finding users mailbox access in AD

Sam · Joined: 29 Jan 2008 Posts: 16

Not sure if this is the right place to ask a question.... if not sorry...

My management wants me to find out details of a user. Details would include
what all mailboxes he has rights on and is a delegate on.. I tried to search
online, but could not find anything on this..
I know we could go to individually to mailboxes and find if the user has
access...but is there a way to find out what access rights the user has? and
to what mailboxes?

Thx in advance for help

Archived from group: microsoft>public>exchange>tools

Sam · Joined: 29 Jan 2008 Posts: 16

btw...its a exchange 2003, win2k3 environment...

"Sam" wrote in message @TK2MSFTNGP03.phx.gbl...
> Not sure if this is the right place to ask a question.... if not sorry...
>
> My management wants me to find out details of a user. Details would
> include what all mailboxes he has rights on and is a delegate on.. I tried
> to search online, but could not find anything on this..
> I know we could go to individually to mailboxes and find if the user has
> access...but is there a way to find out what access rights the user has?
> and to what mailboxes?
>
> Thx in advance for help
>

Graeme · Joined: 29 Jan 2008 Posts: 6

I use this vbscript - just put the details in the config section and run it.

' This script was originally published in the Exchange Cookbook,
' (http://www.exchangebookcook.com). Written by Paul Robichaux,
' Missy Koslosky, and Devin Ganger. Redistributed with permission
' of the publisher, O'Reilly & Associates.

' This code lists the delegates, if any, for the selected
' mailbox.
' ------ SCRIPT CONFIGURATION ------
strDCName = ""
strUserName = "cn=Joe Bloggs, CN=Users, dc=company, dc=com"
' e.g. "cn=Joe Bloggs, CN=Users, dc=company, dc=com"
' ------ END CONFIGURATION ---------

' find the target user
strQuery = "LDAP://" & strDCName & "/" & strUserName
Set theUser = GetObject(strQuery)
WScript.echo "Mailbox " & strUserName
On Error Resume Next

delegateList = theUser.Get("publicDelegates")
If Err.Number -2147463155 Then
wscript.echo "has these delegates:"
For Each Desc In delegateList
WScript.Echo " " & desc
Next
Else
WScript.Echo "+ Has no delegates"
End If

delegateList = theUser.Get("publicDelegatesBL")

If Err.Number -2147463155 Then
wscript.echo "+ is a delegate of"
For Each Desc In delegateList
WScript.Echo " " & desc
Next
Else
WScript.Echo "+ Not a delegate for anyone"
End If

"Sam" wrote in message @TK2MSFTNGP03.phx.gbl...
> Not sure if this is the right place to ask a question.... if not sorry...
>
> My management wants me to find out details of a user. Details would
> include what all mailboxes he has rights on and is a delegate on.. I tried
> to search online, but could not find anything on this..
> I know we could go to individually to mailboxes and find if the user has
> access...but is there a way to find out what access rights the user has?
> and to what mailboxes?
>
> Thx in advance for help
>

Sam · Joined: 29 Jan 2008 Posts: 16

Thanks Graeme,
So for this script I would have to run it against each server to find the
details of the mailboxes the user has rights/delegate permissions?
I have like more than 50 maibox servers...

Thx

"Graeme" wrote in message @TK2MSFTNGP03.phx.gbl...
>I use this vbscript - just put the details in the config section and run
>it.
>
> ' This script was originally published in the Exchange Cookbook,
> ' (http://www.exchangebookcook.com). Written by Paul Robichaux,
> ' Missy Koslosky, and Devin Ganger. Redistributed with permission
> ' of the publisher, O'Reilly & Associates.
>
> ' This code lists the delegates, if any, for the selected
> ' mailbox.
> ' ------ SCRIPT CONFIGURATION ------
> strDCName = ""
> strUserName = "cn=Joe Bloggs, CN=Users, dc=company, dc=com"
> ' e.g. "cn=Joe Bloggs, CN=Users, dc=company, dc=com"
> ' ------ END CONFIGURATION ---------
>
> ' find the target user
> strQuery = "LDAP://" & strDCName & "/" & strUserName
> Set theUser = GetObject(strQuery)
> WScript.echo "Mailbox " & strUserName
> On Error Resume Next
>
> delegateList = theUser.Get("publicDelegates")
> If Err.Number -2147463155 Then
> wscript.echo "has these delegates:"
> For Each Desc In delegateList
> WScript.Echo " " & desc
> Next
> Else
> WScript.Echo "+ Has no delegates"
> End If
>
> delegateList = theUser.Get("publicDelegatesBL")
>
> If Err.Number -2147463155 Then
> wscript.echo "+ is a delegate of"
> For Each Desc In delegateList
> WScript.Echo " " & desc
> Next
> Else
> WScript.Echo "+ Not a delegate for anyone"
> End If
>
>
> "Sam" wrote in message
> @TK2MSFTNGP03.phx.gbl...
>> Not sure if this is the right place to ask a question.... if not sorry...
>>
>> My management wants me to find out details of a user. Details would
>> include what all mailboxes he has rights on and is a delegate on.. I
>> tried to search online, but could not find anything on this..
>> I know we could go to individually to mailboxes and find if the user has
>> access...but is there a way to find out what access rights the user has?
>> and to what mailboxes?
>>
>> Thx in advance for help
>>
>
>

Graeme · Joined: 29 Jan 2008 Posts: 6

Hi Sam

No... the server you need to point at is just one of your DCs. Basically
you're just querying user attributes that happen to be exchange attributes.
Sorry that's not clear in what I pasted in.

Cheers

Graeme

"Sam" wrote in message @TK2MSFTNGP02.phx.gbl...
> Thanks Graeme,
> So for this script I would have to run it against each server to find the
> details of the mailboxes the user has rights/delegate permissions?
> I have like more than 50 maibox servers...
>
> Thx
>
> "Graeme" wrote in message
> @TK2MSFTNGP03.phx.gbl...
>>I use this vbscript - just put the details in the config section and run
>>it.
>>
>> ' This script was originally published in the Exchange Cookbook,
>> ' (http://www.exchangebookcook.com). Written by Paul Robichaux,
>> ' Missy Koslosky, and Devin Ganger. Redistributed with permission
>> ' of the publisher, O'Reilly & Associates.
>>
>> ' This code lists the delegates, if any, for the selected
>> ' mailbox.
>> ' ------ SCRIPT CONFIGURATION ------
>> strDCName = ""
>> strUserName = "cn=Joe Bloggs, CN=Users, dc=company, dc=com"
>> ' e.g. "cn=Joe Bloggs, CN=Users, dc=company, dc=com"
>> ' ------ END CONFIGURATION ---------
>>
>> ' find the target user
>> strQuery = "LDAP://" & strDCName & "/" & strUserName
>> Set theUser = GetObject(strQuery)
>> WScript.echo "Mailbox " & strUserName
>> On Error Resume Next
>>
>> delegateList = theUser.Get("publicDelegates")
>> If Err.Number -2147463155 Then
>> wscript.echo "has these delegates:"
>> For Each Desc In delegateList
>> WScript.Echo " " & desc
>> Next
>> Else
>> WScript.Echo "+ Has no delegates"
>> End If
>>
>> delegateList = theUser.Get("publicDelegatesBL")
>>
>> If Err.Number -2147463155 Then
>> wscript.echo "+ is a delegate of"
>> For Each Desc In delegateList
>> WScript.Echo " " & desc
>> Next
>> Else
>> WScript.Echo "+ Not a delegate for anyone"
>> End If
>>
>>
>> "Sam" wrote in message
>> @TK2MSFTNGP03.phx.gbl...
>>> Not sure if this is the right place to ask a question.... if not
>>> sorry...
>>>
>>> My management wants me to find out details of a user. Details would
>>> include what all mailboxes he has rights on and is a delegate on.. I
>>> tried to search online, but could not find anything on this..
>>> I know we could go to individually to mailboxes and find if the user has
>>> access...but is there a way to find out what access rights the user has?
>>> and to what mailboxes?
>>>
>>> Thx in advance for help
>>>
>>
>>
>
>

Interactive tool to delete users E-mail based on age? Is there a management tool out there that can simply delete all E-Mail only in a 2007 Exchange user's mailbox based on age? It would work similarly to an archiving utility I suppose, but instead of archiving I want the messages purged. It appears extre

if it is possible to deny access to address book/OAB for a u Hi All, We have a mix of Exchange 2003 and 2007 environment with a single GAL. Is it possible to deny access to address book/OAB for a user. If yes ..how ? Please help -- Haroon Malik Systems Engineer

mailbox manager MRM ex2007 Hi Exchange 2003 had the feature mailbox manager which would look through all the mailboxes based on You could have it in report only mode. I'm seeing this feature isn't on exchange 2007, looks to be replaced by the Messaging Records Manag

Unable to register mailbox using RegisterMailbox.vbs Hi, I encountered the following issues: Unable to start AutoAccept agent service Gives error: Could not start the Auto Accept Agent service on Local Computer. Error: 1067: The process terminated unexpectedly. When trying to register a mailbox using Regist

Exchange 5.5 mailbox restore ASAP Hi I have Exchange 5.5 + NT4. I dont have brick level backup, but I have IS backup. I need to restore a mailbox or part of a mailbox. Is there a way without restore all the IS to restore mailbox or part of it? Than'x Shay ASAP