We wanted an overview of which domains our users were using in a certain country (Netherlands in this case). So, a simple Powershell snippet that counts all unique domains it encounters in the ProxyAddresses field of all users under a certain OU.

Note that if you have set contacts / forwarders, some domains that appear may not actually be accepted domains in your exchange organization.

</p>
<p>#Author: Jos Lieben (OGD)<br />
#Date: 13-06-2016<br />
#Script help: www.liebensraum.nl<br />
#Purpose: retrieve all unique domains in use under a specific OU and count them<br />
#Requirements:<br />
#active directory PS module<br />
########</p>
<p>ipmo activedirectory</p>
<p>$users = get-aduser -Filter * -Properties * -SearchBase &quot;OU=Netherlands,OU=Countries,DC=lieben,DC=nu&quot; -SearchScope SubTree</p>
<p>$domains = @{}<br />
foreach($user in $users){</p>
<p>$emails = $user.ProxyAddresses<br />
foreach($email in $emails){<br />
$domain = $email.Split(&quot;@&quot;)[1]<br />
if($domain){<br />
$domains[$domain] += 1<br />
}<br />
}</p>
<p>}</p>
<p>Write-Output $domains

A demonstration of one way to get shared mailbox permissions exported to a CSV file. We needed both users, groups and users in groups (so, a recursive search). Only Shared mailboxes had to be included, we could identity these by a simple rule:

the first portion of the primary email address does not contain a dot

See line 126 and 127 for this rule if you need a different method.

Edit: make sure you replace CED\ with your own domain! Sorry bout that…

This export excludes Deny permissions and looks for users in groups up to 2 levels deep. Credits to Piotrek for his Get-ADNestedGroupMember function.

Script source: Continue reading Exporting shared mailbox permissions to a CSV →

If, for some reason, you want to see which domains in your exchange organisation are not being used (not registered in the ProxyAddresses fields of your users), use below snippet in the Exchange Powershell Module.

Note: this does NOT (yet) check for domains used in Public Folders or Mail Contacts.

</p>
<p>$mailboxes = get-mailbox -Resultsize Unlimited<br />
$groups = get-distributiongroup -Resultsize Unlimited<br />
$domains = Get-AcceptedDomain<br />
$output = @()</p>
<p>foreach ($domain in $domains){</p>
<p> $obj = New-Object PSObject<br />
 $obj | Add-Member NoteProperty domainName($domain.DomainName)<br />
 $obj | Add-Member NoteProperty domainType($domain.DomainType)<br />
 $res = $mailboxes | where-object {$_.EmailAddresses -Match $domain.DomainName}<br />
 if(-not $res){<br />
 $res = $groups | where-object {$_.EmailAddresses -Match $domain.DomainName}<br />
 }<br />
 if($res){<br />
 $obj | Add-Member NoteProperty inUse(&quot;YES&quot;)<br />
 }else{<br />
 $obj | Add-Member NoteProperty inUse(&quot;NO&quot;)<br />
 }<br />
 $output += $obj<br />
}</p>
<p>Write-Output $output<br />