I have an Exchange 2010 server on prem – needed to grant send on behalf to a user for a distribution list. In this case the distribution list is called “Events”. However, every time I would change the permissions I noticed that the previous entries were removed.

List Group Current Permissions
Get-DistributionGroup "Events" | fl name,grant*

Replace Granted Users List
Set-DistributionGroup "Events" -GrantSendOnBehalfTo "Some User", "Another User", "Third User"

Add Additional Users
Set-DistributionGroup "Events" -GrantSendOnBehalfTo @{add="New Hire", "Manager Name"}

Remote Users
Set-DistributionGroup "Events" -GrantSendOnBehalfTo @{remove="Recently Fired", "Another User"}

One of the EA’s reported that an email was not going through to the CEO from a vendor/partner and the NDR was:

Generating server: myemailserver.tld
CEO@mycompany.tld
#< #5.1.0 smtp;554 5.1.0 Sender denied> #SMTP#
Original message headers:
Received: from spam.myemailserver.tld (8.8.33.145) by mail.myemailserver.tld
(192.168.100.3) with Microsoft SMTP Server id 14.3.361.1; Mon, 18 Sep 2017
22:25:26 -0500
X-Note: Xit Build: 3/21/2017 2:04:32 PM UTC (2.6.15.0) XIT_SCAN_PASSED
Received: from [10.60.1.167] (HELO inbound.spamprovider.com) by
spam.myemailserver.tld (CommuniGate Pro SMTP 6.1.7) with ESMTP id 51998793;
Mon, 18 Sep 2017 23:25:26 -0400
X-Note: This Email was scanned by SomeProduct SPAMThing
X-Note-AR-ScanTimeLocal: 09/18/2017 11:25:26 PM
X-Note: SomeProduct Build: 8/31/2017 11:17:18 AM UTC (2.6.21.34)
X-Note: Filtered by 10.60.1.167
X-Policy: mycompany.tld
X-Primary: OtherUser@Mycompany.tld
X-Virus-Scan: V-
X-Note: SPF: IP: 167.31.17.139 DOM: VENDOREMAIL.TLD ADDR: partner@VENDOREMAIL.TLD
X-Note: SPF: Pass

So we notice that it went through from an SPF range – and I cut out the back and forth accepting of the message that normally comes with the NDR/DR – and left the “554 5.1.0 Sender Denied” portion (bolded above).

Since we run Exchange I could check using powershell for exchange. Go figure.

Trusted Senders List
$TSD = (Get-MailboxJunkEmailConfiguration -Identity MYCEO_User).TrustedSendersAndDomains
$TSD > c:\temp\Trusted_Senders.txt

Blocked Senders List
$TSD = (Get-MailboxJunkEmailConfiguration -Identity alan.handley).TrustedSendersAndDomains
$TSD > c:\temp\Blocked_senders.txt

I should note that I first tried:
Get-MailboxJunkEmailConfiguration -ResultSize unlimited MYCEO_User > c:\temp\results.txt
But with that it was still truncating the results. Meh.

Remove an Entry
Set-MailboxJunkEmailConfiguration -Identity MYUSER -BlockedSendersAndDomains @{Remove="vendor@partner.tld"}

Add an Entry
Set-MailboxJunkEmailConfiguration -Identity ANOTHERUSER -TrustedSendersAndDomains @{Add="Vendor@partner.tld"}

I recently went through and disabled a ton of users that hadn’t logged into AD for the last X number of days. And now I needed a report to show the number of mailboxes that were currently associated with disabled accounts.

Exchange Powershell to the rescue
Get-Mailbox -ResultSize Unlimited | ft -a Identity, UserAccountControl, ExchangeUserAccountControl, isLinked, isResource > c:\temp\disabled_mailboxen.txt

And when was the last time they logged into their Exchange mailbox? Very important questions on the Microsoft side of the house.

Currently have an Exchange 2010 server on-prem (soon O365) and several aged accounts that needed to be disabled.

On a Windows machine open a command prompt and type quser.exe. This will show you all of the users currently logged in as well as when they logged in, and any idle time. Especially helpful on the Terminal Services hosts/RDS machines.
USERNAME SESSIONNAME ID STATE IDLE TIME LOGON TIME
>BSDMAN console 1 Active none 9/8/2017 7:31 AM
>ADMIN rdp-tcp#0 2 Active none 9/11/2017 11:52 AM

How about for Mailbox exchange users?
Open the Exchange Management PowerShell
get-mailboxstatistics -server YOUREXSERVERNAME | sort LastLogonTime -Decending
To save it to a file just add the > c:\temp\ex_last_logon.txt to the end.

Profit.

So I had been used to having shared workbooks/excel sheets for years. It allowed me to have a single repository for a ton of useful information that I could share with others – and have them edit accordingly. But when I went to start a new one (at my new job, yay!) with Office 2016, I found the option had been replaced with “co-authoring”. Co-authoring is roughly the same feature set but it required the use of sharepoint, onedrive for business, etc. We’re not currently in O365 land, so this wasn’t a great option for me. Where’s my shared workbook??

Open Excel
File > Options > Quick Access Toolbar
List All Commands (drop down)
Scroll down to Compare and Merge Workbooks and click Add
Scroll down to Protect Sharing (Legacy) and click Add
Scroll down to Share Workbook (Legacy) and click Add
Scroll down to Track Changes (Legacy) and click Add
Now you technically only need the Share Workbook option, but since I had used the other options to track changes and do comparisons, I figured you may find those options useful as well.
Click OK.

The four new options (or fewer if you selected less than 4) show up at the top of Excel. Yay!