Windows/exchange: Unterschied zwischen den Versionen
Aus SchnallIchNet
< Windows
Cbs (Diskussion | Beiträge) |
Cbs (Diskussion | Beiträge) (→Logging) |
||
Zeile 94: | Zeile 94: | ||
=== Logging === | === Logging === | ||
+ | |||
+ | |||
+ | ==== Track accross multiple servers ==== | ||
+ | |||
+ | get-transportserver | ||
+ | |||
+ | |||
+ | e.g. that to "get-messagetrackinglog": | ||
+ | |||
+ | get-transportserver | get-messagetrackinglog | ||
Zeile 100: | Zeile 110: | ||
get-messagetrackinglog -Sender 'user@arifleet.de' -Start "5/04/2015 5:00:00 AM" -End "5/15/2015 8:30:00 AM" | get-messagetrackinglog -Sender 'user@arifleet.de' -Start "5/04/2015 5:00:00 AM" -End "5/15/2015 8:30:00 AM" | ||
+ | get-transportserver | get-messagetrackinglog -Sender 'system-mail.it@arifleet.de' \ | ||
+ | -Start "6/01/2015 5:00:00 AM" \ | ||
+ | -End "6/01/2015 10:30:00 AM" \ | ||
+ | -resultsize unlimited | ||
=== move mailbox between exchange-databases === | === move mailbox between exchange-databases === |
Version vom 3. Juni 2015, 06:21 Uhr
Inhaltsverzeichnis
- 1 PowerShell
- 1.1 possible access rights
- 1.2 create mailbox
- 1.3 create linked mailbox
- 1.4 add mailbox permissions
- 1.5 add 'Send as' permissions
- 1.6 add mailbox folder permissions
- 1.7 get mailbox permissions
- 1.8 get distribution group members
- 1.9 Logging
- 1.10 move mailbox between exchange-databases
- 1.11 set thumbnail-image
PowerShell
powershell commands
possible access rights
The Access Rights parameters are as below: ReadItems: The user has the right to read items within the specified folder. CreateItems The user has the right to create items within the specified folder. EditOwnedItems The user has the right to edit the items that the user owns in the specified folder. DeleteOwnedItems The user has the right to delete items that the user owns in the specified folder. EditAllItems The user has the right to edit all items in the specified folder. DeleteAllItems The user has the right to delete all items in the specified folder. CreateSubfolders The user has the right to create subfolders in the specified folder. FolderOwner The user is the owner of the specified folder. The user has the right to view and move the folder and create subfolders. The user can’t read items, edit items, delete items, or create items. FolderContact The user is the contact for the specified public folder. FolderVisible The user can view the specified folder, but can’t read or edit items within the specified public folder. The Roles with which we can provide the access rights are as below: None FolderVisible Owner CreateItems, ReadItems, CreateSubfolders, FolderOwner, FolderContact, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems PublishingEditor CreateItems, ReadItems, CreateSubfolders, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems Editor CreateItems, ReadItems, FolderVisible, EditOwnedItems, EditAllItems, DeleteOwnedItems, DeleteAllItems PublishingAuthor CreateItems, ReadItems, CreateSubfolders, FolderVisible, EditOwnedItems, DeleteOwnedItems Author CreateItems, ReadItems, FolderVisible, EditOwnedItems, DeleteOwnedItems NonEditingAuthor CreateItems, ReadItems, FolderVisible Reviewer ReadItems, FolderVisible Contributor CreateItems, FolderVisible Ref: http://technet.microsoft.com/en-us/library/dd298062(v=exchg.150).aspx The following roles apply specifically to calendar folders: AvailabilityOnly View only availability data LimitedDetails View availability data with subject and location
create mailbox
Create a new mailbox
New-Mailbox -Name 'prospect NL' -Alias 'prospect.nl' -OrganizationalUnit 'arifleet.com/ARI Fleet Europe/Stuttgart/Rooms and Equipment' \ -UserPrincipalName 'prospect.nl@arifleet.com' -SamAccountName 'prospect.nl' -FirstName 'prospect' -Initials -LastName 'NL' \ -Password 'System.Security.SecureString' -ResetPasswordOnNextLogon $false -Database 'Stuttgart Mailbox DB One'
create linked mailbox
New-Mailbox -Name 'Koroch, Ernst' -Alias 'ekoroch' -OrganizationalUnit 'arifleet.com/ARI Fleet Europe/Stuttgart/Users' -UserPrincipalName \ 'ekoroch@arifleet.com' -SamAccountName 'ekoroch' -FirstName 'Ernst' -Initials -LastName 'Koroch' -Database 'Stuttgart Mailbox DB One' \ -LinkedMasterAccount 'fleetservices\ekoroch' -LinkedDomainController 'dc03.fleetservices.intra' -LinkedCredential \ 'System.Management.Automation.PSCredential'
add mailbox permissions
Add full access to mailbox 'mailbox@arifleet.de' for user 'DOMAIN\user':
Add-MailboxPermission -Identity mailbox@arifleet.de -User DOMAIN\user -AccessRights Fullaccess -InheritanceType All
add 'Send as' permissions
Add-ADPermission -Identity 'CN=Mahnwesen,OU=Users,OU=Stuttgart,OU=ARI Fleet Europe,DC=arifleet,DC=com' -User 'DOMARI\ntrgovcevic' -ExtendedRights 'Send-as'
add mailbox folder permissions
Add-MailboxFolderPermission -Identity poolcar@netcar24.com:\Calendar -user csteidl@arifleet.com -
get mailbox permissions
get permissions of fhess on mailbox prospect.be
Get-MailboxPermission -Identity prospect.be@arifleet.com -User "fhess"
get folder permissions
get-mailboxfolderpermission -identity fhess
get distribution group members
get-distributiongroupmember <group>
get-distributiongroupmember mailaddress@arifleet.de
Logging
Track accross multiple servers
get-transportserver
e.g. that to "get-messagetrackinglog":
get-transportserver | get-messagetrackinglog
message tracking
get-messagetrackinglog -Sender 'user@arifleet.de' -Start "5/04/2015 5:00:00 AM" -End "5/15/2015 8:30:00 AM"
get-transportserver | get-messagetrackinglog -Sender 'system-mail.it@arifleet.de' \ -Start "6/01/2015 5:00:00 AM" \ -End "6/01/2015 10:30:00 AM" \ -resultsize unlimited
move mailbox between exchange-databases
Move Mailboxes between exchange >= 2010 servers
the output is piped into 'ft' (format table) to get complete output and not stripped it...
New-MoveRequest -Identity mailbox@arifleet.de -TargetDatabase ‘Whatever Database-Name 001’ | ft -AutoSize -Wrap
set thumbnail-image
Import-RecipientDataProperty -Identity dSchlenzig -Picture -FileData \ ([Byte[]]$(Get-Content -path ".\thumb-DOMARI.jpg" -Encoding Byte -ReadCount 0)