Friday, 13 January 2012

Auditing Outlook Folder Permissions

After it came to light that some users had set permissions on folders in their Outlook mailbox which were allowing others too much access, I had to create a report of who was sharing certain folders with other users, and who had changed the default permissions.

In Exchange 2010 this is fairly easy, thanks to the Get-MailboxFolderPermission cmdlet.

The trick however, is to find get the right folder to pass into the -Identity parameter. In a multi-national organisation, where local-language versions of Outlook are used, folders may have non-English names. Fortunately the Get-MailboxFolderStatistics cmdlet can be used to identify the correct folder name.

Below is the script I wrote to generate a report of all the rules on the calendar folder, for all regular mailboxes in the Exchange Organisation.