Comments on: List Exchange mailbox folder permissions – script

By: Pravin Jha

Pravin Jha — Mon, 09 Feb 2015 22:14:26 +0000

I know its an old post. But i am taking my chance. If you are still listening to this post, can you please email the full script. If possible, I need to import mailbox names from a text file or CSV which ever works. I tried Get-Content but I am hitting an error somewhere.

Also, I don’t need archive mailbox to be included in the report. So, make all these modification is causing typo.

By: Remigiusz Szatkowski

Remigiusz Szatkowski — Thu, 01 May 2014 19:23:01 +0000

Hi
yes you can loop this script for all users, use Matt Niswonger modificated script but at the top first use:
$mailboxes = get-mailbox -resultsize unlimited | select alias
foreach ($mailbox in $mailboxes){
$MBXFolders = @()
$MBXFoldersCorr = New-Object System.Collections.ArrayList
$ArchiveFoldersCorr = New-Object System.Collections.ArrayList
$Permissions = @()

$MBX_tocheck = $mailbox.alias
now rest of the script
but everywhere where is:
$Permissions | Sort-Object FolderName,User | Format-Table
replace it by:
$Permissions | Sort-Object FolderName,User | out-file d:\scripts\$($mailbox.alias).txt

and at the end of script add
}

it should works if not let me know I didn’t test it, but it should create .txt file with mailbox alias in d:\scripts\ for each mailbox

By: Rick

Rick — Tue, 29 Apr 2014 14:32:56 +0000

Is there a way to run this script and loop it for every user in an organization?

By: Matt Niswonger

Matt Niswonger — Thu, 10 Oct 2013 14:43:19 +0000

Hey, thanks for the script. I changed it up so it prompts for the username to check and also provides permissions for the user’s personal archive, if they have one.

$MBXFolders = @()
$MBXFoldersCorr = New-Object System.Collections.ArrayList
$ArchiveFoldersCorr = New-Object System.Collections.ArrayList
$Permissions = @()
#$MBX_tocheck = “jastaj”
$MBX_tocheck = read-host ‘Please enter the mailbox alias you would like to check.’
$MBXFolders = Get-MailboxFolderStatistics $MBX_tocheck | select folderpath
$ArchiveFolders = Get-MailboxFolderStatistics $MBX_tocheck -archive | select folderpath
$Archive = get-mailbox $MBX_tocheck

foreach ($item in $MBXFolders) {
$temp = $item.FolderPath
$temp = $Temp.Replace(“/”,”\”)
$MBXFoldersCorr.Add($temp) | out-null
}
foreach ($item in $MBXFoldersCorr) {
Try {
$MailboxFolder = $MBX_tocheck + “:” + $item
$FolderPermission = $(Get-MailboxFolderPermission $MailboxFolder -ErrorAction Stop | Select-Object FolderName,User,AccessRights)
Foreach ($perm in $FolderPermission){
$ReturnedObj1 = New-Object PSObject
$ReturnedObj1 | Add-Member NoteProperty -Name “FolderName” -Value $($Perm.FolderName)
$ReturnedObj1 | Add-Member NoteProperty -Name “FolderPath” -Value $MailboxFolder
$ReturnedObj1 | Add-Member NoteProperty -Name “User” -Value $($Perm.User)
$ReturnedObj1 | Add-Member NoteProperty -Name “AccessRights” -Value $($Perm.AccessRights)
$Permissions += $ReturnedObj1
}
}
Catch {
$ReturnedObj = New-Object PSObject
$ReturnedObj | Add-Member NoteProperty -Name “FolderName” -Value $item
$ReturnedObj | Add-Member NoteProperty -Name “FolderPath” -Value $MailboxFolder
$ReturnedObj | Add-Member NoteProperty -Name “User” -Value “*Not Applicable*”
$ReturnedObj | Add-Member NoteProperty -Name “AccessRights” -Value “*Not Applicable*”
$Permissions += $ReturnedObj
Continue
}
}
write-host “”
write-host “The following are the mailbox permissions for $MBX_tocheck”
write-host “”
$Permissions | Sort-Object FolderName,User | Format-Table

if ($Archive.archivedatabase.name -ne $False) {foreach ($item in $ArchiveFolders)
{
$temp = $item.FolderPath
$temp = $Temp.Replace(“/”,”\”)
$ArchiveFoldersCorr.Add($temp) | out-null
}
foreach ($item in $ArchiveFoldersCorr) {
Try {
$MailboxFolder = $MBX_tocheck + “:” + $item
$FolderPermission = $(Get-MailboxFolderPermission $MailboxFolder -ErrorAction Stop | Select-Object FolderName,User,AccessRights)
Foreach ($perm in $FolderPermission){
$ReturnedObj1 = New-Object PSObject
$ReturnedObj1 | Add-Member NoteProperty -Name “FolderName” -Value $($Perm.FolderName)
$ReturnedObj1 | Add-Member NoteProperty -Name “FolderPath” -Value $MailboxFolder
$ReturnedObj1 | Add-Member NoteProperty -Name “User” -Value $($Perm.User)
$ReturnedObj1 | Add-Member NoteProperty -Name “AccessRights” -Value $($Perm.AccessRights)
$Permissions += $ReturnedObj1
}
}
Catch {
$ReturnedObj = New-Object PSObject
$ReturnedObj | Add-Member NoteProperty -Name “FolderName” -Value $item
$ReturnedObj | Add-Member NoteProperty -Name “FolderPath” -Value $MailboxFolder
$ReturnedObj | Add-Member NoteProperty -Name “User” -Value “*Not Applicable*”
$ReturnedObj | Add-Member NoteProperty -Name “AccessRights” -Value “*Not Applicable*”
$Permissions += $ReturnedObj
Continue
}
}
write-host “”
write-host “The following are the archive permissions for $MBX_tocheck”
write-host “”
$Permissions | Sort-Object FolderName,User | Format-Table
}

By: Matias Basgier

Matias Basgier — Tue, 08 Oct 2013 13:27:49 +0000

Yes, thank it works. Thank you.

By: Remigiusz Szatkowski

Remigiusz Szatkowski — Tue, 08 Oct 2013 12:53:47 +0000

I’ve send you script by an email hope it works like you want.

By: Matias Basgier

Matias Basgier — Mon, 07 Oct 2013 06:42:26 +0000

thanks for your posting. But when I try this, I get the same result as when I do not use the filter. I get always a list with all folders and all permissions. I want to have a list on which subfolders a specific user have permissons. Do you have another idea?

By: Remigiusz Szatkowski

Remigiusz Szatkowski — Fri, 04 Oct 2013 21:20:40 +0000

Hi Matias
You should use $_.user.ToString() -like “John”
or $_.user.ToString() -match “John”

By: Matias Basgier

Matias Basgier — Fri, 04 Oct 2013 10:39:05 +0000

I would like to show only the permissions that a particular user has.
i tried to filter in this part by User A:
$FolderPermission = $(Get-MailboxFolderPermission $MailboxFolder -ErrorAction| where {$_.User -like “User A”} |Select-Object FolderName,User,AccessRights) but it does not work.
Do you have any idea?

By: Remigiusz Szatkowski

Remigiusz Szatkowski — Sat, 28 Sep 2013 18:47:02 +0000

check your email