Exchange 2010 Powershell - 返回具有 SendAs 权限但过滤禁用用户的用户

Question

所以我有一个运行良好的脚本，我在网上找到并根据我的需要进行了更改。我在下面粘贴了这个脚本。但是，在输出中有许多对邮箱具有权限的禁用用户。例如。我会得到一个像“邮箱名称^Mailbox@email.com^ActiveUser ActiveUser DisabledUser”这样的输出所以我想知道是否有办法让脚本跳过禁用用户，就像它忽略自我权限一样。

Add-PSSnapin Microsoft.Exchange.Management.PowerShell.E2010
. $env:ExchangeInstallPath\bin\RemoteExchange.ps1
Connect-ExchangeServer -auto

$OutFile = “C:\Send_As_Permissions.txt”
“DisplayName” + “^” + “Email Address” + “^” + “Send As” | Out-File $OutFile -Force
 
$Mailboxes = Get-Mailbox -resultsize unlimited | Select Identity, Alias, DisplayName, DistinguishedName, WindowsEmailAddress
ForEach ($Mailbox in $Mailboxes) {
    $SendAs = Get-ADPermission $Mailbox.identity | where {($_.ExtendedRights -like “*Send-As*”) -and -not ($_.User -like “NT AUTHORITY\SELF”) -and -not ($_.User -like “s-1-5-21*”)} | % {$_.User}
    $Mailbox.DisplayName + “^” + $Mailbox.WindowsEmailAddress + “^” + $SendAs | Out-File $OutFile -Append
}

Answer 1

如果您只想报告已启用的邮箱，请在 IsMailboxEnabled 属性上过滤来自 Get-Mailbox 的输出：

$Mailboxes = Get-Mailbox -resultsize unlimited | Where-Object { $_.IsMailboxEnabled } | Select ...

如果您只想报告已启用帐户的个别权限分配，则必须根据您提取的 User 属性的值查询 AD：

$SendAs = Get-ADPermission $Mailbox.identity | where {($_.ExtendedRights -like “*Send-As*”) -and -not ($_.User -like “NT AUTHORITY\SELF”) -and -not ($_.User -like “s-1-5-21*”)} | % {$_.User}

$domain,$username = $SendAs.Split('\')
$ADUser = Get-ADUser -Identity $username -Server $domain
if($ADUser.Enabled){
    # output to report
}