Search This Blog

Monday, September 6, 2010

Audit full access in Exchange

Use this command in powershell EMC: Get-Mailbox -Server “server-name” | Get-MailboxPermission | where { ($_.AccessRights -eq “FullAccess”) -and ($_.IsInherited -eq $false) -and -not ($_.User -like “NT AUTHORITY\SELF”) } |export-csv c:\full.txt

1 comment:

Tom Brown said...

Thanks for sharing this helpful PowerShell command for auditing full access in exchange. I also found good information about exchange server auditing tool from http://www.lepide.com/exchange-server-audit/ which audits who is accessing the mailboxes without prior assigned permission. It provides the auditing report at granular level with with real time monitoring and get real time alerts for all suspicious changes by sending customized email notification.