mailbox permissions methods

1) Are there more than 1 ways to assign permissions to an exchange 2010 mailbox? I know it can be done via AD permissions, but I seem to recall the mailbox user themselves can delegate permissions in Outlook.

2) are there techniques (shell commands?) to show via all possible techniques (i.e AD, Outlook) which users have which permissions over a specific mailbox?

3) is there a command that can be run perhaps via exchange management shell to show if mailbox auditing is enabled on a specific mailbox?
LVL 4
pma111Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Thomas GrassiSystems AdministratorCommented:
How are some commandsyou are looking for


Get-MailboxPermission –Identity “UserName” | fl user, accessrights

for all users

Get-MailboxPermission -Identity * | fl user, accessrights , identity > C:\Perms.txt

for audit

get-mailbox username | fl name, audit*

Hope this get you started
0
Will SzymkowskiSenior Solution ArchitectCommented:
To get ALL permissions cmdlets from Powershell all you need to do is this following...

Get-Help *permission*

Open in new window


This will give you all of the possible permissions that are available in the Exchange Management Console. From there all you need to do is select one of the cmdlets and type (example below...)

get-help add-mailboxpermission -Full

Open in new window


This will provide all of the details along with examples for this cmdelt. You can perform the same command on other cmdlets that you see.

Will.
0
Hypercat (Deb)Commented:
The previous answers addressed your questions 2 and 3. To answer question one, yes, the user (owner of the mailbox) can assign permissions via Outlook. In Outlook you assign mailbox permissions to other users by right-clicking on the mailbox name or folder name on the Folder list and going to the " Folder Permissions" or "Properties/Permissions tab" dialog box. My experience is that most users don't really know how to do this or don't take it upon themselves to do it, particularly in a corporate environment where security is a major concern.  For example, depending on the version of Exchange and Outlook, the permissions are in a strict hierarchy where a user can't have permissions to the Inbox, for example, unless he or she has permissions to the top level "Mailbox - Username" folder. So, most users miss that aspect and the results aren't what they think they should be. If you want your users to be able to manage permissions to their mailbox folders, then you need to train them how to do it properly given the versions of Exchange and Outlook they're using, so that it works smoothly.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Shweta GoelCommented:
Hi,

To grant the full access permission for a mailbox, first you need to assigned permission. Then you can use this command: -

Add-MailboxPermission "xyz" -User "abc" -AccessRights FullAccess

Thanks & Regards
Shweta@G
0
pma111Author Commented:
hypercat - do you know anyway at server level if the mailbox owner has set any permissions that way for his or her mailbox?
0
Thomas GrassiSystems AdministratorCommented:
Have you tried the commands I posted above?

Get-MailboxPermission –Identity “UserName” | fl user, accessrights

 for all users

 Get-MailboxPermission -Identity * | fl user, accessrights , identity > C:\Perms.txt
0
Hypercat (Deb)Commented:
The permissions assigned by users through Outlook are folder permissions, not permissions to the entire mailbox.  I don't know what version of Exchange you're using, but for 2010 or 2013, you can use the Get-MailboxFolderPermissions commandlet to view or edit those permissions:

https://technet.microsoft.com/en-us/library/dd335061(v=exchg.150).aspx

If you need to query more than one mailbox, take a look at this article. I haven't tested this, but according to the posts the user was able to get it to work:

http://exchangeserverpro.com/forums/exchange-server-2010/4294-get-mailboxfolderpermission-multiple-resources-help-needed.html

Also here's another one:

https://social.technet.microsoft.com/Forums/exchange/en-US/d8ffef98-cd5f-4ce9-94cf-47cca32961b1/how-list-getmailboxfolderpermission?forum=exchangesvradminlegacy
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.