Hello, I need to get mail box rights defined for a user through code. I tried by getting the "msExchMailboxSecurityDesciptor" from the directory entry properties but with no success: DirectoryEntry userEntry = new DirectoryEntry("LDAP://..........."); SecurityDescriptor objSD = (SecurityDescriptor)userEntry.Properties["msExchMailboxSecurityDesciptor"].Value; However, I get a null value. Any suggestions or Is there any other way to do so? Thanks...
You should retrieve the mailbox sd via the mailboxrights property of the IMailboxStore interface. The msExchMailboxSecurityDescriptor is not guaranteed to be authoritative for the account, it is a reflection of the actual MAPI perms in the store. See http://support.microsoft.com/kb/310866/ -- Joe Richards Microsoft MVP Windows Server Directory Services www.joeware.net EyalS wrote: > Hello, > I need to get mail box rights defined for a user through code. > I tried by getting the "msExchMailboxSecurityDesciptor" from the directory > entry properties but with no success: > > DirectoryEntry userEntry = new DirectoryEntry("LDAP://..........."); > SecurityDescriptor objSD = > (SecurityDescriptor)userEntry.Properties["msExchMailboxSecurityDesciptor"].Value; > > However, I get a null value. > Any suggestions or Is there any other way to do so? > > Thanks...
Thanks. This did help. However, I had to use the invoke method as follow. Is this right?: DirectoryEntry userEntry = new DirectoryEntry("LDAP://..........."); SecurityDescriptor objSD = (SecurityDescriptor)userEntry.InvokeGet["MailboxRights"].Value; "Joe Richards [MVP]" wrote: > You should retrieve the mailbox sd via the mailboxrights property of the > IMailboxStore interface. The msExchMailboxSecurityDescriptor is not guaranteed > to be authoritative for the account, it is a reflection of the actual MAPI perms > in the store. > > See > > http://support.microsoft.com/kb/310866/ > > > > -- > Joe Richards Microsoft MVP Windows Server Directory Services > www.joeware.net > > > EyalS wrote: > > Hello, > > I need to get mail box rights defined for a user through code. > > I tried by getting the "msExchMailboxSecurityDesciptor" from the directory > > entry properties but with no success: > > > > DirectoryEntry userEntry = new DirectoryEntry("LDAP://..........."); > > SecurityDescriptor objSD = > > (SecurityDescriptor)userEntry.Properties["msExchMailboxSecurityDesciptor"].Value; > > > > However, I get a null value. > > Any suggestions or Is there any other way to do so? > > > > Thanks... >
The CDOEXM interfaces are not exposed in the managed framework so probably yes, I don't know, I don't do .NET programming. -- Joe Richards Microsoft MVP Windows Server Directory Services www.joeware.net EyalS wrote: > Thanks. This did help. However, I had to use the invoke method as follow. Is > this right?: > DirectoryEntry userEntry = new DirectoryEntry("LDAP://..........."); > SecurityDescriptor objSD = > (SecurityDescriptor)userEntry.InvokeGet["MailboxRights"].Value; > > > > > > "Joe Richards [MVP]" wrote: > > >>You should retrieve the mailbox sd via the mailboxrights property of the >>IMailboxStore interface. The msExchMailboxSecurityDescriptor is not guaranteed >>to be authoritative for the account, it is a reflection of the actual MAPI perms >>in the store. >> >>See >> >>http://support.microsoft.com/kb/310866/ >> >> >> >>-- >>Joe Richards Microsoft MVP Windows Server Directory Services >>www.joeware.net >> >> >>EyalS wrote: >> >>>Hello, >>>I need to get mail box rights defined for a user through code. >>>I tried by getting the "msExchMailboxSecurityDesciptor" from the directory >>>entry properties but with no success: >>> >>>DirectoryEntry userEntry = new DirectoryEntry("LDAP://..........."); >>>SecurityDescriptor objSD = >>>(SecurityDescriptor)userEntry.Properties["msExchMailboxSecurityDesciptor"].Value; >>> >>>However, I get a null value. >>>Any suggestions or Is there any other way to do so? >>> >>>Thanks... >>
Hello, i have the same problem. Inside the properties of user A you can give an other user B FULL ACCESS to the Mailbox within the Exchange-Properties. I just don't know the name of the tab in the properties of the AD user. So we have many AD-users and i don't know how to get the information of mailbox user who except themselve has given authorization to there mailbox. In other words: Can I export the information woho has FULL ACCESS of the mailboxes of everey user within AD. Friendly regards DanielS1973
Sorry, i forgot to say that i have Win2000 Server und Exchange 2000
