Return
-
Title
How to: See what permissions a user has on a Mailbox using PowerShell -
Description
During the migration of a MailIn to a shared Mailbox in Exchange the owners set in domino are note added to the FullAccess right of the shared mailbox. In the log I can see this error : the operation couldn't be performed because object xxx@xxx couldn't be found on xxxx But the mailbox is well created and the data migraton is ok. -
Cause
This is by design in Exchange. If you give send on behalf permissions to a DL the members of the DL won't have send on behalf permissions on the mailbox, they will only be able to "send on behalf" while using the DL as the sender address.
Permissions are usually set by Security Groups, not Distributionlists. Distributionlists are meant to be lists of users. Security groups are meant to be used to configure permissions. -
Resolution
From the Exchange management Shell, run the following
Get-MailboxPermission -Identity shared-mailbox@domain.com | Format-List
This to check if the user in question has permissions to access the shared mailbox
http://technet.microsoft.com/en-us/library/aa998218(v=exchg.150).aspx
If you cannot fully analyze the result please try the out-file cmdlet.
http://technet.microsoft.com/en-us/library/ee176924.aspx
Also run the following:
Get-Mailbox SharedMailboxName | fl displayname, GrantSendOnBehalfTo
Or:
Get-ADPermission -Identity User | Where-Object {$_.extendedrights -like "*send*"} -
Defect ID
TF0247404