Mittwoch, 17. August 2011

Finding users who have Send-As or Full Access permissions to mailboxes

The following one-liner lists all mailboxes where another user has Send-As permissions, and who that user is:
Get-Mailbox -Resultsize Unlimited | Get-ADPermission | ? {($_.ExtendedRights -like "*send-as*") -and -not ($_.User -like "nt authority\self")} | ft Identity, User -auto

And this one-liner displays all mailboxes where another user has Full Access permissions, and who that user is:

Get-Mailbox -ResultSize Unlimited | Get-MailboxPermission | ? {($_.AccessRights -match "FullAccess") -and -not ($_.User -like "NT AUTHORITY\SELF")} | ft Identity, User

Both of these one-liners are very useful to determine who has access to other people's mailboxes.

Keine Kommentare:

Kommentar veröffentlichen

WSUS unter Windows Server 2012 und 2016 funktioniert nicht (Error 503, 0x80040154, 0x80245002)

Problem Ein frischer Windows Server 2016 (oder 2012/2012R2) WSUS-Server funktioniert nicht. Clients werden in der WSUS-Console zwar aufge...