# Powershell script to grant permission to resource mailboxes
#
#################################################################################
#
# The sample scripts are not supported under any Microsoft standard support
# program or service. The sample scripts are provided AS IS without warranty
# of any kind. Microsoft further disclaims all implied warranties including, without
# limitation, any implied warranties of merchantability or of fitness for a particular
# purpose. The entire risk arising out of the use or performance of the sample scripts
# and documentation remains with you. In no event shall Microsoft, its authors, or
# anyone else involved in the creation, production, or delivery of the scripts be liable
# for any damages whatsoever (including, without limitation, damages for loss of business
# profits, business interruption, loss of business information, or other pecuniary loss)
# arising out of the use of or inability to use the sample scripts or documentation,
# even if Microsoft has been advised of the possibility of such damages
#
#################################################################################
#
# Examples to use this script in Powershell...
#
# To add fullaccess permission for "administrator" account
#
#.\Add-Res-Mailbox-Permission "administrator"
trap
{
write-host $_.Exception.Message -fore Red
continue
}
function Grand-FullPermission
{
$searcher = new-object DirectoryServices.DirectorySearcher
$searcher.filter = ("(&(objectCategory=person)(objectClass=User)(mailnickname=*)(userAccountControl:1.2.840.113556.1.4.803:=2))")
$user = $searcher.FindAll()
if ($user.Count -lt 1)
{
throw "no resource mailboxes found."
}
else
{
foreach($objResult in $user)
{
$objUser = $objResult.Properties
#Write-Host "Account Name (CN): $($objUser.name)"
#Write-Host "Alias (mailNickname): $($objUser.mailnickname)"
#add-content -path mailboxlist.txt -encoding ascii $($objUser.mailnickname)
Add-MailboxPermission -identity $($objUser.mailnickname) -user $script:serviceaccnt -accessrights fullaccess
}
}
}
$script:serviceaccnt = $args[0]
if ($script:serviceaccnt.Length -gt 0)
{
Grand-FullPermission
}
else
{
write-host "no service account supplied"
}
