How to check mailbox permissions using Exchange cmdlet

How to check mailbox permissions using Exchange cmdlet - Step by step with Screenshots

Here are some example how to use Get-MailboxPermission

1. To check individual user mailboxpermission

Get-MailboxPermission blin

Identity User AccessRights IsInherited Deny

-------- ---- ------------ ----------- ----

chicagotech.local... NT AUTHORITY\SELF {FullAccess, Rea... False False

chicagotech.local... CHICAGOTECH\SBS2008$ {ReadPermission} True False

chicagotech.local... CHICAGOTECH\Excha... {FullAccess} True True

chicagotech.local... CHICAGOTECH\Domai... {FullAccess} True True

chicagotech.local... CHICAGOTECH\Enter... {FullAccess} True True

chicagotech.local... CHICAGOTECH\Excha... {FullAccess} True True

chicagotech.local... CHICAGOTECH\Admin... {FullAccess} True True

chicagotech.local... CHICAGOTECH\Excha... {FullAccess} True False

chicagotech.local... CHICAGOTECH\Excha... {ReadPermission} True False

chicagotech.local... NT AUTHORITY\NETW... {ReadPermission} True False

chicagotech.local... NT AUTHORITY\SYSTEM {FullAccess, Del... True False

chicagotech.local... CHICAGOTECH\Excha... {ReadPermission} True False

chicagotech.local... CHICAGOTECH\Excha... {FullAccess, Del... True False

chicagotech.local... CHICAGOTECH\Admin... {FullAccess, Del... True False

chicagotech.local... CHICAGOTECH\Enter... {FullAccess, Del... True False

chicagotech.local... CHICAGOTECH\Domai... {FullAccess, Del... True False

2. To check all users' mailbox permissions,

Get-Mailbox | Get-MailboxPermission

Identity User AccessRights IsInherited Deny

-------- ---- ------------ ----------- ----

chicagotech.local... NT AUTHORITY\SELF {FullAccess, Rea... False False

chicagotech.local... CHICAGOTECH\SBS2008$ {ReadPermission} True False

chicagotech.local... CHICAGOTECH\Excha... {FullAccess} True True

chicagotech.local... CHICAGOTECH\Domai... {FullAccess} True True

3. To display whole information,

Get-MailboxPermission -Identity "username" | fl user, accessrights

User : NT AUTHORITY\SELF

AccessRights : {FullAccess, SendAs, ReadPermission}

User : DOMAIN\BLin

AccessRights : {FullAccess}

4. To check Calendar permissions.

Get-MailboxFolderPermission -identity "username:\Calendar" |fl

RunspaceId : 5a5991b3-5b07-467e-8600-af5bdce15edd

FolderName : Calendar

User : Default

AccessRights : {PublishingAuthor}

Identity : Default

IsValid : True

Post your questions, comments, feedbacks and suggestions

Contact a consultant