Jordan Howard
asked on
What Exchange User Permissions Does One have?
This is a two part question.
1. Does anyone have a preexisting script they use to see what individual user has access to everywhere within your exchange environment? i.e. other user mailbox folder permissions and delegate access rights for other users
2. Does anyone have a script or know a way to find what permissions a specific user may have access to on another specified users individual mailbox (folder permission)?
1. Does anyone have a preexisting script they use to see what individual user has access to everywhere within your exchange environment? i.e. other user mailbox folder permissions and delegate access rights for other users
2. Does anyone have a script or know a way to find what permissions a specific user may have access to on another specified users individual mailbox (folder permission)?
ASKER
Dinesh,
That gives me no output. Get-Mailbox USERNAME | Get-MailboxPermission -user OTHERUSERNAME right?
That gives me no output. Get-Mailbox USERNAME | Get-MailboxPermission -user OTHERUSERNAME right?
If no error and return nothing means , other use doesn't have permission for the mailbox
If you are getting any error ,pls post it here , we ll try to figure it out
Thanks
If you are getting any error ,pls post it here , we ll try to figure it out
Thanks
ASKER
They do have access to a user's Inbox and some subfolder's I can see it by typing Get-MailboxFolderPermissio n USERMAILBOX@DOMAIN:\Inbox
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
you can use Get-MailboxPermission cmdlet to get accessrights details
Get-Mailbox "support mailbox" | Get-MailboxPermission -user "AD account/SAM accountname"
above cmdlet will give you what are all the permissions that AD account is holding against shared mailbox.
If you use Get-MailboxPermission directly against sharedmailbox/user mailbox it will list out all the user who are having access (full access, DeleteItem,..) against that mailbox.
Eg: Get-MailboxPermission "share mailbox/user mailbox" , it will give all the entries including NT Authority \self, NT Authority \system, NT Authority \Network service, you can skip those entries in your output,
Get-MailboxPermission "share mailbox/user mailbox" | where {$_.user.tostring() -ne "NT AUTHORITYSELF"}
Thanks