Export (0) Print
Expand All

Get-ADPermission

 

Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1

Topic Last Modified: 2007-06-28

Use the Get-ADPermission cmdlet to get permissions on an Active Directory object.


Get-ADPermission -Identity <ADRawEntryIdParameter> [-DomainController <Fqdn>] [-User <SecurityPrincipalIdParameter>]


Get-ADPermission -Identity <ADRawEntryIdParameter> [-DomainController <Fqdn>] [-Owner <SwitchParameter>]

This cmdlet allows you to retrieve the permissions set for an Active Directory object.

To run the Get-ADPermission cmdlet, the account you use must be delegated the following:

  • Exchange View-Only Administrator role

For more information about permissions, delegating roles, and the rights that are required to administer Exchange Server 2007, see Permission Considerations.

 

Parameter Required Type Description

Identity

Required

Microsoft.Exchange.Configuration.Tasks.ADRawEntryIdParameter

Use this parameter to specify the identity of the object that you are getting permissions on.

DomainController

Optional

Microsoft.Exchange.Data.Fqdn

To specify the fully qualified domain name of the domain controller that retrieves data from Active Directory, include the DomainController parameter in the command.

Owner

Optional

System.Management.Automation.SwitchParameter

This parameter specifies the owner of that Active Directory object.

User

Optional

Microsoft.Exchange.Configuration.Tasks.SecurityPrincipalIdParameter

This parameter specifies the user object that will get permissions added.

 

Error Description

 

Exceptions Description

This example shows the Get-ADPermission cmdlet used to get the permissions for Ted.

Get-ADpermission -Identity  Ted | Format-List
 
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft