Add-MailboxFolderPermission
2 TopicsFolderId's not unique without factoring in case-sensitivity, PowerShell issues...
Hello, I like using Get-/Set-/Add-/Remove-MailboxFolderPermission cmdlets. One of my favorites. There are times when there are special characters in the folder names, so I use the FolderId instead. For example: Add-MailboxFolderPermission -Identity "User1:LgAAAAC5KVkA/5dLTL13II/kvsaqAWCosJLoiFIBRbYcQ3Ny3l9TAAAAfag/AAAB" -User "User2" -AccessRights FolderVisible,ReadItems This has been fantastic to save the day in those cases. My latest issue though is that there turn out to be many duplicate FolderId's if we disregard case-sensitivity. If I import a CSV which has UN-tampered FolderId's (case-preserved and confirmed) with Import-Csv, and then to this: Add-MailboxFolderPermission "User1:$($csv[0].FolderId)" -User "User2" -AccessRights FolderVisible, ReadItems ... the actual folder to be updated with this new permission entry (ACE) may be the one I intended, or it may be one of the other folders with a matching FolderId (ignoring case-sensitivity). What I've found is that it is possible but difficult to bounce back from that problem state. You need to report all permissions before and after and verify the differences are only the intended changes. Super tedious, effectively a dangerous exercise overall. I don't see any alternative solutions for this problem. MFCMAPI I think, as well as Outlook/OWA, are definite workarounds. Wondering if there is anything in-built with the *-MailboxFolderPermission / *-MailboxFolderStatistics cmdlets that can help PowerShell here?767Views0likes1CommentIssue with search mailbox audit log on Exchange Online
Hi Exchange experts I have an issue with searching the audit logs with the mailboxes on Exchange Online. I have a mailbox on Exchange Online. The properties of that mailbox are as follows AuditEnabled: True AuditLogAgeLimit : 90.00:00:00 AuditAdmin : {Update, MoveToDeletedItems, SoftDelete, HardDelete...} AuditDelegate : {Update, MoveToDeletedItems, SoftDelete, HardDelete...} AuditOwner : {Update, MoveToDeletedItems, SoftDelete, HardDelete...} DefaultAuditSet : {Admin, Delegate, Owner} I have conduted the changes on this maibox such as: changed the Send as permission, changed the Send on behafl, delegated another user on this mailbox. A few days later I used the Audit feature from security.microsoft.com portal to search the log for above activities with this maibox but I could not find any entries log that I did a few days ago. The options that I made when searching for mailbox logs Date time range: selected the time period in which I made the change Activities - friendly names: selected all activities on Exchange maibox activities Activities - operation name: blank Record types: blank Search name: blank User: Selected user that has a mailbox I have changed. Also, when I executed the syntax with Exchange PowerShell it doesn't show the change history that I want to see. Search-MailboxAuditLog -Identity po.panda@mydomain -LogonTypes Admin, Delegate -StartDate 7/15/24 -EndDate 7/19/24 -ResultSize 5000Solved878Views0likes8Comments