0 votes

This is what I am trying to achieve:

  1. Gather a list of all shared mailboxes
  2. Check if there are any members and if not send an email to me.
  3. Loop through each one and send an email to the mailbox (if there are members) to check if it is still required.
  4. If the members feel it is no longer required then ask them to approve deletion of the mailbox or reject if still required.

As above, same process for distribution groups although appreciate the approval email will go to all members.

Is there a way Adaxes could achieve this so I can continually audit this on a schedule say every X months for all mailboxes or X months from when the item was created.

by (110 points)

1 Answer

0 votes
by (13.7k points)

Hello,

Unfortunately, there is no possibility to achieve the desired using built-in functionality. PowerShell scripts are required. The first two points can be done using a PowerShell script executed in a scheduled task. For the third point, it is possible to send an email notification to shared mailbox members. However, there is no possibility to automate the part where the mailbox members report if the mailbox is still required. Regarding the fourth point, it is possible to submit the deletion of the mailbox for approval, but the operation will be executed if a single user approves the request. There is no possibility to have a collective approval of a request. As such, the whole workflow still requires a significant amount of manual work and there is no straight way of implementing it in Adaxes.

0

Thanks for your response.

I think it can still be useful just for points 1-3 but as you say the not actually act ask for any approvals. Is there a script availabel that already achieves this?

Or, could we execute a deletion of the mailbox on a schedule which requires approval that is sent to the mailbox only but before the approval is sent have an email beforehand sent to the mailbox advising on the acions they need to take as a collective e.g. Warn them about the incoming deletion approval and if the mailbx is still required then reject the request. I am not concerned for this to be a collective approval.

0

Hello,

I think it can still be useful just for points 1-3 but as you say the not actually act ask for any approvals. Is there a script availabel that already achieves this?

Unfortunately, there are no such scripts in our repository.

Or, could we execute a deletion of the mailbox on a schedule which requires approval that is sent to the mailbox only but before the approval is sent have an email beforehand sent to the mailbox advising on the acions they need to take as a collective e.g. Warn them about the incoming deletion approval and if the mailbx is still required then reject the request. I am not concerned for this to be a collective approval.

You can create a scheduled task that sends an email notification and deletes the mailbox account. To run the actions on shared mailboxes, you can scope the scheduled task over a business unit members. The business unit will include the required mailboxes based on criteria. For details on how to create business units, have a look at the following tutorial: https://www.adaxes.com/help/ViewAndManageObjectsCollectively. Then you can create a business rule triggering Before deleting a user. In the rule, a PowerShell script will get the mailbox members and submit the operation for approval with the retrieved members as approvers. For information on how to submit an approval request in a script, have a look at the SubmitForApproval method of the ExecuteScriptContext class: https://www.adaxes.com/sdk/ExecuteScriptContextClass/#SubmitForApproval_details. The business rule should also be scoped over the members of the business unit with the required mailboxes.

Related questions

0 votes
1 answer

I'm looking to audit file Share permissions, in order to find out what groups and individuals have access to what files and folders, whether those permissions are inherited or assigned, etc. Wondering if Adaxes can do this. Thanks in advance,

asked Mar 15, 2022 by sysdadmin (20 points)
0 votes
1 answer

I am looking for a way to make the Owners of groups review members in those groups every 6 months and approve\deny the members of said group. Flow would be something like this ... of the group. So if they didnt approve it, the user would no longer have access.

asked May 7 by ADuser (20 points)
0 votes
0 answers

We are trying to create a custom command to create a new network share folder and offline PST file for new users. Do you have any documentation to start our process with>

asked Jan 10, 2017 by willy-wally (3.2k points)
0 votes
1 answer

Hello Adaxes Support, I'm using this Skript for creating a Userfolder on a Server including ACLs. It works fine. $strPath="\\%adm-CustomAttributeText16%\d$\Benutzer\%username%" $Username ... this Folder but I'm not able. Can someone help me? Thanks in advance

asked Jul 31, 2013 by Napoleon (700 points)
0 votes
1 answer

I've looked at https://www.adaxes.com/script-repository/copy-group-membership-from-specified-user-s590.htm. is there away to change from group names to a group type? Like exclude all distribution groups?

asked Dec 4, 2023 by Derek.Axe (480 points)
3,535 questions
3,225 answers
8,218 comments
547,712 users