Mailboxes with special permissions

Got auditors who want to review any mailboxes that have permissions granted for users other than the mailbox owner?  If you do you’ll appreciate the usefulness of this oneliner, which will give you a list of all of the mailboxes that have special permissions assigned to them so that you don’t have to review every single mailbox on your system manually.

This command grabs all of the mailboxes that have non-inherited permissions for users other than the mailbox owner.

Oneliner   
get-mailbox -resultsize unlimited | Get-MailboxPermission |? {$_.IsInherited -eq $false -and $_.User -notlike "NT AUTHORITY\SELF"} | ft @{Label="Identity";Expression={$_.identity.name}}, User, Deny
This entry was posted in Exchange 2007, Information Security, PowerShell, System Administration. Bookmark the permalink.