Powershell – Set O365 Calendar Permissions

Total Page:16

File Type:pdf, Size:1020Kb

Powershell – Set O365 Calendar Permissions By default, in Exchange and Office 365 organization users can’t view Outlook e-mails or calendar items of other users. The only permission that is provided to all users by default is the ability to view the Free/Busy information in other user’s calendars (this is AvailabilityOnly role). Users can independently grant the necessary permissions for Outlook mailbox folders and items to other users (from the Outlook/OWA interface). Unfortunately, in Exchange 2016/2013 and Exchange Online (Office 365), the administrator cannot centrally manage calendar permissions from the GUI (Exchange MMC, EAC—Exchange Administration Center, or Office 365 admin portal). However, you can use a built-in Add-MailboxFolderPermission cmdlet, which allows managing user permissions on any user’s mailbox folder from PowerShell (this cmdlet first appeared in Exchange Server 2010). This cmdlet is also supported in Office 365. Connecting Office 365/Exchange from PowerShell First, you need to connect to your Office 365 or on-premises Exchange tenant. Run the Windows PowerShell CLI as Administrator; Run the following command to save your administrator’s credentials into the PowerShell variable: LiveCred = Get-Credential If you are trying to connect to Office 365, specify your Office 365 tenant admin credentials: Note. How to connect and manage Office 365 using PowerShell. Now you need to create a new session: For Office 365: $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $LiveCred - Authentication Basic –AllowRedirection For Exchange Server 2010, 2013, 2016, and 2019: $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://<your-target-exchange-server-address>/powershell/ -Credential $LiveCred Note. In our case when we tried to run the previous command to connect Exchange 2010 we’ve received an error: [ny-msg-02] Connecting to remote server failed with the following error message: The WinRM client cannot process the request. The WinRM client tried to use Negotiate authentication mechanism, but the destination computer (ny-msg-02:443) returned an ‘access denied’ error. Change the configuration to allow Negotiate authentication mechanism to be used or specify one of the authentication mechanisms supported by the server. To use Kerberos, specify the local computer name as the remote destination. Also, verify that the client computer and the destination computer are joined to a domain. To use Basic, specify the local computer name as the remote destination, specify Basic authentication and provide user name and password. Possible authentication mechanisms reported by the server. In our environment in order to connect to the target Exchange CAS server, we should use the HTTP connection (instead of HTTPS) and Kerberos authentication. The connection command should look like this: $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://ny-msg-02/powershell/ -Credential $LiveCred -Authentication Kerberos The next step is to import Office 365/Exchange management commands from another session to your PowerShell console: Import-PSSession $Session Tip. It happens that when you run the Import-PSSession command, you can face an error: Import-PSSession: Files cannot be loaded since running scripts has been disabled on this system. Provide a valid certificate with which to sign the files. In this case, you need to allow script executing. Do this by setting the PowerShell Execution Policy value to RemoteSigned: Set-ExecutionPolicy RemoteSigned Hint. If you logged in directly to the on-premises Exchange server, you can either start the Exchange Management Shell right away, or run a regular PowerShell.exe CLI, and load Exchange cmdlets with the command: Add-PSSnapin Microsoft.Exchange.Management.PowerShell.SnapIn How to Get Mailbox Calendar Permissions Using PowerShell? You can view current calendar (folder-level) permissions of the specified mailbox by using the ALL cmdlet (this cmdlet is available in the cloud-based service and in on-premises Exchange): Get-MailboxFolderPermission username:\calendar Change the username to the user account you want to check calendar permissions for; Hint. If, when executing the following commands, you’re facing an error: Get-MailboxFolderPermission : The term ‘Get-MailboxFolderPermission’ is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again this means you did not complete the steps to connect to your Exchange/Office 365 tenant and did not import PowerShell Exchange cmdlets into your session. Carefully read and follow the steps from the previous paragraph.Note. If this command returns that ‘username:\calendar’ cannot be found, most likely the user has Outlook language settings other than English. Appropriately, the Calendar folder name can be different (calendar\kalender\calendario\calendrier\календарь). For example, for the Dutch Language (nl-NL), to view calendar permissions use the command:Get- MailboxFolderPermission username:Agenda You can get the name of the calendar in the current user’s language configuration with the command: Get-MailboxFolderStatistics username -FolderScope Calendar).Identity Check the current calendar permissions with the command: Get-MailboxFolderPermission brett.jackson:\calendar As you can see, the default AvailabilityOnly role is assigned on a calendar folder only. You can get the list of all mailbox calendars permissions in your organization using the following command: Get-Mailbox | ForEach-Object {Get-MailboxFolderPermission $_”:\calendar”} | Where {$_.User -like “Default”} | Select Identity, User, AccessRights Tip. In on-premise Exchange, you can view user’s calendar settings in a specific mailbox database using the following command: Get-Mailbox –database mbxdbname | ForEach-Object {get-MailboxFolderPermission $_”:\calendar”} Change mbxdbname to the name of your Exchange mailbox database. Tip. You can use the Get-EXOMailboxFolderPermission cmdlet instead of Get- MailboxFolderPermission to view the permissions of mailbox items in the Exchange Online PowerShell V2 module. Outlook: Calendar Permission Levels and Access Roles When managing calendar and Outlook folder permissions, you can use the following built-in Exchange roles: Owner — gives full control of the mailbox folder: read, create, modify, and delete all items and folders. Also, this role allows to manage item’s permissions; PublishingEditor — read, create, modify, and delete items/subfolders (all permissions, except the right to change permissions); Editor — read, create, modify, and delete items (can’t create subfolders); PublishingAuthor — create, read all items/subfolders. You can modify and delete only items you create; Author — create and read items. Edit and delete own items; NonEditingAuthor — full read access, and create items. You can delete only your own items; Reviewer — read folder items only; Contributor — create items and folders (can’t read items); AvailabilityOnly — read Free/Busy info from the calendar; LimitedDetails — view availability data with calendar item subject and location; None — no permissions to access folder and files. You can also use granular permissions to fine-tune the access rights to the mailbox calendar. The following values are available: CreateItems; CreateSubfolders; DeleteAllItems; DeleteOwnedItems; EditAllItems; EditOwnedItems; FolderContact; FolderOwner; FolderVisible; ReadItems. The Permission Level roles described above are just a set of granular permissions. For example, the Editor role is a set of the following individual permissions: CreateItems, DeleteAllItems, DeleteOwnedItems, EditAllItems, EditOwnedItems, FolderVisible, ReadItemshttps://51e448f02aa451f6a7e42f2ac1d1f720.safeframe.googlesyndication.com/safeframe/ 1-0-38/html/container.html These permissions can be set using the –AccessRights parameter of the Set- MailboxFolderPermission cmdlet. How to Set Office 365/Exchange Calendar Permissions Using PowerShell? In order to grant user2 the permissions to view and edit user1 calendar items, run the following command: Add-MailboxFolderPermission -Identity [email protected]:\calendar -user [email protected] -AccessRights Editor If some of the items in the calendar are marked as Private, you can allow delegating the permissions to view Private calendar items using the command: Add-MailboxFolderPermission –Identity [email protected]:\calendar –User [email protected] -AccessRights Editor -SharingPermissionFlags Delegate,CanViewPrivateItems If you need to change the Default permissions for the calendar folder (to allow all organization users to view a calendar of the specified user), run the command: Set-MailboxFolderPermission -Identity [email protected]:\calendar -User Default -AccessRights Reviewer Check the current calendar permissions again using the Get-MailboxFolderPermissions cmdlet, they should change: Get-MailboxFolderPermission -Identity [email protected]:\calendar FolderName User AccessRights ———- —- ———— Calendar Default {Reviewer} Calendar Anonymous {None} Calendar user2 {Editor} You can also grant permissions for the mailbox not to an individual user, but the Exchange distribution group: New-DistributionGroup -Type Security -Name “Resource Calendar Owners” -Alias “grResourceCalendarAccess” add-MailboxFolderPermission -Identity [email protected]:\calendar -User grResourceCalendarAccess -AccessRights Owner In
Recommended publications
  • Word Processing Tool
    WORD PROCESSING 3 TOOL Objectives I like the computer because it keeps giving you After completing this Chapter, the options. What if I do this? You try it, and if you student will be able to: don't like it you undo it. The original can always be resurrected. It raises the idea of working on • work with any word processing program, one painting your whole life, saving it and working on it again and again. • create, save and open a Elliott Green document using a word Research Associate and Tutorial Fellow, Oxford University processor, • format a document inserting bullets/numbering, tables, pictures, etc., Introduction • set custom tabs and apply styles, We have to submit a project as part of our course • prepare a document for printing, evaluation. We will perhaps take a chart paper • enhance the features of the and design the project, write a report and submit document inserting graphics, it to our teacher. That’s the way we have done it tables, pictures, charts, etc., and all along? Have we ever thought of typing the entire using different formatting styles, project report using a computer and submitting it • modify document using various in a nicely designed printed form? Ever reflected editing and formatting features on getting information from the Internet and within or across documents, presenting it neatly for the project? Now that’s • produce documents for various the way things are being done! And if we are already purposes and thinking of it, it’s time to discover some document creation software, i.e., word processing tool to get • apply mail merge facility to send a document to different the job done.
    [Show full text]
  • How to Integrate Zoom with an Outlook Calendar
    How to Integrate Zoom with an Outlook Calendar PURPOSE: • How to install Zoom Plugin for Outlook 2016 • How to set up Calendar Integration HOW TO INTEGRATE ZOOM WITH AN OUTLOOK CALENDAR: First, navigate to https://zoom.us/download Download the Zoom Plugin for Microsoft Outlook, as well as the zoom client for Meetings if you do not already have it. Once you have the programs downloaded, run the Zoom Plugin for Outlook. Click next on all the screens, then Close at the end. This step does require Administrator rights. Contact UIS Call: (303) 860-4357 Email: [email protected] Restart Outlook, then you will see it in the top menu. Next, navigate to https://cusystem.zoom.us, choose SSO and login with your CU credentials Contact UIS Call: (303) 860-4357 Email: [email protected] On the left side, choose My Meeting Settings Under My Meeting Settings, scroll down until you find Calendar Integration. Click the toggle on the right side. Under Calendar Integration, for the Exchange login username or UPN enter your CU username followed by @ad.cu.edu. Under password, enter your CU password. For Exchange version, select Exchange 2013. In the EWS URL, enter https://exchange.cu.edu/ EWS/Exchange.asmx After that, click Authorize and you should be set! Keep in mind this isn’t a perfect integration, it will only create new meetings for meetings created after this has been done, and changing or deleting meetings will not necessarily reflect in Outlook. The Zoom desktop client will be the best place to check for updated meetings.
    [Show full text]
  • Office 365 Exchange Online Using Powershell
    Relay Calendar Setup 1 Create a new room mailbox resource. If your room already has a calendar, you can skip this step. a. Log in to the Microsoft 365 admin center. b. Go to Resources › Rooms & equipment. c. Select + Add a resource mailbox. d. Fill out the New Resource form. This guide will assume an email address of [email protected]. No license is needed for the resource. e. Click Save. 2 Connect to Office 365 Exchange Online using PowerShell. This will let you configure room resource calendars in the next step. a. Allow signed scripts by opening Windows PowerShell as an administrator and running Set-ExecutionPolicy RemoteSigned b. Open a non-admin Windows PowerShell and log in by running $UserCredential = Get-Credential $Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https:// outlook.office365.com/powershell-liveid/ -Credential $UserCredential -Authentication Basic -AllowRedirection Import-PSSession $Session For more information, refer to the Exchange Online PowerShell documentation. 3 Create a distribution group for your rooms. This restricts Relay to only read specific calendars in your organization. a. Create the group. New-DistributionGroup -Name bluejeans-relay -Type Security -Notes "Rooms from which Relay can read calendars." b. Grant the Relay app access to the group. New-ApplicationAccessPolicy -AppId 5a75b6b1-f653-40b1-ab48-6ec9cea91b36 -PolicyScopeGroupId bluejeans-relay -AccessRight RestrictAccess -Description "Relay can only read calendars from mailboxes in this group." If you get a CommandNotFoundException, or if only your user appears in Get-Mailbox, then log in to Exchange Online Powershell as an admin. 4 Share the calendar with Relay. Do not skip this.
    [Show full text]
  • Using the Calendar Outlook
    Using the Calendar Microsoft Outlook Web App Copyright © 2019 KSU Division of University Information Technology Services This document may be downloaded, printed, or copied for educational use without further permission of the University Information Technology Services Division (UITS), provided the content is not modified and this statement is not removed. Any use not stated above requires the written consent of the UITS Division. The distribution of a copy of this document via the Internet or other electronic medium without the written permission of the KSU - UITS Division is expressly prohibited. Published by Kennesaw State University – UITS 2019 The publisher makes no warranties as to the accuracy of the material contained in this document and therefore is not responsible for any damages or liabilities incurred from UITS use. University Information Technology Services Using the Calendar Microsoft Outlook Web App Table of Contents Introduction ................................................................................................................................................ 5 Learning Objectives ..................................................................................................................................... 5 The Calendar Interface ................................................................................................................................ 6 Accessing the Calendar ..............................................................................................................................
    [Show full text]
  • Windows Outlook Calendar Sharing How To
    WINDOWS OUTLOOK Share an Outlook calendar with other people Share your calendar in an email 1. Click Calendar. 2. Click Home > E-mail Calendar. 3. In the Calendar and Date Range boxes, pick the calendar and time period you want to share. For example, choose Today only or for the Next 7 days. 4. Set any other options you want, and then click OK. 5. In the new email that opens, add who you want the message to go to in the To field, add a message if you want, and click Send. 6. The person you sent your calendar to will see a snapshot of your calendar in the message. The message also includes an attached iCalendar (.ics) file that they can open in Outlook or another calendar program. When the recipient clicks the iCalendar file, Outlook displays the file as a new calendar that they can view side-by-side with their calendar. They can drag appointments or meetings between the two calendars, and find a time that works for both of you. Change permissions after you have shared your calendar with other people You can change calendar sharing permissions. 1. Click Calendar. 2. Click Home > Calendar Permissions. 3. On the Permissions tab, make any changes to the calendar sharing permissions. 4. Click OK. Permission Settings: Owner Create, read, modify, and delete all items, and create subfolders. Can change the permission levels that other people have for the folder. Publishing Editor Create, read, modify, and delete all items and create subfolders. Editor Create, read, modify, and delete all items.
    [Show full text]
  • Configuring Calendar and Contact Integration
    Configuring Calendar and Contact Integration • Configuring Calendar and Contact Integration, on page 1 Configuring Calendar and Contact Integration Overview You can configure calendar and contact integration on Unity Connection with Exchange or Office 365 servers. For more information on calendar and contact integration, see the Calendar and Contact Integration, page 1-11 section. Configuring Calendar and Contact Integration with Exchange or Office 365 Servers 1. Review the system requirements to ensure that all the requirements for Exchange 2019, Exchange 2016 and Office 365 are met. For more information see the sections “Requirements for Accessing Calendar Information for Meetings” and “Requirements for Accessing Exchange Contact Information” of System Requirements for Cisco Unity Connection, Release 14 at https://www.cisco.com/c/en/us/td/docs/voice_ ip_comm/connection/14/requirements/b_14cucsysreqs.html. 2. Configure the Exchange server with which Unity Connection is integrated for calendar and contact integration. See the following sections: • Configuring Office 365, Exchange 2019, Exchange 2016 for Calendar and Contact Integration • Configuring Unity Connection for Calendar and Contact Integration 3. Configure Unity Connection for calendar and contact integration. See the Configuring Unity Connection for Calendar and Contact Integration. 4. (When enabling Personal Call Transfer Rules only) Verify that the users or templates are assigned to a class of service that enables them to use the personal call transfer rules feature. 5. Configure the Unity Connection users for calendar and contact integration. See the Configuring Unity Connection Users for Calendar and Contact Integration. 6. Test the calendar integration. See the Testing Calendar Integration with Exchange or Office 365 Servers.
    [Show full text]
  • Download Calendar Program Windows 10 5 Best Free Open Source Calendar Software for Windows
    download calendar program windows 10 5 Best Free Open Source Calendar Software for Windows. Here is a list of best free open source calendar software for Windows. These are free desktop calendar software which come with open source license. You can freely download and study source code of these calendar software and even manipulate the source code. These calendar software let you view the calendar in monthly, daily, weekly, or yearly view. You can also add and schedule important events on particular dates in a month. All of these software provide appointment editor tool to add and manage multiple appointments with date and time, reminder settings, priority, etc. You also get a feature to add and manage various contacts in a few of these software. Additionally, you can create a to-do list in these software to keep up with your daily tasks. You can also add essential notes and memos on particular dates. In one of these software, you can also import iCalendar files to add calendar events. Also, for students, there is a nice software with features including time table and booklet creator. Other than that, you get various useful features in these software which include task categories creator, email alert generator, setup calendar appearance, reminder tone, etc. In general, these are featured open source calendar software which are useful in keeping up with the dates and managing important tasks. My favorite Free Open Source Calendar Software for Windows: BORG Calendar is a good desktop calendar software which comes with a lot of handy tools including appointment editor, tasks creator, memos creator, checklists maker, etc.
    [Show full text]
  • 47 046357 Bindex.Qxp 1/24/07 8:27 PM Page 404
    47_046357 bindex.qxp 1/24/07 8:27 PM Page 404 Index area code rules, 258 A attachments. See also e-mail messages creating, 201 accessibility defined, 199 calendar, 99 audio device properties, 310 features, 20 audit policy settings, 189 Accessories automatic backups. See also backups Calculator option, 5 creating, 158–159 Command Prompt option, 8 settings, changing, 159 Connect to a Network Projector option, 10 automatic updates, 394–395 Ease of Access option, 69 AutoPlay Notepad option, 43 Burn Files to Disc Using Windows option, 106 Paint option, 46 defined, 3 Remote Desktop Connection option, 295 enabling, 3 Sync Center option, 71, 232 in playing CDs/DVDs, 214 System Tools option, 72, 328 settings, 3 Windows Sidebar option, 26, 86 WordPad option, 89, 398 Account Lockout Threshold Properties dialog box, 189 ad hoc networks, 85 B Add a Contact window, 362 Add Address or Domain dialog box, 193 backgrounds Add Fonts dialog box, 171 digital images, 94–95 Add Input Language dialog box, 291 image format types, 95 Add Items to DVD dialog box, 142 pictures, positioning, 95 Add Members to Contact Group dialog box, 191 predesigned, 94 Add or Remove Snap-ins window, 219 setting, 94–95 Add Prefix dialog box, 258–259 Backup and Restore Center Add Printer Wizard, 2 accessing, 326 Add Search Provider dialog box, 186 Back Up Computer option, 108 Address bar, 19 Create a Restore Point or Change Settings option, 326 Administrator account. See also user accounts, 76 opening, 4 changing, 350, 351 operations, 4 defined, 344 Restore Files option, 60 password,
    [Show full text]
  • • Login to Skype for Business. • Open Outlook • Select the Calendar Icon
    Login to Skype for Business. Open Outlook Select the Calendar icon. Click New Skype Meeting if you want to initiate a meeting If you do not have New Skype Meeting on your Quick Access Toolbar, do the following: Right-click on any part of the gray area on the Quick Access Toolbar Click on Click Customize Quick Access Toolbar… Click on Add-ins (left hand side of screen) Select the Skype Meeting Add-in for Microsoft Office 2016 Click the Go button Place a checkmark in the box next to Skype Meeting Add-in for Microsoft Office 2016 Click the OK button. You should now have New Skype Meeting on your Quick Access Toolbar. Login to Skype for Business 2016. Login to your online Northwest Email. o Northwest Email can be located here: https://www.nwmissouri.edu/login Once logged into Northwest Email select the Calendar icon. On the calendar page, click New Event and an Outlook alendar meeting window will open. Click on Add online meeting (located typically next to Search for a room or location) o A dropdown menu will appear Click on Skype Meeting Fill in the meeting title, location and the start and end times. Choose the people to attend, add the agenda or other meeting information, and then select Send. In your email Inbox, you’ll see a message asking you to join a Skype Meeting. Click on the link (or “Join Skype Meeting” icon) within your email that asks you to Join Skype Meeting. In the Skype for Business main window, select someone that you want to meet with from your Contacts list.
    [Show full text]
  • 1-Zone Dmx Wall Controller Installation Guide Contents
    1-ZONE DMX WALL CONTROLLER INSTALLATION GUIDE Tech Support: (+1) 212 629 6830 *301 [email protected] FRONT VIEW BACK VIEW SIDE VIEW 106 mm NOTE ABOUT CONNECTIONS: Touch-sensitive user interface All connections (DMX, power, ports, etc.) are made with the Standby rear connectors. The 9V DC power supply must be connected to the 2 Power pins, and the first DMX universe must be Extension socket Scene Selection connected to the 3 DMX pins of the main 9-pin connector rear connectors Power+DMX block (photo below). This interface has 4 ports (1 to 4) to (2x10 pins) socket trigger 4 different scenes. To use the input ports, you must (RJ45) create a connection between the Ground pin and the ports. The interface can be powered either with the external power supply Reset or through USB. You must move the “Power” button (next to the USB port) to switch from USB to EXT. 146 mm VERY IMPORTANT: NEVER move the “USB to EXT” switch while this controller is connected to the computer. Color Screw-terminal rear connector (5 pins) DC+ Dimmer Saturation DC- See ‘Center Button’ section Front access connections GND for further information Width 4.17”/ 106.0 mm DMX- Height 5.75”/ 146.0 mm DMX+ Depth 0.39”/ 10 mm DATA LED MINI USB DMX LED CONTENTS THE FIXTURES PATCH This package contains: The Editor screen is the place where you will have to patch your fixtures. This is the first thing to do to create - “Step-by-step” manual your show. Click on the “Add fixtures(s)” button from - Installation CDROM the toolbar to open the “Patch manager” window.
    [Show full text]
  • How to Accept and Join a Microsoft Teams Meeting?
    How to Accept and Join a Microsoft Teams Meeting? Teams meetings can be scheduled both through Microsoft Outlook and Teams app on the computer, Microsoft Outlook and Teams app on the phone and tablet. Read How to Schedule a Meeting in Teams on www.herkimer.edu/remote to learn more on how to schedule Teams Meeting. It is important to join the meeting from the proper meeting link. Accepting a Teams Meeting Invitation by Email 1. When Teams meetings are scheduled, you will receive a meeting invitation in your email. 2. If you accept the meeting, it will be added to your email calendar. To accept a meeting click Accept, and then select Send the Response Now. The organizer will now receive an email indicating you have accepted the meeting. Joining a Teams Meeting from Your Computer 1. Go to your calendar on your Outlook or Teams app, open the meeting you would like to join and click Join Microsoft Teams Meeting. 2. If you are prompted in your browser to open Microsoft Teams, it is recommended to open Microsoft Teams app on your computer for best result. Also, click “Always allow teams.microsoft.com to open links of this type in the associated app”. Microsoft Teams app will open, click Join Now from the meeting window. Joining a Teams Meeting from your Mobile Device 1. Install Microsoft Teams app from your phone app store, if you haven’t done before. 2. From your mobile device, tap the Teams meeting invitation you received in your email or tap Outlook calendar (requires Outlook app) and tap Join.
    [Show full text]
  • Microsoft Outlook 2010 for Windows: Calendaring
    Microsoft Outlook 2010 for Windows: Calendaring © Arizona Board of Regents, 2014 updated 01.27.2014 v02.00 For information and permission to use our PDF manuals, please contact [email protected] PDFs available at www.uits.arizona.edu/workshops Microsoft Outlook 2010 for Windows: Calendaring COPYRIGHT & TRADEMARKS Copyright © 2010, Arizona Board of Regents. All rights reserved. Record of Changes Date Version # Description 11.26.2013 1.00 Original 01.27.2014 2.00 Organization changes. Training Guide Microsoft Outlook 2010 for Windows: Calendaring Table of Contents Introduction ..................................................................................................................... 1 Objectives ................................................................................................................................. 1 Resources ................................................................................................................................ 1 Adding Items to the Calendar ..................................................................................... 3 Appointments ........................................................................................................................... 4 Recurring Appointments ........................................................................................................... 6 Meetings ................................................................................................................................... 7 Recurring Meetings ...............................................................................................................
    [Show full text]