View a users access to multiple mailboxes

I am looking to do some maintenance and clean up on shared mailboxes prior to disabling the mailbox from the AD account. Our retention policy on a mailbox is 90 days active then export to PST for archiving. I want to avoid going into every mailbox to see
who has Full Permissions, but I would like to run a script based on the AD account and have it provide the list of mailboxes the account has Full Permission on. I am tinkering around but I am hitting some walls with this.
This is for EX2010 for now.
- Gymmbo

Hi,
There are a lot of useful scripts on TechNet One Script site. Here is a helpful one:
Retrieve Full Access Permissions for Shared Mailboxes
http://gallery.technet.microsoft.com/office/Retrieve-Full-Access-09544b54
Thanks,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support

Similar Messages

List of users who have access to multiple mailboxes

Hi,
I got the list of around three hundred generic mailboxes
Please help me with the command which can help me to get the report of all users who has access on those generic mailbox.

Hi,
If you want to export these permissions to a csv file, you can use the following cmdlet:
Get-Mailbox -ResultSize Unlimited | Get-MailboxPermission | Where {$_.user -notlike "NT AUTHORITY\SELF" -and $_.IsInherited -eq $false} | Select Identity,User,@{Name='Access Rights';Expression={[String]::join(‘, ‘, $_.AccessRights)}} | Export-Csv
C:\MailboxAccess.csv -NoTypeInformation
Hope this can be helpful to you.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Add-MailboxPermission for multiple users on multiple mailboxes

I have a need to grant a large number of users full access to an equally large number of mailboxes. I've previously been able to do this easily in the management shell where I have multiple users for one mailbox (or vice-versa; one user for multiple mailboxes)
by using one of the following 2 commands:
get-content c:\xxxx.txt | foreach { Add-MailboxPermission $_ -User user.name -AccessRights FullAccess}
or
get-content c:\xxxx.txt | foreach { Add-MailboxPermission examplemailbox -User $_ -AccessRights FullAccess}
This works fine for when there are only multiple entries on one side of the equation, but using this method, I would need to run the command multiple times to get all of the accesses set up as requested. So I've been looking to see if there is a way of writing
one command that could achieve it all in one go.
What I've been looking at doing is creating a .csv file, filled as such;
name,mail
user.name1,mailbox1
user.name2,mailbox2
And then writing a shell command like the below:
import-csv c:\xxxx.csv | foreach { Add-MailboxPermission $_.mail -User $_.name -AccessRights FullAccess}
Will this achieve the result that I'm aiming for? or is it going to be easier to just go with the more time-consuming method of just having the multiple entries on one side of the equation?

Hi,
I have a test in my environment, you can use the following cmdlet to grant multiple users full access to multiple mailboxes.
Import-csv c:\test1.csv | foreach { Add-MailboxPermission $_.mail -User $_.name -AccessRights FullAccess}
For example, if I want to grant amy02, amy03 full access permission to amy01; grant amy01, amy02 full access permission to amy03, the test1.csv file should be:
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support

Report on User Access

Hi,
I want to run a report to view all user access within our subsidiary. I know I can see each users access individually by using transaction code SU01D, but is there away to see all users access at the same time?
Kind Regards,
Tracy.

Dear,
Please check: http://sap.ittoolbox.com/groups/technical-functional/sap-security/sap-users-access-to-transactions-1932475
Regards,
Syed Hussain.

Set Single user with reviewer access to multiple conference room calendars

Want to add a single user with reviewer access to multiple conference room calendars, used the below but it given a below error , Single user i am able to add but single user for multiple confernce room calendars hot happening.
Import-csv C:\smtp1.csv | foreach-object {Add-MailboxFolderPermission -identity $_mail":\Calendar" -User "Mike" -AccessRights "Reviewer"}
Smtp1.csv
mail
[email protected]
[email protected]
Error:--
[PS] C:\>Import-csv "C:\smtp1.csv" | foreach-object {Add-MailboxFolderPermission -identity "$_mail:\Calendar" -User "Mike" -AccessRights "Reviewer"}
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission
The specified mailbox "\Calendar" doesn't exist.
    + CategoryInfo          : NotSpecified: (0:Int32) [Add-MailboxFolderPermission], ManagementObjectNotFoundException
    + FullyQualifiedErrorId : 78C23328,Microsoft.Exchange.Management.StoreTasks.AddMailboxFolderPermission

i tried with that as well but getting the below
A positional parameter cannot be found that accepts argument ':\Calendar'.
    + CategoryInfo          : InvalidArgument: (:) [Add-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Add-MailboxFolderPermission
A positional parameter cannot be found that accepts argument ':\Calendar'.
    + CategoryInfo          : InvalidArgument: (:) [Add-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Add-MailboxFolderPermission
A positional parameter cannot be found that accepts argument ':\Calendar'.
    + CategoryInfo          : InvalidArgument: (:) [Add-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Add-MailboxFolderPermission
Cannot process argument transformation on parameter 'Identity'. Cannot convert value "" to type "Microsoft.Exchange.Configuration.Tasks.MailboxFolderIdParameter". Error: "Valu
e cannot be null.
Parameter name: mailboxFolderId"
    + CategoryInfo          : InvalidData: (:) [Add-MailboxFolderPermission], ParameterBindin...mationException
    + FullyQualifiedErrorId : ParameterArgumentTransformationError,Add-MailboxFolderPermission

Multiple simutaneously logged in users accessing AFP home directories?

Hi,
Many of our problems are described in this guy's blog:
http://alblue.blogspot.com/2006/08/rantmac-migrating-from-afp-to-nfs.html
The basic capability we want is to have multiple simultaneously logged in users to have access to their AFP mounted home directory, which is configured in a sane, out-of-the box setup using WGM and Server Admin.
Multiple user access could take the form of FUS (fast user switching), or simply allowing a user to SSH into a machine that another user is already logged into and expect to be able to manipulate the contents of her home directory.
From my extensive searches, I have no reason to believe this is currently possible with 10.4 Server and AFP.
(here's the official word from apple: http://docs.info.apple.com/article.html?artnum=25581)
I've read that using NFS home directories will work, though.
I want to believe that Apple has a solution for this by now (it's been almost a year since we first had difficulty), or at least a sanctioned workaround. If Apple doesn't have one, maybe someone else has come up with something clever. I find it hard to believe that more people haven't wanted this capability! (not being able to easily search the discussion boards doesn't help, though...)
Thanks for your help!
Adam

Parallels Issue. Track at http://forum.parallels.com/showthread.php?p=135585

Error on load: System.IO.IOException: The process cannot access the file : error in event viewer when users want to view documents from this third party deployed scan solution

Error on load: System.IO.IOException: The process cannot access the file
'\\server1\SCANSHARED\.pdf' because it is being used by another process.
   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
   at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)
   at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)
   at System.IO.File.WriteAllBytes(String path, Byte[] bytes)
   at abc.Scan.Layouts.ICC.Scan.View.Page_Load(Object sender, EventArgs e)
I faced this error in event viewer when users want to view documents from this third party deployed scan solution
here I have two WFS servers and they configured with load balancing in F5 .
when I enable both servers in F5 I receive this error messages in 2nd server,
when users want to view documents
adil

Do you have antiVirus installed on the sharepoint servers?
These folders may have to be excluded from antivirus scanning when you use file-level antivirus software in SharePoint. If these folders are not excluded, you may see unexpected behavior. For example, you may receive "access denied" error messages when files
are uploaded.
Please follow this KB and exclude the folders from Scanning.
http://support.microsoft.com/kb/952167
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

We have multiple users, each with multiple devices, on 1 apple id - as we want to share music and ibooks etc. We want the children to have access to the store, but with a financial limit. How do we do this?

We have multiple users, each with multiple devices, on 1 apple id - as we want to share music and ibooks etc. We want the children to have access to the store, but with a financial limit. How do we do this?

Welcome to the Apple Community.
That's simply not possible I'm afraid. You'd need to give them their own account and allowance or make it so you are required to be there to input the password when they wish to make a purchase.

Delivering Mail to Multiple users from Consolidated External Mailbox

Hi everyone
I'm new to the use of postfix, spamassassin and so on to send and recieve email. On PCs when setting up a small server at home, or with students to demonstrate some of the issues involoved I've used the rather nicely set up Mercury Mail system.
Now I have my own MacMini with OSX Server 10.6.x on it and want to do the same things as I used to do.
POP email from my ISP. The ISP email boxes act as central consolidation points for two or more domains.
Because my DSL connection may be allocated a different IP address when it drops, it has been easier to direct mail this way.
Mail to @mydomain.com and @anotherdomain.com all go to one mailbox at the ISP (thanks to my DNS registry).
Mail may also be retrieved from a GMail account via POP3 or similar to be consolidated on the server/backed up locally.
What I need to do:
- Mail needs to be retrieved from the mailboxes
- Mail needs to be checked for SPAM level and marked as SPAM as needed
- The OSX server via Postfix (?) needs to redirect mail to the appropriate OD user
- If no appropriate user detected then mail is copied to the postmaster account and bounced.
I have seen various tutorials out there for fetchmail/mpop out there but found them a tad confusing.
I have also seen replacement software, but I want to make use of the built in systems such as fetchmail to do what I want.
It would also be nice to have the passwords stored in the keychain for a little more security.
Can anyone help with a suitable guide or willing to help me write a guide to tell people how to do this?
Cheers
Ady

OK so I have found from various sources, and through trial and error that I am able to do the following in a shell script:
--- start script ---
user=<ISP USERNAME>
isp=<ISP NAME>
server=<SERVER NAME AT ISP eg mail>
TMPFILE=`mktemp /tmp/fm.XXXXXX` || exit 1
password=$(security find-internet-password -s $server.$isp -a $user -g 2>&1 | perl -ne '/password: "(\S*)"/ and print $$
cat <<EoF > $TMPFILE
set postmaster '<LOCAL POSTMASTER ACCOUNT>'
set bouncemail
poll $server.$isp with proto POP3 and options no dns
user "$user" there with password '$password'
options fetchall keep mda '/usr/bin/procmail -d %T'
EoF
fetchmail -v -f $TMPFILE
rm -f $TMPFILE
--- end of script ---
thanks to http://serverfault.com/questions/149452/how-can-i-use-fetchmail-or-another-email -grabber-with-osx-keychain-for-authenti
and for the autostart fetchmail on boot from http://discussions.apple.com/thread.jspa?threadID=2218143&tstart=225
making this executable and putting in the /etc folder as run-fetchmail is the first step
Now this works to deliver messages to the local mail, but you need to access it via the terminal - hmmm...
the fetchall is to grab all the messages even read ones whilst I test...
so I tried removing the mda section so it used the default mda on snow leopard, but the message are not being delivered to the respective users mail.app accessible mailboxes.
I will add daemon to the file once I have the fetching working correctly
so - how on earth do I get the mail to be delivered to the Mail.app accessible mail delivery agent?

How to provide access to multiple users connected to a Dumb switch? (multi-auth/multi-domain)

Good morning everybody,
I am writing on behalf of not being able to implement a desired outcome in our company network. In fact the situation is as follows:
What I want to do is to be able to authenticate users (802.1x authentication) in our company radius server and authorize them access by having a dynamic VLAN assignment in a multi-user environment on one and the same port of a Cisco 2960 switch. So far, the authentication and authorization has been working completely smoothly (there are no problems with itself). The concept involves the configuration of both DATA and VOICE VLANs as I there is also phone authentication implemented. In order to simulate this environment I introduce a Dumb switch connected to my Cisco 2960 Catalyst.
What I have successfully managed to get to work so far is this:
1) On one switch port I have tried the “authentication host-mode multi-domain” and it worked perfectly for a PC behind a telephone, or with one PC connected to a the dumb switch + the telephone connected to another port of the dumb switch. Logically it is the same situation as there is a separation in two domains – DATA and VOICE. Bellow is an output from show authentication sessions for this scenario.
Interface MAC Address Method Domain Status Session ID
Fa0/23 0021.9b62.b79b dot1x DATA Authz Success C0A8FF69000000F3008E (user1)
Fa0/23 0015.655c.b912 dot1x VOICE Authz Success C0A8FF69000000F9009F (phone)
2) On the other hand, when I try the same scenario with the “authentication host-mode multi-auth”, the switch still separates the traffic in two domains and is able to authenticate all users, AS LONG AS they are in the same VLAN.
show authentication sessions:
Interface MAC Address Method Domain Status Session ID
Fa0/23 0021.9b62.b79b dot1x DATA Authz Success C0A8FF69000000F3008E (user1)
Fa0/23 b888.e3eb.ebac dot1x DATA Authz Success C0A8FF69000000F8008C (user2)
Fa0/23 0015.655c.b912 dot1x VOICE Authz Success C0A8FF69000000F9009F (phone)
However, I cannot succeed authentication of many users from DIFFERENT VLANs, neither in multi-auth nor in multi-domain modes.
What I want to get is an output like this:
Interface MAC Address Method Domain Status Session ID
Fa0/23 0021.9b62.b79b dot1x DATA Authz Success C0A8FF69000000F3008E (user1)
Fa0/23 b888.e3eb.ebac dot1x DATA Authz Success C0A8FF69000000F8008C (user2)
Fa0/23 0015.655c.b912 dot1x VOICE Authz Success C0A8FF69000000F9009F (phone)
I want the switch to authenticate the users anytime they connect to itself and for them to have an instant access to the network. (I tell this because I tried scenario 1) with multi-domain mode and authentication violation replace, and it worked but, two users never had access to the “Internet” simultaneously!!!
The configuration of the interface connected to the Dumb switch is as follows.
interface FastEthernet0/x
description Connection to DUMBswitch
switchport mode access
switchport voice vlan XXX
switchport port-security maximum 10
switchport port-security
switchport port-security violation protect
authentication host-mode multi-auth
authentication priority dot1x
authentication port-control auto
authentication timer reauthenticate 4000
authentication violation replace
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
The way I see it is explained in the following steps:
- PC1 connects to the Dumb switch. This causes the Cisco switch to authenticate user1. This creates an auth. session with its MAC address linked to a domain DATA.
- When PC2 connects to the Dumb switch, this causes the violation replace which replaces the recent authenticated MAC address with the MAC of PC2. I would like it once authenticated to appear in the authentication sessions with a link to a new DATA domain linked to the VLAN assigned from the RADIUS server.
Is this possible? I think (in theory) this is the only way to provide authenticated access to multiple users connecting through Dumb switch to the network.
Has anybody ever succeeded in such a configuration example and if yes, I would be love to get some help in doing so?
Thank you
Stoimen Hristov

Hi Stoimen,
I have done a setup similar to yours with the only exception being VLAN assignment. When I used dACLs only, it makes things somewhat easier as the VLAN no longer matters. Remember that the switchport is in access mode and will only allow a single VLAN across it (with the exception of the voice VLAN). I think that is the real cause of your problem.
From what I can see, you have 2 options available to you:
1) Use dACLs instead of VLAN assignment. This means that an access list will be downloaded from the radius server straight to the authenticated user's session. I have tested this and it works perfectly. Just Google Cisco IBNS quick reference guide and look for the section that deals with Low Impact mode.
2) Get rid of the dumb switches and use managed switches throughout your network. Dumb switches will always be a point of weakness in your network because they have no intelligence to do advanced security features like port security, 802.1x, DHCP snooping, etc.
Hopefully someone else will chime in with another option.
Xavier

What happens when multiple users access the same servlet?

Do the users share all the same resources? Or is a new process generated for each user? I have a servlet that builds a string to return to the user and I only have myself to test, so I can't really see what happens when many users access the servlet. Is there a possibility that the string will get screwed up, like when dealing with multiple threads, or do all the users get their own resources and I don't have to worry about that?

huh? if you can point a test servlet at it, you can point a browser at it (even if the servlet does not serve html it will run)
try pasting the servlet URL into a web browser
refreshing multiple browsers repeatedly could provide a manual test

I run a mac air on a single user account but multiple people using it, which is ok for the situation. All have their accounts in the apple mail app. what is missing for me is a separate password to access the mail account. otherwise anyone can see anyones

I run a mac air on a single user account but multiple people using it, which is ok for the situation. All have their accounts in the apple mail app. what is missing for me is a separate password to access the mail account. otherwise anyone can see anyones
Any clue, how i can add a mail account to apple mail app, but with separate password / pin to open it.
Years ago there was a program called mail switcher which added this functionality, but thats gone.
cheers
Tom

They would have to be logged in as separate users in order not to see your account in Mail. Whatever accounts put in Mail under your account will show up. All mail accounts usually have there own user and password. The only thing you can do is to remove the password from Keychain and take the account offline so you don't keep getting prompts for passwords each time it checks for mail.
Not a great solution.
Best way is to give the other user their own user account with their own mail and enable fast user swithcing to log between the different users if all access the computer frequently.

Accessing a shared mailbox for users that do not have a mailbox associated with their AD account.

is it possible to give just AD users access to a shared mailbox via webmail in an exchange 2010 environment when those users do not have mailboxes associated with their AD account? They do have full access rights to the shared mailbox.

Hi Shmaxolin,
According to my experience and research, we can use AD account access to shared mailbox, as long as set properly permission.
We can use IMAP application to access it, please try following steps:
1. Make sure you have enabled IMAP and POP3 protocol.
2. Change IMAP4’s authentication to “Plain test logon (Basic authentication). No…..”(open EMC--->Server Configuration--->Client Access, switch to POP3 and IMAP4, right-click IMAP4 and select Properties, then switch to Authentication)
3. Use the following user format DomainName\Username\MailboxAlias (e.g. DOMAIN\John.Doe\Shared.Mailbox1) to log into the shared mailbox.
More details about Access shared/delegate mailbox of Exchange Server, please refer to:
http://www.limilabs.com/blog/access-shared-delegate-mailbox-exchange-server
Best Regards,
Allen Wang

Database access by Multiple users

Hi All,
I have a ztable and the user has to access the ztable to find the max of ID to insert the next record. This ID increment was done in coding level. It was working fine when a user hit the DB. If multiple user access the same, it throws the error as duplicate records. How to solve this? Can any one give the soln for this?
Thanks in Advance,
Pon

hi Murugesh,
whenever you are updating the data into table through the report.
you need to lock the table before inserting into the table and unloak after inserting the records into the Table.
locking.
FORM lock_spotter.
LOOP AT gt_spotter INTO gs_spotter.
    CALL FUNCTION 'ENQUEUE_EZSPOTTERS'
         EXPORTING
              mode_zspotters = 'E'
              aktnr          = gs_spotter-aktnr
              artnr          = gs_spotter-artnr
              mebme          = gs_spotter-mebme
              unique_key     = gs_spotter-unique_key
              x_aktnr        = ' '
              x_artnr        = ' '
              x_mebme        = ' '
              x_unique_key   = ' '
              _scope         = '2'
              _wait          = ' '
              _collect       = 'X'
         EXCEPTIONS
              foreign_lock   = 1
              system_failure = 2
              OTHERS         = 3.
    IF sy-subrc <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
        WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
    ENDIF.
ENDLOOP.
CALL FUNCTION 'FLUSH_ENQUEUE'
       EXCEPTIONS
            foreign_lock   = 1
            system_failure = 2
            OTHERS         = 3.
IF sy-subrc <> 0.
    MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
            WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
ENDFORM.
unlocking
LOOP AT gt_spotter INTO gs_spotter.
    CALL FUNCTION 'DEQUEUE_EZSPOTTERS'
         EXPORTING
              mode_zspotters = 'E'
              aktnr          = gs_spotter-aktnr
              artnr          = gs_spotter-artnr
              mebme          = gs_spotter-mebme
              unique_key     = gs_spotter-unique_key
              x_aktnr        = ' '
              x_artnr        = ' '
              x_mebme        = ' '
              x_unique_key   = ' '
              _scope         = '2'
              _wait          = ' '
              _collect       = ' '
         EXCEPTIONS
              foreign_lock   = 1
              system_failure = 2
              OTHERS         = 3.
    IF sy-subrc <> 0.
      MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
              WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
    ENDIF.
ENDLOOP
hope this will help you.
Regards,
Madhavi

Multiple users accessing single application in HTML DB 2.1 with XE

Hi,
I am struggling to setup an application in HTMLDB 2.1 on XE.
I would like multiple users to be able to access the same application. I have created the application and the users but now I need to give the new users access to the application.
Can some highlight how to do this? Is it with authorisation schemes?
Thanks
Joel.

Joel,
Have you reviewed the XE documentation on Managing End Users?
http://download-west.oracle.com/docs/cd/B25329_01/doc/appdev.102/b25309/wrkspc.htm#CHDDFDCH
Sergio

View a users access to multiple mailboxes

Similar Messages

Maybe you are looking for