Finding Users who have Send-As or Full Access Permissions to Mailboxes

Pat Richard posted a couple of nice one-liners to determine users who have Send-As or Full Access permissions to mailboxes. The following one-liner lists all mailboxes where another user has Send-Aspermissions, and who that user is:

Get-Mailbox -Resultsize Unlimited | Get-ADPermission | ? {($_.ExtendedRights -like “*send-as*”) -and -not ($_.User -like “nt authority\self”)} | ft Identity, User -auto 

And this one-liner displays all mailboxes where another user has Full Accesspermissions, and who that user is:

Get-Mailbox -ResultSize Unlimited | Get-MailboxPermission | ? {($_.AccessRights -match “FullAccess”) -and -not ($_.User -like “NT AUTHORITY\SELF”)} | ft Identity, User 

Both of these one-liners are very useful to determine who has access to other people’s mailboxes.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s