Find accounts that have impersonation rights

Is there a way using powershell that I can determine which accounts currently have impersonation rights in Exchange 2007? We are doing a migration to Exchagne 2013 and I need to ensure they have impersonation rights for 2013. thanks.

Hi,
We can use the following command to retrieve all the role assignments associated with Exchange Impersonation role:
Get-ManagementRoleAssignment –Role:ApplicationImpersonation
Hope it works.
Best Regards,
Winnie Liang
TechNet Community Support

Similar Messages

Help! I just put a US sim card (i am from Canada) and got a monthly pre paid plan, and when I went to restore the iphone, it didn't work. I can't find backup that i did right before the sim was changed. I really need the info that was there! Please help..

Help! I just purchased a US sim card/monthly pre-paid plan (i am from Canada) as I am travelling in the states for a month, and when I went to restore the iphone, it didn't work. I can't find backup that i did right before the sim was changed. I really need the info that was there! Please help..

Hold on,
Have you talked to your carrier to confirm the unlock?
What was the procedure you did to unlock the phone?
Standard unlocking procedure once processed by the carrier:
Backup in iTunes
Erase the phone (ignore restore terminology here)
Plug the phone to the computer and then launch iTunes
Wait for unlock notification.
Restore the backup.

Need my user account to have sysdba rights. Can't get it to work.

Hi All,
I have installed sql developer and i don't know how to change my user account to have system rights. when i try to login as sysdba i keep getting errors. I have tried a tutorial, the one were you're suppose to create an hr account but I can't even create that either, i keep getting the same error.
I have un-installed sql developer twice and each time when I'm re-installing the software i never get the question to create a password for sys or sysdba, it seems that the old dll or ini file are still in the system. So, i just have access as default user and I might have missed the migration part when i first installed this thing. Any ideas? Do I need to download the enterprice manager in order to fix this (that will do it right?), or?? I have no clue at this point. Also, I was thinking that i should be able to change my user account manually somewhere in the orapassw doc. Is that an option? As you can tell im lost and i have a job deadline in the next couple of days, so please if anyone could take a look at my problem wood be wonderful and much appreciated.
Thx

SYSDBA should never be used for anything other than backups and patching.
Which of these two activities do you think appropriate for a user account?
My answer is the same as Sybrand's. What you are asking is totally inappropriate.
Far better to tell us specifically which actions you wish to perform and we will
help you with the specific permissions you require.

Accounts that have not been logged into for more than 90 days

Hi Folks,
Good Day.
Can anyone help me to update below powershel script?
below script find in my domain all the AD users accounts that have not been logged into for more than 90 days and export the report to .csv file. in addition what I want:
1. OU=Others, Sales --> exclude this OUs
2. Disable all the user based on 90 days export report .csv file
import-module activedirectory
$domain = "test.com"
$DaysInactive = 90
$time = (Get-Date).Adddays(-($DaysInactive))
$timer = (Get-Date -Format yyyy-mm-dd)
# Get all AD User with lastLogonTimestamp less than our time and set to enable
Get-ADUser -Filter {LastLogonTimeStamp -lt $time -and enabled -eq $true} -Properties LastLogonTimeStamp |
# Output Name and lastLogonTimestamp into CSV
select-object givenname,Name,@{Name="Stamp"; Expression={[DateTime]::FromFileTime($_.lastLogonTimestamp).ToString('dd-MM-yyyy_hh:mm:ss')}} | Export-Csv c:\temp\90DaysInactive-$(Get-Date -format dd-MM-yyyy).csv –NoTypeInformation
Many thanks for advance Help:

Hi Anna,
Good Day.
Many thanks for your responce.
with your help i can manage to exclude the OUs as wellas can get the .csv report via mail.
Now i want to disable all the user based on 90 days export report .csv file.
could you help me on this please? the report will come everyday like below:
filename=90DaysInactive-dd-mm-yyyy.csv
sample output:
Given name User Name
Last LogOn
Test User1 user1
03-10-2006_05:30:59
Test User2 user2
02-10-2006_12:00:34
import-module activedirectory
$domain = "test.com"
$DaysInactive = 1
$time = (Get-Date).Adddays(-($DaysInactive))
$timer = (Get-Date -Format yyyy-mm-dd)
$FileName="c:\temp\90DaysInactive-$(Get-Date -format dd-MM-yyyy).csv"
$from = "[email protected]"
$to = "[email protected]"
$smtpHost = "smtpservername"
$Subject = "90 Days Inactive Accounts"
$body = "90 Days Inactive Accounts report"
# Get all AD User with lastLogonTimestamp less than our time and set to enable
Get-ADUser -Filter {LastLogonTimeStamp -lt $time -and enabled -eq $true} -Properties LastLogonTimeStamp | where {($_.distinguishedname -notlike "*OU=HR*") -and ($_.distinguishedname -notlike "*OU=OT*")} |
# Output Name and lastLogonTimestamp into CSV
select-object givenname,Name,@{Name="Last Logon"; Expression={[DateTime]::FromFileTime($_.lastLogonTimestamp).ToString('dd-MM-yyyy_hh:mm:ss')}} | Export-Csv c:\temp\90DaysInactive-$(Get-Date -format dd-MM-yyyy).csv -NoTypeInformation
Send-MailMessage -From $from -To $to -Subject $subject -cc $cc -SmtpServer $smtpHost -Attachments $FileName -Body $body -BodyAsHtml
Thanks for your advance help.

Where do I find emails that have been "archived"?

How do I find emails that have been "archived"?

That would depend somewhat on the email service you are using, but most have a folder called "Archive". Back up the mailbox list and then tap on teh account (not All Inboxes).

Can anyone help with a powershell script using the search-adaccount cmdlet to filter out accounts that have been created in the last 90 days?

Hi,
I have the following script that is supposed to search AD for all user accounts that haven't logged into the domain in more than 90 days. I first did not have the where-object clause because I didn't realize the search-adaccount would provide results
back of users that have never logged in, but were created less than 90 days ago. So I tried to incorporate the logic to not include user accounts that were created in the last 90 days.
#requires -version 4
#This script creates a file of accounts that have not been logged into in the past 90 days, excluding accounts that have been created within the past 90 days since the -AccountInactive option does not factor for the whenCreated property of an AD object
$DateThreshold = ((Get-Date).AddDays(-90))
$ReportDate = Get-Date -Format yyyy-MM-dd
#Create a folder according to the current date to be used for storing the report
New-Item -Path ".\$ReportDate" -ItemType Directory
$InactiveUsers = Search-ADAccount -UsersOnly -AccountInactive -TimeSpan "90" -SearchBase "OU=XXXX,DC=XXXX,DC=XXXX,DC=XXXX" | Where-Object {$_.whenCreated -gt $DateThreshold} | Export-Csv ".\$ReportDate\Inactive90_$ReportDate.csv"
However, I can't ever get the whenCreated field to populate with data. What gives?

Hi,
Search-ADAccount doesn't return a whenCreated property. If you want that, you'll need to use Get-ADUser as well. Here's a basic example you can build from:
$dateThreshold = (Get-Date).AddDays(-90)
Search-ADAccount -UsersOnly -SearchBase 'OU=Users,DC=domain,DC=com' -AccountDisabled | ForEach {
$whenCreated = (Get-ADUser -Identity $_.SamAccountName -Properties whenCreated).whenCreated
If ($whenCreated -gt $dateThreshold) {
$_
Don't retire TechNet! -
(Don't give up yet - 12,950+ strong and growing)

Why can't the finder in Mountain Lion 10.8.2 find files that have successfully downloaded, or that other programs can find?

Why can't the finder in Mountain Lion 10.8.2 find files that have successfully downloaded, or that other programs can find?
This happens with maybe 1 out of 5 files. These are files that have either an ."aa" extention, or or are libraries that icloud can see, but finder can't.

Files beginning with a period are invisible and library files are system files. Spotlight cannot find either unless configured to do so (btw, this is not a Finder issue but a Spotlight issue.)
Get Spotlight to search system files (and more)
Enter the search term in the Finder window's search field.
Click the [+] button in the search bar to add a search option.
In the first drop down menu choose Other.
Choose “System Files” from the list that pops up (and check the box to place in drop down menu to avoid this step later,) click on the OK button.
Now back in the Finder choose Include from the second drop down menu.

Lightroom does not automatically find images that have been moved within same parent folder/drive

Lightroom does not automatically find images that have been moved within same parent folder/drive...I moved my catalog and photos to shared drive so that all users can access and when I moved photos within parent folder lightroom did not automatically adjust like in video I watched. I had to manually locate. Is there a fix for this?

Lightroom does not automatically find images that have been moved within same parent folder/drive...I moved my catalog and photos to shared drive so that all users can access and when I moved photos within parent folder lightroom did not automatically adjust like in video I watched. I had to manually locate. Is there a fix for this?
I haven't watched that video, but if you move photos in your operating system ... Lightroom does NOT automatically find these photos. Finding photos that have been moved is NOT a feature of Lightroom. So, there is no fix for this.
You would have to tell Lightroom where the photos are now located, as explained in the link from 99jon
If you must move photos, move them inside of Lightroom, not in your operating system, or better yet — don't move them, and use Lightroom tools such as keywords and other metadata to achieve organization.

How to find geometry that have intersection with polyline?

Hello,
How to find geometry that have intersiction with polyline?
I hava a lot of polygon, i want to find wich of polygon have intersection with polyline.
What shall i do to find out this?
Regatd,
Thank's

is that correct when i use such query?
SELECT
FROM aaa c
WHERE SDO_RELATE(c.geometry,
SDO_GEOMETRY(2002, 1, NULL,
SDO_ELEM_INFO_ARRAY(1,2,1),
SDO_ORDINATE_ARRAY(0,0,12,12,25,25)),
'mask=anyinteract') = 'TRUE'
Thanks

How do you authorise old accounts that have been modified

I updated my store account email address a couple of months ago. Since then I have changed my computer and some of the tracks that I purchased before the email address change cannot be accessed as they haven't been authorised on my new computer. How do I do this?????

Updating your email address has nothing to do with authorizing a song.
Use the iTunes ID you purchased the song with.
This will ALWAYS be the same on your purchased songs and will not change, regardless of the email address you have linked to the account.
If you right click - get info on a purchased song and click on the Summary tab, you will see your iTunes ID.
The email address you changed is your current email, used to send you iTunes receipts and contact you if needed.

Finder is not working properly mac osx 10.7.4 it no longer launches a new window when I click the finder icon - I have to right click and open a new window

Hi
Just recently Finder has stopped behaving as it normally would. Clicking the icon doesn't seem to launch the finder window. I have to right click the finder icon and then click New Finder Window. Sometimes there is no response for sometime and then finally it does open a window. If I click finder when a wondow is open it does not shift focus to finder anymore. I am sure this did not use to be the case?
PS. not sure if this is how to put things on the forum as haven't used them before!
Julian

Click on the spotlight icon in the top right of your screen (looks like a magnifying glass), type
Terminal
and press 'return'.
In the window that opens up, paste or type this exactly into the window
killall Finder; killall Dock
(that's case sensitive) and press 'return'.
You'll notice the Dock disappear for a second or two then return, as do any open Finder windows.
Test using Finder as normal. Same problem?

List AD accounts that have not been used for months?

Hello,
I use oldcmp.exe to show me what computers have not been used for months and I can disable them, but I wish to do the same for users Active Directory accounts, is this possible?
We use AD 2003
Thanks

sorry for slightly belated reply. I've used another version of this script that doesn't have the GUI interface on it, this will make it easier for you to run from a scheduled task.
copy the code and make the relevant changes to the top section of the script as the comments explain. This will send and email with a link to the report generated.
#Script designed to search AD for inactive user accounts, mark them as inactive and move them to a specific OU then disable them
#Script can be run in the following formats
# 1. Report only
# 2. Report and move account
# 3. Report, move and disable
#Uses quest powershell tools which can be downloaded from http://www.quest.com/powershell/activeroles-server.aspx
#Version 2.0
#Added email functionality
#Denis Cooper
#Setup script Variables
#Change the setting from True to false to alter the way the script runs (only one option can be true)
$ReportOnly = "True" #Generates a CSV file showing all inactive user accounts
$ReportandMove = "False" #Generates a CSV report, moves the users to a specific OU
$ReportMoveDisable = "False" #Generates a CSV report, moves the users to specific OU, and sets the description
#Set the period of inactivity in days
$InactiveFor = "90"
#Specify the OU to search for inactive users - us AD CN if searching enire AD
$SourceOU = "OU=Users,DC=MyDomain,DC=Int"
#Specify the destination OU to move inactive users to is using report and move or report move disable script options
$DestinationOU = "OU=Inactive Users,DC=MyDomain,DC=Int"
#Don't mark anyone with the the specified prefix in the description field to inactive - DND stands for Do Not Disable and is specified
#in the users account description field for accounts which may not be used to login so will show as inactive but that you don't want to disable
#must leave the * after the word for wildcard matching
$DescriptionPrefix = "DND*"
#Specify the description to set in the computer account on ReportMoveDisable option
$Description = "Account disabled due to inactivity on $Today"
#Specify the path to create the csv file (make sure the folder exists)
$ReportFile = "\\server\share\InactiveUsersReport.csv"
#Get todays date and store it in the $today variable
$Today = Get-Date
#Email Settings
$SMTPServer = "smtp-server-name" #replace this with your internal smtp server
$FromAddress = "[email protected]" #replace this with your from address
$ToAddress = "[email protected]" #replace this with your TO address
$CCAddress = "[email protected]" #replace this with your TO address
$Subject = "This is your subject line" #replace this with the subject line for the email
$MessageContent = "
Hello,
Please find a link to the latest report containing users that have been inactive for $inactivefor days
$ReportFile
Please take the appropriate action.
Thanks you,
IT
#NO CHANGES BELOW THIS LINE
Function SendEmail {
$messageParameters = @{
Subject = $subject
Body = $messagecontent
From = $fromaddress
TO = $ToAddress
CC = $CCAddress
SmtpServer = $SMTPServer
Send-MailMessage @messageParameters
#Generates a report showing inactive users
Function ReportOnly {
$inactiveUsers | Export-Csv $ReportFile
$count = $inactiveUsers.Count
Write-Host -ForegroundColor White "$count inactive users were found and are being processed"
SendEmail
Invoke-Item $ReportFile
#Generates report and moves accounts to desitnation OU
Function ReportandMove {
$inactiveUsers | Export-Csv $ReportFile
$count = $inactiveUsers.Count
Write-Host -ForegroundColor White "$count inactive users were found and are being processed"
Invoke-Item $ReportFile
$inactiveUsers | foreach {
Move-QADObject $_ -NewParentContainer $DestinationOU
#Generates report, moves accounts to destination OU, disables the account and sets the description
Function ReportMoveDisable {
$inactiveUsers | Export-Csv $ReportFile
$count = $inactiveUsers.Count
Write-Host -ForegroundColor White "$count inactive users were found and are being processed"
Invoke-Item $ReportFile
$inactiveUsers | foreach {
Disable-QADUser $_
Set-QADUser $_ -Description $Description
Move-QADObject $_ -NewParentContainer $DestinationOU
#Runs the script
#Finds all inactive user accounts which are in an enabled state and store them in the variable $inactiveusers
$inactiveUsers = Get-QADUser -SizeLimit 0 -SearchRoot $sourceOu -NotLoggedOnFor $InactiveFor -Enabled | Where-Object {$_.description -notlike $DescriptionPrefix}
#Checks which script to run
If (($ReportONly -eq "True") -and ($ReportandMove -eq "True" -or $ReportMoveDisable -eq "True")) {
Write-Host -ForegroundColor RED "Only one run condition is allowed, please set only one run value to True and the others to false"
Break
If ($ReportONly -ne "True" -and $ReportandMove -ne "True" -and $ReportMoveDisable -ne "True") {
Write-Host -ForegroundColor RED "No valid run condition was specified, please set only one run value to True and the others to false"
Break
If ($ReportONly -eq "True") {
Write-Host -Foregroundcolor Green "Script running in report only mode."
Write-Host -Foregroundcolor Green "Checking for accounts inactive for $inactivefor days in the OU $SourceOU"
Write-Host -Foregroundcolor Green "The report will open automatically once complete, or you can find it here $ReportFile"
ReportOnly
If ($ReportandMove -eq "True") {
Write-Host -Foregroundcolor Green "Script running in report and move mode."
Write-Host -Foregroundcolor Green "Checking for accounts inactive for $inactivefor days in the OU $SourceOU"
Write-Host -Foregroundcolor Green "The report will open automatically once complete, or you can find it here $ReportFile"
Write-Host -ForegroundColor Green "Any inactive accounts will be moved to this OU $destinationOU"
ReportAndMove
If ($ReportMoveDisable -eq "True") {
Write-Host -Foregroundcolor Green "Script running in report, move and disable mode."
Write-Host -Foregroundcolor Green "Checking for accounts inactive for $inactivefor days in the OU $SourceOU"
Write-Host -Foregroundcolor Green "The report will open automatically once complete, or you can find it here $ReportFile"
Write-Host -ForegroundColor Green "Any inactive accounts will be moved to this OU $destinationOU and disabled and their description updated"
ReportMoveDisable
This link should help you create a scheduled task to run the script
http://dmitrysotnikov.wordpress.com/2011/02/03/how-to-schedule-a-powershell-script/
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
My Blog
LinkedIn:

Finding Photos that have been saved as Tiff

I've been using Blurb to make photo books, and love the results. One of the best things, is that it will read my iphoto library without me having to upload the photos to another website. Problem, is it will only read JPEG or PNG images in iphoto.
It does read my RAW photos as long as I have not edited them, but when I edit the RAW, iphoto saves as 16-bit Tiff. Which I like for keeping the quality of my photos. But then I can't get them in my books. So I've gone back and forth (being the indecisive girl I am) and some RAW are then saved as JPEG, and others as TIFF.
Now I'm trying to find which ones are TIFF. But I can't find anywhere that shows me what the new file type is after the edit has been done. I made a smart album of RAW, Edited but it will show me both the Tiff, and the Jpeg.
Anyone know how to find out the file type of an image. I've looked under "Info" and it still lists as RAW.
I noticed that the TIFF's have a file size of 0, so if there's a way to search for that criteria, that might help too.

Thanks! For some reason, that won't actually find them. The filename is still .crw, at least what I can see. The search doesn't actually seem to search the "modified" file.
I wound up actually just looking in the package contents of iphoto, trying to find all files that have a .tif extension and then going back to iphoto to find the matching picture. Not simple, but at least I can figure out which ones are the tiff.

Finding images that have not been tagged?

How can I search/find images in LR4 that have been imported though not tagged?
Thanks.

There should be a Smart Collection called "Without Keywords" in the Collections Pane of the Library Module. That will automatically contain what you are looking for.
If that isn't there, click on All Photographs then use the Filter Bar>Metadata and filter on Keywords....the top entry (None) will be what you are looking for.

Finding images that have been 'protected' while in camera

Hello, I was wondering if anybody knows how to find images that you protect while they're in your camera? I have a Canon 5D Mark II, and I can select images to 'lock' or 'protect' .. I use that to mark images that I believe are key images while on a shoot.
With Photo Mechanic I can select 'tagged' images .. and those images I have marked in my camera will be selected.
I've tried to figure out if its something I can find in exif .. and have had no luck.
Please help!

There should be a Smart Collection called "Without Keywords" in the Collections Pane of the Library Module. That will automatically contain what you are looking for.
If that isn't there, click on All Photographs then use the Filter Bar>Metadata and filter on Keywords....the top entry (None) will be what you are looking for.

Find accounts that have impersonation rights

Similar Messages

Maybe you are looking for