Applies to: Exchange Server 2007
Topic Last Modified: 2007-06-11

Use the Get-ADPermission cmdlet to get permissions on an Active Directory object.

Syntax

Get-ADPermission -Identity <ADRawEntryIdParameter> [-DomainController <Fqdn>] [-User <SecurityPrincipalIdParameter>]
Get-ADPermission -Identity <ADRawEntryIdParameter> [-DomainController <Fqdn>] [-Owner <SwitchParameter>]

Parameters

Parameter Required Type Description

Identity

Required

Microsoft.Exchange.Configuration.Tasks.ADRawEntryIdParameter

Use this parameter to specify the identity of the object that you are getting permissions on.

DomainController

Optional

Microsoft.Exchange.Data.Fqdn

To specify the fully qualified domain name of the domain controller that retrieves data from Active Directory, include the DomainController parameter in the command.

Owner

Optional

System.Management.Automation.SwitchParameter

This parameter specifies the owner of that Active Directory object.

User

Optional

Microsoft.Exchange.Configuration.Tasks.SecurityPrincipalIdParameter

This parameter specifies the user object that will get permissions added.

Detailed Description

This cmdlet allows you to retrieve the permissions set for an Active Directory object.

To run the Get-ADPermission cmdlet, the account you use must be delegated the following:

  • Exchange View-Only Administrator role

For more information about permissions, delegating roles, and the rights that are required to administer Exchange Server 2007, see Permission Considerations.

Input Types

Return Types

Errors

Error Description

Exceptions

Exceptions Description

Example

This example shows the Get-ADPermission cmdlet used to get the permissions for Ted.

Copy Code
Get-ADpermission -Identity  Ted | Format-List