Solved

Powershell Exchange - How to list all mailboxes Full Access permission from a particular user name ?

Posted on 2016-08-14
12
40 Views
Last Modified: 2016-10-18
Hi people,

I wonder if anyone here can share some Powershell script or tips in how to check if my AD user account got Full Permission access in some mailboxes ?

because for compliance reason, I need to audit if the certain AD user account has multiple Exchange mailbox Full access permission or not.

Thanks.
0
Comment
12 Comments
 
LVL 67

Expert Comment

by:sirbounty
ID: 41755800
1
 
LVL 7

Author Comment

by:Senior IT System Engineer
ID: 41755808
Thanks Sir,

in my case here I need to know all DOMAIN\User1 mailbox full access across 2850 Exchange mailboxes.

So how do I use that command above ?
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 41756154
get-mailbox -resultsize unlimited | get-mailboxpermission | where {$_.accessrights -conains 'FullAcess'}
1
 
LVL 16

Expert Comment

by:FOX
ID: 41756353
get-MailboxPermission username  -filter "accessrights -eq 'FullAccess'"  | ft samaccountname, displayname,emailaddress,AccessRights | out-file 'c:\temp\FullAccess.csv'
1
 
LVL 67

Expert Comment

by:sirbounty
ID: 41774887
I see I had a type-o - conains, should be -contains, but presumably you'd find that.
Any update?  Still need help?
0
 
LVL 7

Author Comment

by:Senior IT System Engineer
ID: 41777313
Hi All,

The script doesn't work ?

get-MailboxPermission MyName  -filter "accessrights -eq 'FullAccess'"  | ft samaccountname, displayname,emailaddress,AccessRights | out-file 'c:\temp\FullAccess.csv'

Open in new window


A parameter cannot be found that matches parameter name 'Filter'.
    + CategoryInfo          : InvalidArgument: (:) [Get-MailboxPermission], ParameterBindingException
    + FullyQualifiedErrorId : NamedParameterNotFound,Get-MailboxPermission
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 
LVL 67

Accepted Solution

by:
sirbounty earned 500 total points (awarded by participants)
ID: 41777397
Did you try what I suggested?
get-mailbox -resultsize unlimited | get-mailboxpermission | where {$_.accessrights -conains 'FullAcess'}

Open in new window

1
 
LVL 7

Author Comment

by:Senior IT System Engineer
ID: 41777398
Hi Sir,

I just required my own username and certain username not all username.

But yes I'll try it anyway.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 41797634
Did my solution work for you?
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 41819651
Hi ITSystemEngineer - do you need further help or help closing the question?
0
 
LVL 1

Expert Comment

by:LinuxDude
ID: 41821851
List all mailboxes to which a particular user has Full Access permissions:
PS C:\> Get-Mailbox | Get-MailboxPermission -User vasil

List all shared/user/room/whatever mailboxes to which particular user has Full Access permissions:
PS C:\> Get-Mailbox -RecipientTypeDetails UserMailbox,SharedMailbox -ResultSize Unlimited | Get-MailboxPermission -User vasil
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 41847916
I believe this answers the question - not sure why the OP never came back.
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now