Shulou(Shulou.com)06/02 Report--

SFB Project Experience-60-Export-Shared Mailboxes-Permission-How to get a list of Shared mailboxes and users with permissions

How to get a list of Shared mailboxes and users with permissions to those mailboxes in Exchange Online?

Actual requirements:

Personnel Department:

You need to use the same mailbox to receive emails.

Create a new user mailbox, configure it as a shared mailbox, assign corresponding permissions, and then assign the user to multiple people to use, so that everyone can use the same mailbox to receive emails.

Scene:

When migrating across forests, you need to export shared mailbox permissions to assign permissions to shared mailboxes in the final forest.

Solution:

For Exchange 2013 and Exchange 2010. If you try to extract all shared mailboxes in your organization and determine who has permissions. Following the cmdlet below, you can export data to a txt file for your reference and viewing at will.

1)The first cmdlet collects all shared mailboxes and inserts them into variables.

$Mailboxes = Get-Mailbox -RecipientTypeDetails SharedMailbox -ResultSize:Unlimited | Select Identity,Alias,DisplayName | sort displayname

2)This step takes the mailbox variable and outputs the mailbox name, users with access rights, and assigned access rights for each mailbox.

And write it to the txt file.

$mailboxes | sort displayname | foreach {Get-MailboxPermission -Identity $_.alias | ft identity,user,acce***ights} >SharedPermissions.txt

You may notice that you have nested security groups that contain permissions for these shared mailboxes. To get a membership list for nested SGs, the cmdlet will look like a few minor changes:

1)Change the enumeration limit to-1 so we can return the full output.

$FormatEnumerationLimit =-1

2)Get the full list of security groups and add them to the variable.

$sgroup= Get-Group -RecipientTypeDetails MailUniversalSecurityGroup -resultsize unlimited

3)Run the powershell cmdlet so that for each group, we output the displayname and members to a text file named "Group members.txt".

$sgroup | sort displayname | foreach {Get-Group -Identity $_.WindowsEmailAddress | fl displayname,members} > SGroupMembers.txt

Attention *

If you try to write to the C directory, line 3 may fail.

You may need to change directories to write to temporary folders. To change the directory, use this cmdlet.

This writes the file to the C:\temp folder if it doesn't exist. It will be created.

CD C:\temp

Then run step 3 again.

You can do the same for other resource mailboxes, such as conference room mailboxes, shared mailboxes, universal distribution groups, and universal security groups, by simply changing-RecipienttypeDetails and verifying the parameters you are looking for.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.