http://technet.microsoft.com/de-de/library/aa996048.aspx
all Mailboxes that got Send-As as IsInherited :
Get-Mailbox | Get-ADPermission | where {($_.ExtendedRights -like “*Send-As*”) -and ($_.IsInherited -eq $true) -and -not ($_.User -like “NT AUTHORITY\SELF”)} | FT -Wrap
http://exchangepedia.com/2008/02/how-to-list-mailboxes-with-full-mailbox-access-permission-
assigned.html
http://exchangeshare.wordpress.com/2008/09/01/how-to-find-all-mailboxes-with-send-
as-permission-assigned/
included with Self:
Get-Mailbox | Get-ADPermission | where {($_.ExtendedRights -like “*Send-As*”)} | FT -Wrap
You can eliminate SELF permissions for all mailboxes from your output with below command.
Get-Mailbox | Get-ADPermission | where {($_.ExtendedRights -like “*Send-As*”) -and -not ($_.User -like “NT AUTHORITY\SELF”)} | FT -Wrap
Now, let’s say some of the inherited Send-As permission comes into output which you can eliminate it with below command.
Get-Mailbox | Get-ADPermission | where {($_.ExtendedRights -like “*Send-As*”) -and ($_.IsInherited -eq $false) -and -not ($_.User -like “NT AUTHORITY\SELF”)} | FT -Wrap
You can filter your output as per your requirement, like for a server or database, for a OU or for particular Recipient type.
To filter your output for all users on a server, here is an example.
Get-Mailbox -Server “ESS-Exch702″ | Get-ADPermission | where { ($_.ExtendedRights -like “*Send-As*”) -and ($_.IsInherited -eq $false) -and -not ($_.User -like “NT AUTHORITY\SELF”) } | ft -wrap
In same way you can use below switches to filter your output.
-Database
-RecipientTypeDetails
-OrganizationalUnit
To generate report in Spread Sheet you can export result in CSV formatted file.
Get-Mailbox | Get-ADPermission | where { ($_.ExtendedRights -like “*Send-As*”) -and ($_.IsInherited -eq $false) -and -not ($_.User -like “NT AUTHORITY\SELF”) } | Select Identity, User, Deny | Export-CSV test.csv