How can I view which Calendars a user has access to?
Hi,
We have just migrated from Ex2003 to Ex2010. This has, in the main, gone through reletively easily. One issue I have though is that by default, all users were able to view each others calendars prior to migration and not after.
I have tried running the following EMS commands that have sorted out the problem for the vast majority of users, but not all.
get-mailbox -filter {customattribute1 -eq "Employee"} | ForEach-Object {add-mailboxfolderpermission $_":\Calendar" - User
username@domain.com -AccessRights Reviewer}
(I have also tried using set-mailboxfolderpermissions.... but no change.)
So what I am asking is how to find out which mailboxes
user@domain.com can access or alternatively, which mailboxes do not have
user@domain.com in the access rights list.
Any ideas appreciated.
June 27th, 2011 6:55pm
Hi,
Maybe you can use this way to help you check user’s permission on Calendars:
1.Create a CSV file named CalendarPermission, save it at this path “C:\CalendarPermission.CSV”
Save the members ‘(which mailbox you want to check) identity in CSV file by this way:
Identity
identity1
identity2
identity3
…
Then run these command in Exchange Management shell:
$list=”================================================================”
import-csv -path "C:\CalendarPermission.CSV"|foreach-object{
$_.identity
$list
get-mailboxfolderpermission -identity ($_.identity+":\Calendar")|select User, FolderName, AccessRights
$list
}
After run these commands, you can find user have permission on which mailbox and what permission he have.
Here is
a related document for you:
Get-MailboxFolderPermission
http://technet.microsoft.com/en-us/library/dd335061.aspx
Thanks,
Evan Liu
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
June 28th, 2011 12:16pm
Hi The-Yeti,
How about the issue?
If anything is unclear, please feel free to let me know.
Thanks,
Evan Liu
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
June 30th, 2011 1:32am
Hi,
Well, it isn't exactly pretty and trawling through 400 mailboxes isn't waht I guess the MS exams would call the least administrative effort, but it does indeed do the job.
The created file includes the info I need so thanks.
Have only just really started getting into the powershell thing, thought it was a bit of a nightmare at first but it is getting a little clearer now.
Thanks for the help.
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2011 10:35am
Oh, in case someone else is viewing this I created the CSV file using this command:
get-mailbox -filter {customattribute1 = "Employee"} | export-csv c:\calendarpermission.csv
July 1st, 2011 10:37am
What you're looking to do is get reverse permissions (what other mailboxes a particular mailbox has access to) there is no one liner to do that in powershell. Here's a posting below using ews which I've used for 2007 in the past should still work
for 2010.
http://gsexdev.blogspot.com/2008/10/exchange-reverse-permission-audit.htmlJames Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2011 11:33am