how to change delegation other mailbox?

Question

When creating an user I want to give the user full access rights to another mailbox. I,ve searched for some code but have no documentation about the correct syntax. How can I accomplish this (below partial code I think I must use...)

[Reflection.Assembly]::LoadWithPartialName("Softerra.Adaxes.Adsi")

$admNS = New-Object "Softerra.Adaxes.Adsi.AdmNamespace"
$admService = $admNS.GetServiceDirectly("Adaxes01")

$admProp = Get-AdmUser [user]-AdaxesService "Adaxes01"
$DN = $admProp | Select-Object -ExpandProperty DistinguishedName

# Bind to user object
$userDN = "$DN"
$user = $admService.OpenObject("Adaxes://$userDN", $NULL, $NULL, 0)

$userparams = {}
$userParams = New-Object "Softerra.Adaxes.Adsi.Exchange.AdmExchangeMailboxParameters"

Thnx Remco

Answer 1

Hello Remco,

The following script will do the job. In the script, $mailboxDN specifies the Distinguished Name (DN) of the mailbox, full access to which will be granted. Modify it to your requirements.

$mailboxDN = "CN=John Doe,OU=Users,DC=example,DC=com" # TODO: Modify me

# Create a reference to the new user
$userReference = New-Object "Softerra.Adaxes.Adsi.AdmObjectReference"
$userReference.ObjectDN = "%distinguishedName%"

# Create the Allow Full Mailbox Access permission for the user
$permission = New-Object "Softerra.Adaxes.Adsi.Exchange.AdmExchangeMailboxPermission"(
    "ADM_EXCHANGE_MAILBOX_RIGHTS_FULL_ACCESS",
    0,
    $userReference)

# Create an empty instance of mailbox parameters and add the permission to the instance
$mailboxParams = New-Object "Softerra.Adaxes.Adsi.Exchange.AdmExchangeMailboxParameters"
$permissionModification = New-Object "Softerra.Adaxes.Adsi.Exchange.AdmExchangeMailboxRightsModification"
$permissionModification.Operation = "ADS_PROPERTY_APPEND"
$permissionModification.Permission = $permission
$mailboxRights = $mailboxParams.MailboxRights
$mailboxRights.AddModification($permissionModification)
$mailboxParams.MailboxRights = $mailboxRights

# Bind to the mailbox
$mailbox = $Context.BindToObjectByDN($mailboxDN)

# Save the new permission to the mailbox
$mailbox.SetMailParameters($mailboxParams, "ADM_SET_EXCHANGE_PARAMS_FLAGS_NONE")

For instructions on how to automatically run the script upon creation of each new user, see Run PowerShell Script after Creating a User.