Category Archives: permissions

Modify Send As Permission Exchange 2010

Open Exchange Management Console

 

Click Yes on the User Account Control Dialog if it appears

On the left hand side of the screen, navigate to Microsoft Exchange -> Microsoft Exchange On-Premises -> Recipient Configuration

 

Select Mailbox


Right click on the users mailbox you wish to send on behalf, and select Manage Send As Permission…

Click Add…

 

Select the name of the user you wish to give access to, and click OK
 

Click Manage
 

Click Finish   You can also accomplish this by using Powershell.  In this example, Andrew will be given Send As permission on Craig’s mailbox:

Add-ADPermission Craig -User Andrew -ExtendedRights “Send As”

You can also use groups.  In the example below, the group called Sales Users will be given Send As
permission on Craig’s mailbox:

Add-ADPermission Craig -User “Sales Users” -ExtendedRights “Send 
As”

To removing Send As:

Remove-ADPermission Craig -User Andrew -ExtendedRights “Send As”

This will prompt for confirmation, and the confirmation warning is a bit counter intuitive:

Confirm
Are you sure you want to perform this action?
Removing Active Directory permission “Craig” for user “Andrew” with access rights “‘Send As'”.
[Y] Yes  [A] Yes to All  [N] No  [L] No to All  [?] Help (default is “Y”): y

This means that this will remove Andrew’s send as permission on Craig’s mailbox.

Auditing file permissions with Powershell and accesschk.exe

I needed to determine the level of access specific users had.  I used a mix of Powershell and accesschk.exe (You can download from here (new window): http://technet.microsoft.com/en-us/sysinternals/bb664922)
Using the command from powershell:
.accesschk.exe –s “%DOMAIN%%USER%” %DIRECTORYTOCHECK% | Out-File %LOGFILE%
eg: to find out which files in the f:qld folder that the user SALESjohnsa has access to, logging to f:itaccessjohnsa.txt
.accesschk.exe –s “SALESJohnsa” f:qld | Out-File f:itaccessjohnsa.txt
You can also restrict this to listing the directories that can be accessed, by using the –d switch:
.accesschk.exe –s –d “SALESJohnsa” f:qld | Out-File f:itaccessjohnsa.txt

Changing Exchange 2010 mailbox permissions using Powershell

I needed to give a user full control over every users mailbox in an Exchange 2010 environment.  After getting the required permissions and authority, I used the following powershell command:

get-mailbox | add-mailboxpermission -user ‘%ALIAS%’ – Accessrights ‘FullAccess’

where %ALIAS% is the alias of the user who will be given permissions to the mailbox.

EG: Bob needs access to every mailbox:

get-mailbox | add-mailboxpermission -user ‘BOB’ – Accessrights ‘FullAccess’