List permissions a user has on shared mailboxes

<#
.SYNOPSIS
Retrieves all permissions a mailbox has access to in the Organizational Unit 'domain/Accounts/Shared'.
.DESCRIPTION
This script will query all Mailbox permissions and Active Directory permissions a mailbox has on another mailbox.
Active Directory such as 'Send-As'.
.PARAMETER User
The Display Name, Email address, GUID, Alias.
.EXAMPLE
.\ListAllMailboxesAUserHasAccessTo -User 'JSmith'
This example will retrieve all mailboxes that Jsmith has full access to.
#>
param(
     [String]$User
Get-Mailbox -resultsize Unlimited -RecipientTypeDetails sharedmailbox  |Get-MailboxPermission |
Where-Object {($_.AccessRights -eq "FullAccess") -and ($_.User -like $User) -and ($_.IsInherited -eq $false) -and ($_.User -notlike 'NT Authority\Self')} |
Format-Table Identity -Verbose
This works only if I put user as "domain\userid. How can I just put the DN,Alias,UPN in the $user parameter?
Thanks,
Alexis
      

Hello Alexis,
Conver it to domain\userid on the fly if you put DN, Alias of upn...
$ConvertedUser = (get-mailbox $user).userprincipalname.split("@")[1].split(".")[0] + "\" + (get-mailbox $user).userprincipalname.split("@")[0]
Get-Mailbox -resultsize Unlimited -RecipientTypeDetails sharedmailbox  |Get-MailboxPermission | 
Where-Object {($_.AccessRights -eq "FullAccess") -and ($_.User -like $ConvertedUser) -and ($_.IsInherited
-eq $false) -and ($_.User -notlike 'NT Authority\Self')} |
Format-Table Identity -Verbose
Blog |
Get Your Exchange Powershell Tip of the Day from here

Similar Messages

  • List folders specific user has permission

    Hi, i am from Spain, excuse my bad English
    I have a 2008 r2 file server with more than 100 folders and more than 500 subfolders
    I want to list folders and subfolders that specific user has permissions
    Is this posible?
    How?
    Thanks in advantage

    Hello,
    I have developped one script powershell for my customers. I have uploaded this script on the technet Gallery.
    The link for download it's here
    https://gallery.technet.microsoft.com/Get-a-list-with-the-share-811d1221

  • Exchange 2013 - moving an email from user inbox to Shared Mailbox removes images

    Good afternoon,
    Employees that are setup with Shared Mailboxes are experiencing a weird issue today.  They embed an image into an email and send it to a co-worker.  The co-worker sends it back and when they drag and drop it from their user mailbox into the Shared
    Mailbox, the image is gone.  The Outlook client settings are correct and the format of the emails are HTML.  Trying to change the format does not resolve the issue.
    One comment I did want to make is that we are currently transitioning from Exchange 2007 and 2010 to Exchange 2013.  We moved all of our Shared Mailboxes over to 2013 and we have a majority of users moved over already.  Could this be an issue with
    using a mixed environment?  Thanks!

    I confirmed that both the employees and Shared Mailbox are both on Exchange 2013.

  • Find all users who does not have access to a shared mailbox.

    Hi all,
    We are in the proces of setting up a hybrid enviroment with our E2010 towards Office365. As part of that, we want to move several batches of users. The first bunch if users we move should not use any shared mailboxes etc. but how do I find
    those? I can see there are powershell scripts that find users who has a shared mailbox and then list the permission - but that is kind of the opposite than what I want :)
    Browsing manually through users is not practical either as we have 10000+ mailboxes at the moment.
    Hoping for a quick reply :)
    /Trev

    It is not possible to accomplish this by using powershell. Easier one is to get the list of people who has access on something with below and do easier data manipulation in Excel :
    Get-Mailbox -Resultsize Unlimited | Get-MailboxPermission | ?{$_.isinherited -eq $False -and $_.user -notlike "*self*"} | select identity, user,accessrights
    [url=http://www.lepide.com/]Lepide[/url]

  • [Urgent]Accidently disabled shared mailbox (multiple users)

    I am a beginner and accidently run "Remove-Mailbox..." instead of "Set-Mailbox..." while modifying user's access to a shared mailbox. Now I want to know, since multiple users had access to the shared mailbox, do we need to provide access
    to every user on the shared mailbox again, after reconnecting the shared mailbox to the account ?
    I am working on exchange server 2010.
    Thanks in advance..
    Alok

    Hi ,
    I hope below mentioned points will help you to resolve this issue.
    Please do this first in your test environment before get in to production.
    On my side i would assume like you are having windows server 2008 R2 active directory environment with recycle bin enabled otherwise you have to do authoritative restore in active directory to get back the deleted user account in active directory .
    Step 1:
    First you need to restore the active directory account with the help of recycle bin feature in active directory .
    As per my knowledge ,recycle bin feature will help us to retain the same permissions on other resources and group membership when the deleted account is been recovered .
    Note :From windows server 2008 R2 on wards recycle bin feature is available ,once you enable that you cannot able to disable the feature so please think twice before doing any changes on recycle bin .Same time you need ensure the required functional levels
    are present in active directory for enabling the recycle bin.
    Reference Article for Recycle Bin in Active directory :
    http://blogs.technet.com/b/askds/archive/2009/08/27/the-ad-recycle-bin-understanding-implementing-best-practices-and-troubleshooting.aspx
    Step 2: Then you need to reconnect the shared mailbox from the exchange disconnector container to the restored account in active directory.
    Note : Suddenly deleted mailbox will not show on the exchange disconnected container So we need to use the below commands to update the exchange databases .
    Commands :
    Get-MailboxStatistics -Database MDB02 | ForEach { Update-StoreMailboxState -Database $_.Database -Identity $_.MailboxGuid -Confirm:$false }
    Get-MailboxStatistics -Database MDB02 | Where { $_.DisconnectReason -ne $null } | ForEach { Update-StoreMailboxState -Database $_.Database -Identity $_.MailboxGuid -Confirm:$false }
    Please reply me if you have any queries .
    Regards
    S.Nithyanandham
    Thanks S.Nithyanandham

  • Shared mailbox - check if user have permission from csv file

    Hi all,
    i know this is a long shot,but i still belive in Santa.Here is our situation.
    We grant our users access to Shared mailboxes by joining them to a security group (mail enabled) that starts with RG-XXX.
    Then i ran following command to list all users that are not member of a group starting with RG:
    $groups = Get-ADGroup -Filter {(name -like "*RG-Full*") -or (name -like "*RG-SEND*") -or (name -like "*RG-OS*")} | Select -ExpandProperty DistinguishedName
    foreach ($group in $groups){ $ADUsers = $ADUsers | Where-Object { $_.MemberOf -notcontains $group } }
    $FilteredUsers = $ADUsers
    $FilteredUsers | Export-Csv C:\temp\file.csv
    This worked great and i got a list of people that is not member of these groups.Problem is that some users are granted permission directly to the shared mailbox.This means that some people on the list still have access to a shared mailbox.
    Question is,can i use this list (.csv file containing alias) and run another check to see if they have been granted access to any shared mailbox?
    Thanks!
    Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work

    You need to pipe the last one:
    $arrMsolUserData | Export-CSV C:\scripts\output.csv -nti
    Also, you might need to adjust the value of $user depending on the format you used in the CSV. If the column in the CSV is named "alias", you might have to use $user.alias instead of just $user in the
    Get-MailboxPermission cmdlet.
    Here's an updated example:
    $usertocheck = Import-CSV C:\scripts\file.csv
    #Get all the shared mailboxes
    $shared = Get-Mailbox -RecipientTypeDetails SharedMailbox -ResultSize Unlimited
    #create the aggregate and cycle all the objects
    $arrMsolUserData = @()
    foreach ($user in $UserToCheck) {
    foreach ($MB in $shared) {
    $MBrights = Get-MailboxPermission -Identity $MB.PrimarySmtpAddress -User $user.alias
    if (!$MBrights) { continue }
    $objUser = New-Object PSObject
    $i++;Add-Member -InputObject $objUser -MemberType NoteProperty -Name "Number" -Value $i
    Add-Member -InputObject $objUser -MemberType NoteProperty -Name "User" -Value $user.Alias
    Add-Member -InputObject $objUser -MemberType NoteProperty -Name "Mailbox" -Value $MB.PrimarySmtpAddress
    Add-Member -InputObject $objUser -MemberType NoteProperty -Name "Access Rights" -Value $MBrights.AccessRights
    $arrMsolUserData += $objUser }
    $arrMsolUserData | Export-CSV C:\scripts\output.csv -nti

  • User mailboxes have more server-side rule options then shared mailboxes?

    I was hoping to set up some server-side rules to keep a shared mailbox clean.  The goal was to have some rules to move incoming messages to specific folders based off words in the subject.  I opened the shared mailbox in OWA and found the action
    of moving the message to a folder was not available.  At first I figured that's an action that's only available in a client-side rule.  However, I then found that in my user mailbox that action is available server-side.  It would appear there
    are a number of other action that are available server side to user but not shared mailboxes.
    Anybody else notice this?  Is this a bug?
    Single Exchange 2013 SP1 server - nothing fancy.

    Hi,
    I have a test in my environment using Exchange 2013. We can use two methods to create rules in OWA. When I open shared mailbox via OWA to create rules, only one way is possible. I recommend you use this way to create rules in OWA and check the result. Here
    is the detailed steps for your reference.
    Click Setting icon (on the right corner) -> Options -> organize email -> New
    Hope it helps.
    Best regards,
    Amy Wang
    TechNet Community Support

  • Converting a User Mailbox to a Shared Mailbox

    You can do it right through the admin console.  http://office365evangelist.com/?p=2373  
    or 
    Powershell: http://www.slipstick.com/exchange/convert-mailbox-shared/ 
    

    Hey everyone,
    So, I've got an issue that I was wondering if anyone could help out with.We have some mailboxes that got setup as a "User" despite being intended for multiple people. This makes things messy, and from my understanding, could be a potential HIPAA issue with multiple people having access to the same 'user' account without a way to tell who is accessing information.Anyhow, I'm wondering if it's possible to convert this 'user' into a shared mailbox that the managers of that department could then add to their Outlook accounts (everyone get their own Outlook account, and since it's 2007, I can't add multiple accounts as far as I'm aware).I was hoping to just convert this mailbox, then share it with the two managers, and set it up so that they can just check the mailbox and organize it like they would any of their current mailbox...
    This topic first appeared in the Spiceworks Community

  • Send as not working on shared mailbox in Exchange 2010

    Sorry this is for Exchange 2010 not 2013, but that was not a choice in the Forums list.
    I have created a Shared Mailbox a few months ago and gave one use full access rights and send as permissions. This worked perfectly since it was created. On Friday, the user started getting:
    Delivery has failed to these recipients or groups:
    You can't send a message on behalf of this user unless you have permission to do so. Please make sure you're sending on behalf of the correct sender, or request the necessary permission.
    If the problem continues, please contact your helpdesk.
    There have been no changes made to any of the rights or permissions anywhere. The shared mailbox properties still show this user in the full access and send as list. The shared accounts address is available in the GAL so that is not an issue.
    Any ideas would be appreciated. I could probably recreate this mailbox, but would rather fix the issue or at least know what happened in case it does it again.
    Nick Laurino

    Hello,
    Please follow the Riaz J.Butt's suggestions.
    Besides, I recommend you restart IIS services to check the result.
    Please check if this user has send as permission in ADUC.
    Please open ADUC, click View, choose Advanced Features, choose the shared account under Users, right-click the shared account and then choose Properties, choose Attribute Editor, check msExchDelegateList value.
    If you have any feedback on our support, please click
    here
    Cara Chen
    TechNet Community Support

  • Office 365 Shared Mailbox in Exchange Admin

    I am creating shared mailboxes in my Office 365 account and I want all the users on my domain to have access to all of the mailboxes. Is there any way I can set this up automatically, instead of manually adding each user to each shared mailbox and
    then having to remember to add all new users into each shared mailbox?
    Also is there anyway I can only allow them to have View-Only permissions on these mailboxes?
    Thanks 

    Hi Lauren,
    the cmdlet add-mailboxpermission is avaliable for Exchange Online, too.
    http://technet.microsoft.com/de-de/library/bb124097(v=exchg.150).aspx
     So you can receive a list for all your users mailboxes, and then you run add-mailboxpermission to all of them.
    $mymailboxlist = get-mailbox -resultsize unlimited
    $mymailboxlist | foreach-object {
                     $resourceMailbox = $_
                     $mymailboxlist | foreach-object {
                             $permittedMailboxAccess = $_
        add-mailboxpermission -identity $resourceMailbox -user $permittedMailboxAccess -accessRights FullAccess -InheritanceType All
    In that example script you may ignore warning messages that a user already had access to her own mailbox.
    You may add logic to the code to avoid that :)
    If you do not know how to connect to Exchange online (required to run that code) please see
    http://technet.microsoft.com/en-us/library/jj984289(v=exchg.150).aspx
    Regards,
    Martin

  • Disappearing folders from shared mailboxes

    We have this ongoing problem and just can't find a solution for it.  We have a number of users that have a shared mailbox.  They frequently get into the situation where one person can see a subfolder but others can't.  The folder is actually
    where it should be but only some of them can see it.  All permissions are wide open for them.
    So we disable their cache.  Then outlook goes right down the tubes; searches take forever, outlook frequently locks up and spins... it's either one hell or the other.
    What can we do to fix this?
    Thanks!

    Hi,
    Please confirm the mailbox permission between the problematic users and his shared mailbox.
    If these users have full access permissions to the shared mailbox, the subfolders should be available to these users. Pease create a new Outlook profile to have a try:
    http://support2.microsoft.com/kb/829918/en-us
    If the problematic user just has Owner permission to the Inbox folder in the shared mailbox, the new created subfolder may not be visible to other users. We need to add folder permission for the new created subfolders.
    Regards,
    Winnie Liang
    TechNet Community Support

  • One shared mailbox with multiple distribution groups connected and the sent items folder - how to configure?

    Hi!
    I have been struggling for a while now with the following issue.
    For starters:
    We are using exchange 2010 in combination with outlook 2013 on client computers.
    Cause of the limitations concerning the number of mailboxes in outlook im looking for a solution to receive and reply 
    to multiple aliasses. So i did the following:
    1. Configured one shared mailbox.
    2. Configured multiple distribution groups
    3.  made the shared mailbox a member of the distribution groups
    4. Configured full access and send as permissions for myself on the shared mailbox ( testing )
    5. Gave send as permissions to the shared mailbox in Active directory. 
    6.  Logged in to OWA to setup rules for the shared mailbox.
    I now receive emails from all connected distribution groups in the shared mailbox and also in the right folder.
    I do however have to select the proper from address when i reply to an email. 
    the email sent by the main SMTP of the shared mailbox is placed into the sent folder of the shared mailbox. 
    I setup the senddelagate blabla in register.....
    When i sent an email as one of the connected distribution groups it fails to put the sent item in the sent items folder of the shared mailbox. The email is sent using the proper address but placed in the sent folder of my main account. 
    I want this emails to end up in the sent items folder of the shared mailbox. Or even better, in a sent items folder for each of the addresses. 
    Any suggestions ? 
    Thanks in advance!

    Hi,
    As what
    Rajkumar says, sending as a shared mailbox(full access permission) will put the email in the sent item of shared mailbox. But it cannot be located in the “sent item” of a distribution group. Because
    it is a distribution group instead of a enabled user mailbox.
    According to your further description, I understand that the reason why you configure that is some users reached the
    limitation about the number of Exchange accounts you can include in the same Outlook profile. Is it rights? If I misunderstand, please point it out.
    By default, user can only add 10 Exchange accounts to the same profile. You can customize the limit to the number Exchange accounts in the same profile using the following registry data:
    Key: HKEY_CURRENT_USER\software\policies\Microsoft\exchange
    DWORD: MaxNumExchange
    Value: integer value starting at 1 (default = 10 if DWORD is missing)
    http://blogs.technet.com/b/outlooking/archive/2012/12/24/clarification-on-outlook-2010-and-additional-exchange-account-supportability.aspx
    Hope it helps.
    Thanks,
    Winnie Liang
    TechNet Community Support

  • Shared mailbox - send as and auditing Exchange 2007

    Got 3 users A,B,C who all access a shared mailbox X.
    They have a requirement to be able to answer emails sent to mailbox X BUT the return address to be X (i.e. not their own or send on behalf etc) so any subsequent relies still go to X and not the individual email addresses.
    However, enother requirment is that there needs to be a way to determine which user (A, B, or C) actually sent the email from shared mailbox X.
    Any way at all to do this?

    Hi,
    Since the full access permission has been assigned to users, please give Send As permission to these 3 users (A,B,C) for this shared mailbox X. Then user A,B,C 
    can send as the mailbox X with the From field shown as Mailbox X. Please follow these steps to set it:
    1. Make sure the Full Access permission have been configured correctly.
    2. Give send as permission to UserA, UserB and UserC for shared mailbox X.
    Add-ADPermission -Identity “Mailbox X” -User UserA -Extendedrights "Send As"
    Add-ADPermission -Identity “Mailbox X” -User UserB -Extendedrights "Send As"
    Add-ADPermission -Identity “Mailbox X” -User UserC -Extendedrights "Send As"
    3. Then UserA, UserB and User C can send messages by the following steps in Outlook:
      a. Click New Email > OPTIONS > From, then the From field is shown in the message.
      b. Click From > Other E-mail Address, and select the Mailbox X.
    Then the recipients would receive the messages which the From field is shown the Mailbox X name instead of UserA, UserB or UserC.
    To track which user has send as Mailbox X to the recipients, we can enable message tracking log or
    Mailbox audit logging to track it.
    Regards,
    Winnie Liang
    TechNet Community Support

  • Items in shared mailbox are not visible when using cached mode in Outlook 2013

    Hi all,
    When using Outlook 2013 working with the users own mailbox works great, but when a user connects an additional mailbox to its mailbox, this mailbox is shown correctly, but it contains no items. The folder list is shown correctly, but there are no items to be
    seen.
    These users (I have seen it with 3 different users and 2 shared mailboxes already) have full access to these mailboxes (Exchange 2010), but somehow the items aren't shown... When these users turn off cached mode, it works fine and when they use Outlook 2010
    it also works fine, but using Outlook 2013 with cached mode will only show their own items and not the items in an additional shared mailbox.
    What is the cause of all this?
    Kind regards,
    Erik

    Maybe something interesting...
    When looking at article http://support.microsoft.com/kb/982697/en-us
    I saw that Outlook 2013 by default caches everything and that's what I wanted. I tested however adding this regkey to see what happened and after that the email shows up in the mailboxes... Somehow the mail from shared mailboxes doesn't want to be
    cached...
    Does anyone know what this could be? I want everything to be cached, also the shared mailboxes but somehow this doesn't work and it does when using Outlook 2010....

  • Read Status does not apply correctly when working out of a shared mailbox.

    since updating to the Exchange 2010 SP3 RU4, users have been experiencing the same issues when working out of shared mailboxes. when user 1 opens an email or manually marks the email as read the status does not change from their perspective, the email remains
    unread. however, the other users viewing the shared mailbox immediately see the status change to read. User 1 has to re-sort his email from catagory to received or from ect. As soon as the emails are resorted the status changes. alternatively, if User 1 views
    another folder and returns back. the email is marked as read.
    This problem happens with Outlook 2007 and 2010
    This happens after re-creating the profile
    opening outlook with the switches /cleanprofile /cleanviews seems to solve the problem for an hour or so.
    I have run mailbox repairs on the server for the mailboxes in question.
    changing the behaviour in tools>options>reading pane> has no effect.

    Hi Brenn,
    To narrow down the issue, we need more investigation:
    1.Does the issue occurs only in Category view? Please check if user 1 set the view to Date and email read status update.
    2.Does the issue occurs to user1's own mailbox with the same setting as shared mailbox?
    3.If the shared mailbox is in cached mode, please check Account Settings > Change > More Settings... > Adwanced > Use Cached Exchange mode > check Download shared folders.
    4.Please switch to online mode for shared mailbox and test the issue.
    Regards,
    Rebecca Tu
    TechNet Community Support

Maybe you are looking for

  • How to install Mac OS 10.7.4 onto external USB HD

    My Imac is showing early show of serious bernel paroblems/crashing.  (For example, it has tourned it self off then on two times, the opening or new software as well as Internet seraches are dealy slow, a large black rectangle, showed up on the desk o

  • API or Trick to Access Decision Table Content

    Hi, I am modeling a BPM process which calls web services based on a BRM rule with a decision table. In the beginning I need to read the decision table content into the BPM process context (in order to get the selection condition for reading objects f

  • HT2688 how to transfert my purchased music to another account?

    I changed my itunes account to my wife account because we want to use icloud to have the same music when we change device. Is it possible to transfert my music in her account. Luc

  • SQL Developer 3.0 hanging on start up in XWindows

    I hate this kind of post but I'm going to have to do it because I've tried everything I can think of... installed SQL Developer last week, and all worked fine. Then today, when I logged into my Linux host, it does not work. Upon launching sqldevelope

  • Error Message from Brother MFC Printer

    I have a Brother MFC-5460CN attached to my Mac (B&W G3 with G4/600 upgrade, 10.4.11) via USB. When I start up my Mac or when I plug in the printer or turn it on, I get the following error message: Failed to connect to the device. - Check the I/F cabl