stevenha

(New Script) Search for count of items older than specified date across all mailboxes

Steve Halligan — Wed, 18 Jun 2014 11:28:00 GMT

So, you have deployed default retention tags to delete mail after a certain age. You have also given users access to a personal tag to let them keep some stuff longer. Now you want to audit to see if any of your users are abusing the personal tag.

This script allows you to specify a date and outputs a count of emails older than that date in each user mailbox.

This script borrows much from Glen's Exchange Dev Blog (https://gsexdev.blogspot.ca/2014/05/ediscovery-script-for-reporting-on.html).

This script utilizes the EWS Managed API, so you need to install that first: https://www.microsoft.com/en-us/download/details.aspx?id=35371

See here: https://gallery.technet.microsoft.com/office/Search-for-count-of-items-d2ec2bfa

From Inside the Cloud: Who has access to your data within Office 365?

Steve Halligan — Wed, 04 Jun 2014 08:40:01 GMT

Great video from Perry Clarke and Vivek Sharma on the controls that are in place in O365 to assure customers of the privacy of their data.

From Inside the Cloud: Who has access to your data within Office 365?

Detect if a user is or isn't under a particular In-Place Hold

Steve Halligan — Thu, 22 May 2014 10:02:00 GMT

Let's say that you want to put an 3 year time based in-place hold on all (or a large group) of your users. You set up a process, script or whatever to modify the hold whenever you need to add a user.

Great.

So, how can you make sure that you didn't miss someone?

You can use a combination of the "InPlaceHoldIdentity" of the Mailbox Search object for your hold and the "InPlaceHolds" Multivalue string attribute of your mailboxes.

First, find the ID of the hold you want to look for:

Here I am looking for a hold named “demo”

PS C:\Users\stevenha> Get-MailboxSearch demo | fl name,inplaceholdidentity

Name : Demo

InPlaceHoldIdentity : d14862810adc4f6a8621bd868b551660

That “InPlaceHoldIdentity” value is stored in every user that the hold applies to. Like this:

PS C:\Users\stevenha> get-mailbox sarad | fl name,inpla*

Name : SaraD

InPlaceHolds : {d37259985eae4cba8f795d53f8bafc84, 1e6cecf94b6641a088a484d6128bf77a, e850fa01c5f746f2b5d8d46dd5d2eee4,

b223bed883f34071b279f58835472740...}

So, we can look for any users that have that hold in place like this:

PS C:\Users\stevenha> get-mailbox -resultsize unlimited | where {$_.inplaceholds -contains "d14862810adc4f6a8621bd868b551660"}

Or, we can look for any users that DO NOT have the hold like this:

PS C:\Users\stevenha> get-mailbox -resultsize unlimited | where {-not $_.inplaceholds -contains "d14862810adc4f6a8621bd868b551660"}

New Script to Get Percentage of Exchange t-logs per hour for Exchange design calculator

Steve Halligan — Fri, 04 Oct 2013 11:55:12 GMT

The Exchange Server Role Requirements Calculator has a great if seldom used feature to allow estimating of bandwidth needs between datacenters for replication traffic. The key to making this work is filling in the little chart of what percentage of a day's log files are created during each hour of the day. Since this is based largely on messages sent/received you can use your existing Exchange Servers log creation rate to figure this out.

However, it is kind of a pain to examine log directories and count the number of files created during each hour of the day.

This script will look in one or more log directories and do the math for you. You can then copy the output straight from the powershell window into the calculator.

https://gallery.technet.microsoft.com/office/Get-Percentage-of-Exchange-bf6ff1ea

Updated Snapshot report of Public Folder Usage Script

Steve Halligan — Thu, 21 Feb 2013 11:13:24 GMT

Updated my Snapshot report of Public Folder Usage Script:

Fixed Last Modified Time so it actually works (dang typo)
Added "Email Enabled" to report
Added "Primary SMTP Address" to report if folder is email enabled
Added Progress bar so you can tell it is actually still running

You can download it here:

https://gallery.technet.microsoft.com/office/Snapshot-report-of-Public-21235573

Offline Address Book Full Download Fails if Hardware Load Balancer in use

Steve Halligan — Wed, 09 Jan 2013 11:26:00 GMT

I came across an interesting scenario relating to the use of a Hardware Load Balancer publishing Exchange Client Access Servers. This relates specifically to how CAS distributes OAB and how Outlook decides which files it needs to perform an OAB update.

First, let's walk through how it is supposed to work starting from a new Outlook Profile (if you already know the OAB download/update process, feel free to skip to the next section):

Outlook attempts to download the "template" file for whatever language Outlook is running. For English, it finds the entry in the oab.xml that specifies langid 0409. The line in the OAB.xml looks something like this:

Name	Parameters
Write-AdminAuditLog	Comment Confirm Debug DomainController ErrorAction ErrorVariable OutBuffer OutVariable Verbose WarningAction WarningVariable WhatIf
Set-ThrottlingPolicyAssociation	Confirm Debug DomainController ErrorAction ErrorVariable Identity OutBuffer OutVariable ThrottlingPolicy Verbose WarningAction WarningVariable WhatIf

stevenha

(New Script) Search for count of items older than specified date across all mailboxes

From Inside the Cloud: Who has access to your data within Office 365?

Detect if a user is or isn't under a particular In-Place Hold

New Script to Get Percentage of Exchange t-logs per hour for Exchange design calculator

Updated Snapshot report of Public Folder Usage Script

Offline Address Book Full Download Fails if Hardware Load Balancer in use

When good manifests go bad…

The Answer (at long last):

The Solution:

Snapshot report of Public Folder Usage (name, last access, items, etc)

“The Public Group Cannot Be Displayed” error attempting to modify members of a large DL in Outlook with Exchange 2010

Bonus Track

Output Exchange 2010 RBAC Role Entries in HTML Report

Script to convert an MS Online Directory Immutable ID to an AD GUID (and Vice Versa)