Forum Discussion
Powershell command to pull all user signatures?
Well, keep in mind that users might not have server-side signatures configured, and simply use the Outlook ones. But you can get them via PowerShell:
Get-Mailbox -RecipientTypeDetails UserMailbox | Get-MailboxMessageConfiguration | select Identity,Signature*
- TonyRedmondNov 10, 2017MVP
The question surely is after you return all the signatures stored in user mailboxes, what do you do with it?
- Michelangelo BotturaMar 02, 2020Copper Contributor
I know this is old, but however for the sake of completeness I am going to add my experience: spammers often add a spam link in the signature of accounts they managed to steal credentials. Extracting all signatures may be a way to approach the issue.
- TonyRedmondMar 02, 2020MVP
Michelangelo Bottura I think you might want to focus on topics like eliminating basic authentication and upgrading email clients first. The basic thing you need to do is to stop hackers getting in before you move on to worrying about email signatures. According to Microsoft, 99% of compromised accounts did not use MFA. That would be a much more productive way to stop spammers stealing credentials in the first place.