mailbox permissions methods

1) Are there more than 1 ways to assign permissions to an exchange 2010 mailbox? I know it can be done via AD permissions, but I seem to recall the mailbox user themselves can delegate permissions in Outlook.

2) are there techniques (shell commands?) to show via all possible techniques (i.e AD, Outlook) which users have which permissions over a specific mailbox?

3) is there a command that can be run perhaps via exchange management shell to show if mailbox auditing is enabled on a specific mailbox?
LVL 3
pma111Asked:
Who is Participating?
 
Hypercat (Deb)Commented:
The previous answers addressed your questions 2 and 3. To answer question one, yes, the user (owner of the mailbox) can assign permissions via Outlook. In Outlook you assign mailbox permissions to other users by right-clicking on the mailbox name or folder name on the Folder list and going to the " Folder Permissions" or "Properties/Permissions tab" dialog box. My experience is that most users don't really know how to do this or don't take it upon themselves to do it, particularly in a corporate environment where security is a major concern.  For example, depending on the version of Exchange and Outlook, the permissions are in a strict hierarchy where a user can't have permissions to the Inbox, for example, unless he or she has permissions to the top level "Mailbox - Username" folder. So, most users miss that aspect and the results aren't what they think they should be. If you want your users to be able to manage permissions to their mailbox folders, then you need to train them how to do it properly given the versions of Exchange and Outlook they're using, so that it works smoothly.
0
 
Thomas GrassiSystems AdministratorCommented:
How are some commandsyou are looking for


Get-MailboxPermission –Identity “UserName” | fl user, accessrights

for all users

Get-MailboxPermission -Identity * | fl user, accessrights , identity > C:\Perms.txt

for audit

get-mailbox username | fl name, audit*

Hope this get you started
0
 
Will SzymkowskiSenior Solution ArchitectCommented:
To get ALL permissions cmdlets from Powershell all you need to do is this following...

Get-Help *permission*

Open in new window


This will give you all of the possible permissions that are available in the Exchange Management Console. From there all you need to do is select one of the cmdlets and type (example below...)

get-help add-mailboxpermission -Full

Open in new window


This will provide all of the details along with examples for this cmdelt. You can perform the same command on other cmdlets that you see.

Will.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
Shweta GoelCommented:
Hi,

To grant the full access permission for a mailbox, first you need to assigned permission. Then you can use this command: -

Add-MailboxPermission "xyz" -User "abc" -AccessRights FullAccess

Thanks & Regards
Shweta@G
0
 
pma111Author Commented:
hypercat - do you know anyway at server level if the mailbox owner has set any permissions that way for his or her mailbox?
0
 
Thomas GrassiSystems AdministratorCommented:
Have you tried the commands I posted above?

Get-MailboxPermission –Identity “UserName” | fl user, accessrights

 for all users

 Get-MailboxPermission -Identity * | fl user, accessrights , identity > C:\Perms.txt
0
 
Hypercat (Deb)Commented:
The permissions assigned by users through Outlook are folder permissions, not permissions to the entire mailbox.  I don't know what version of Exchange you're using, but for 2010 or 2013, you can use the Get-MailboxFolderPermissions commandlet to view or edit those permissions:

https://technet.microsoft.com/en-us/library/dd335061(v=exchg.150).aspx

If you need to query more than one mailbox, take a look at this article. I haven't tested this, but according to the posts the user was able to get it to work:

http://exchangeserverpro.com/forums/exchange-server-2010/4294-get-mailboxfolderpermission-multiple-resources-help-needed.html

Also here's another one:

https://social.technet.microsoft.com/Forums/exchange/en-US/d8ffef98-cd5f-4ce9-94cf-47cca32961b1/how-list-getmailboxfolderpermission?forum=exchangesvradminlegacy
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.