Script to identify Permissions

Question

I had started to migrate my client over to 365, when I had an issue with users that were moved to 365, no longer had sendas rights to DL's. Since AD permissions do no migrate cross premise, I had to create a new local on premise Security DL, add the users
that needed "SendAs" permissions to the original DL, then run this command.
Add-RecipientPermission “Corporate IT” –Trustee CorpITSendAs –AccessRights SendAs
Here lies the issue. My client does not want to complete this work, nor do they want to ask the users which DL's or mailboxes they send from. So I have been trying to write a script that will identify users with "SendAs" permissions on all mailboxes
and Distribution lists. This is what I found. Get-Mailbox | Get-ADPermission | where {($_.ExtendedRights -like “*Send-As*”) -and ($_.IsInherited -eq $false) -and -not ($_.User -like “NT AUTHORITY\SELF”)} | FT -Wrap
When the report runs, it is showing all the BESADMIN permission's as well. So how do I get this report to not show NT Authority and BESADMIN? I cant seem to get my brackets correct.

Answer 1

This will help you to get direction and how to export the report as well...
http://exchangeshare.wordpress.com/2014/06/02/exchange-powershell-tip-09/
Basically you can add BESAdmin in to the query below...
Where{$_.user -notlike "NT AUTHORITY\SELF" -and $_.user -notlike "Domain\BESAdmin" -and $_.IsInherited -eq $false}
Blog |
Get Your Exchange Powershell Tip of the Day from here