Vista - get -mailboxpermission user1

02-25-2008

help explain the results i received from when using powershell
command
get -mailboxpermission user1- (only showing a small part of the
results)

To me it looks like there is a conflict with rights

+++++++++++++++++=+++++++++++++++++++++++==
AccessRights : {FullAccess}
Deny : True
InheritanceType : All
User : comp\Administrator
Identity : comp.LOCAL/NA/HQ/Users/user1
IsInherited : True
IsValid : True
ObjectState : Unchanged

AccessRights : {FullAccess, DeleteItem, ReadPermission,
ChangePermission, Ch
angeOwner}
Deny : False
InheritanceType : All
User : comp\Administrator
Identity : comp.LOCAL/NA/HQ/Users/user1
IsInherited : True
IsValid : True
ObjectState : Unchanged

+++++++++++++++++++++++++++++++++++==

02-26-2008

> AccessRights : {FullAccess}

Quote:

> Deny : True

Quote:

> AccessRights : {FullAccess, DeleteItem, ReadPermission,
> ChangePermission, Ch
> angeOwner}
> Deny : False

I would say that the "Deny:True" is overriding the permissions for this
user, so that only DeleteItem, ReadPermisssion, ChangePermission and
ChangeOwner are allowed.

Not so much a conflict as being perhaps counterintuitive... Why grant
something, but then deny access to it...

Marco

02-25-2008	#1 (permalink)
totalnet32 n/a posts	get -mailboxpermission user1 help explain the results i received from when using powershell command get -mailboxpermission user1- (only showing a small part of the results) To me it looks like there is a conflict with rights +++++++++++++++++=+++++++++++++++++++++++== AccessRights : {FullAccess} Deny : True InheritanceType : All User : comp\Administrator Identity : comp.LOCAL/NA/HQ/Users/user1 IsInherited : True IsValid : True ObjectState : Unchanged AccessRights : {FullAccess, DeleteItem, ReadPermission, ChangePermission, Ch angeOwner} Deny : False InheritanceType : All User : comp\Administrator Identity : comp.LOCAL/NA/HQ/Users/user1 IsInherited : True IsValid : True ObjectState : Unchanged +++++++++++++++++++++++++++++++++++==
My System Specs

02-26-2008	#2 (permalink)
Marco Shaw [MVP] n/a posts	Re: get -mailboxpermission user1 > AccessRights : {FullAccess} Quote: > Deny : True Quote: > AccessRights : {FullAccess, DeleteItem, ReadPermission, > ChangePermission, Ch > angeOwner} > Deny : False I would say that the "Deny:True" is overriding the permissions for this user, so that only DeleteItem, ReadPermisssion, ChangePermission and ChangeOwner are allowed. Not so much a conflict as being perhaps counterintuitive... Why grant something, but then deny access to it... Marco
My System Specs

Similar Threads
Thread	Forum
Exchange 2007 - export permissions with Get-MailboxPermission	PowerShell
(Get-Mailbox user1).primarysmtpaddress - Simple I'm sure	PowerShell
User1 can print from Vista Laptop but not User2	Vista General
User1 can print from Vista laptop but not User2	Vista print fax & scan