudiamcse
ID: 39889536
Oh. This actually didn't work....will try again
0
 
LVL 43

Accepted Solution

by:
Vasil Michev (MVP) earned 2000 total points
ID: 39889599
Again, this will only work in EO PowerShell:

PS C:\> $DGs = Get-DistributionGroup -ResultSize Unlimited
PS C:\> $DGs | % {Get-RecipientPermission -Identity $_.Identity}

Identity                            Trustee                             AccessControlType                   AccessRights                        Inherited
--------                            -------                             -----------------                   ------------                        ---------
TestDG                              vasil                      Allow                               {SendAs}                            False

PS C:\> $DGs | ? {$_.GrantSendOnBehalfTo -ne ""} | ft Name,DisplayName,PrimarySmtpAddress,GrantSendOnBehalfTo

Name                                         DisplayName                                  PrimarySmtpAddress                           GrantSendOnBehalfTo
----                                         -----------                                  ------------------                           -------------------
TestDG                                       TestDG                                       TestDG@domain.com                            {vasil}

Open in new window



 If you run it from the EMS, you will need different cmdlets
0
 

Author Closing Comment

by:claudiamcse
ID: 39889634
thanks!!
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft has changed the look and feel of Azure AD and Microsoft account sign-in pages so that you will have a more unified look and feel when moving between the two interfaces.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This video discusses moving either the default database or any database to a new volume.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
Suggested Courses

650 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question