en Passant
not letting life just pass on by
Grant Permissions to Modify Delegates in Resource Forest
Tags:
With the resource forest model, we need to grant permissions to the client's logon (authentication account) so that they can modify their own delegates. This script takes both a command-line option, or will request one if the cmd-line option is not populated.
It grants the WriteProperty and SendAs which I believe is unnecessary for delegates, but resolved other problems I was having in the environment.
do {
if ($Args.count -ne 0) {
$userAlias = $Args[0]
$args = $null
} else {
$UserAlias = Read-Host "Who do you want to add modify Delegate rights to"
}
$MAS = get-mailbox $useralias
} While ($mas -eq $null -and $UserALias -ne "")
$AEA = $MAS.LinkedMasterAccount
Get-Mailbox $useralias | Add-ADPermission -User $AEA -AccessRights WriteProperty #-Properties:"personal information"
Get-Mailbox $useralias | Add-ADPermission -User $AEA -ExtendedRights Send-As
Get-Mailbox $useralias | Add-MailboxPermission -User $AEA -AccessRights SendAs
if ($Args.count -ne 0) {
$userAlias = $Args[0]
$args = $null
} else {
$UserAlias = Read-Host "Who do you want to add modify Delegate rights to"
}
$MAS = get-mailbox $useralias
} While ($mas -eq $null -and $UserALias -ne "")
$AEA = $MAS.LinkedMasterAccount
Get-Mailbox $useralias | Add-ADPermission -User $AEA -AccessRights WriteProperty #-Properties:"personal information"
Get-Mailbox $useralias | Add-ADPermission -User $AEA -ExtendedRights Send-As
Get-Mailbox $useralias | Add-MailboxPermission -User $AEA -AccessRights SendAs
Comments
Post new comment