Cyber-Security Windows

Export a list of Full Access Permissions -Microsoft Exchange

The following is a command that will allow you to view all mail boxes that have the Full Access permission enabled in CSV document that you can filter and sort using Excel. This command will filter out the SELF permissions as every user should have Full Access to their own mailbox and will also output the user name of the user holding that Full Access Permission.

Get-Mailbox | Get-MailboxPermission | where {$_.user.tostring() -ne "NT AUTHORITYSELF" -and $_.IsInherited -eq $false} | Select Identity,User,@{Name='Access Rights';Expression={[string]::join(', ', $_.AccessRights)}} | Export-Csv -NoTypeInformation outputfile.csv

The CSV document will be exported to your current location in CMD so probably C:System32 if you haven’t moved to another location alternatively you could replace the outputfile.csv with C:UsersPublicDesktopoutputfile.csv and this will export the CSV to the public desktop.

If you want to do a bit of further reading just hit up the sites below: