Get-ADPermission

 

Applies to: Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3

Use the Get-ADPermission cmdlet to get permissions on an Active Directory object.

Syntax

Get-ADPermission -Identity <ADRawEntryIdParameter> [-DomainController <Fqdn>] [-User <SecurityPrincipalIdParameter>]

Get-ADPermission -Identity <ADRawEntryIdParameter> [-DomainController <Fqdn>] [-Owner <SwitchParameter>]

Detailed Description

This cmdlet allows you to retrieve the permissions set for an Active Directory object.

To run the Get-ADPermission cmdlet, the account you use must be delegated the following:

• Exchange View-Only Administrator role

For more information about permissions, delegating roles, and the rights that are required to administer Exchange Server 2007, see Permission Considerations.

Parameters

Parameter	Required	Type	Description
Identity	Required	Microsoft.Exchange.Configuration.Tasks.ADRawEntryIdParameter	Use this parameter to specify the identity of the object that you are getting permissions on.
DomainController	Optional	Microsoft.Exchange.Data.Fqdn	To specify the fully qualified domain name of the domain controller that retrieves data from Active Directory, include the DomainController parameter in the command.
Owner	Optional	System.Management.Automation.SwitchParameter	This parameter specifies the owner of that Active Directory object.
User	Optional	Microsoft.Exchange.Configuration.Tasks.SecurityPrincipalIdParameter	This parameter specifies the user object that will get permissions added.

Input Types

Return Types

Errors

Error	Description

Exceptions

Exceptions	Description

Example

This example shows the Get-ADPermission cmdlet used to get the permissions for Ted.

Get-ADpermission -Identity  Ted | Format-List