Solved

Identify Mailbox Access in Exchange 2010

Posted on 2014-03-26
4
614 Views
Last Modified: 2014-05-16
Hello Experts,

Can you provide an example powershell script or command I can run to determine who has access to a users mailbox? (Exchange 2010)

For example, in the EMC I can browse to Recipient Configuration, then right-click on a mailbox and select 'Manage Full Access Permissions'. This displays all users who currently have full access to the mailbox.

Is there a way to export this info with a script, or query it on the fly in a simple way such as by running a script?

Thanks Experts!
0
Comment
Question by:zequestioner
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 8

Assisted Solution

by:EEhotline
EEhotline earned 125 total points
ID: 39957622
Try this command:

Get-MailboxPermission "username" | where {$_.AccessRights -like "*FullAccess*"}

Ref link:
http://blogs.technet.com/b/messaging_and_beyond/archive/2012/05/09/powershell-enumerating-access-rights-on-mailboxes.aspx
0
 
LVL 8

Assisted Solution

by:Camy
Camy earned 125 total points
ID: 39957632
0
 
LVL 40

Accepted Solution

by:
Adam Brown earned 125 total points
ID: 39957645
Probably a more informative way to do it is this:

get-mailboxpermission <mailbox name> | Select user,accessrights | export mailboxperms.csv

Open in new window


That will export the permissions with the user the permissions are set to for whatever mailbox you enter to a csv file. If you want the permissions on everyone, you could generate it with the following:

$users = get-mailbox
foreach ($user in $users)
{
     $alias = $user.alias
     $file = "c:\folder\" + $alias + ".csv"
    get-mailboxpermission $alias | select user,accessrights | export-csv $file
}

Open in new window

That will build a CSV with the permissions for each mailbox in the environment.
0
 
LVL 5

Assisted Solution

by:Pankaj_401
Pankaj_401 earned 125 total points
ID: 39958203
Here is good explanation of your exact concern : How to List all Users Who Have Access to Other Exchange Mailboxes
In addition, this one is also equipped with several proficient features which helps to monitor and instantly alerts for all critical changes like, mailbox permission, policies changes or configuration changes in exchange server.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question