Managing Exchange Full Access–Who can see who’s mail?

This is a good snippet that can be run from the Exchange Management Shell (PowerShell) prompt:


Get-Mailbox | Get-MailboxPermission | Where-Object { ($_.AccessRights -eq "FullAccess") -and ($_.IsInherited -eq $false) -and -not ($_.User -like "*nt authority\self*") } | Select Identity, User | Export-CSV c:\fullperm.csv

This returns a CSV with the first column showing the Active Directory path for the “Identity” that is giving full access. The second column shows the domain\<username> of the “User” that has the access to the “Identity” mailbox.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: