Exchange Online Commands

---

This is a collection of PowerShell commands an administrator may find use of with Exchange Online. These commands should NEVER BE USED to perform any kind of illegal activities. If you do not have appropriate permissions to test a website or application that DO NOT TOUCH IT

Sending Emails

# SMTP with STARTTLS (Outlook) Send-MailMessage -From a@osbornepro.com -To b@osbornepro.com -Cc c@osbornepro.com -Subject "Example Subject" -Body "Body of the email" -SmtpServer smtp.office365.com -Port 587 -UseSsl -Credential (Get-Credential -Message "Enter your Office365 credentials") -Attachments C:\Temp\attachment.txt # SMTP SSL/TLS WRAPPED (Gmail) Send-MailMessage -From a@gmail.com -To b@gmail.com -Cc c@gmail.com -Subject "Example Subject" -Body "Body of the email" -SmtpServer smtp.gmail.com -Port 465 -UseSsl -Credential (Get-Credential -Message "Enter your Gmail credentials") -Attachments C:\Temp\attachment.txt # SMTP UNENCRYPTED Send-MailMessage -From a@postfix.com -To b@postfix.com -Cc c@postfix.com -Subject "Example Subject" -Body "Body of the email" -SmtpServer smtp.domain.com -Port 25 -Credential (Get-Credential -Message "Enter your Gmail credentials") -Attachments C:\Temp\attachment.txt

Exchange Online Command Reference

Install-Module ExchangeOnlineManagement Connect-ExchangeOnline Import-Module MSOnline Connect-MSOnline # Remove permissions to a shared mailbox Remove-MailboxPermission -Identity finance@osbornepro.com -User rosborne@osbornepro.com -AccessRights FullAccess # To keep permissions on the above mailbox for the user without mapping it do this afterwards Add-MailboxPermission -Identity finance@osbornepro.com -User rosborne@osbornepro.com -AccessRights FullAccess -AutoMapping $False # Adding SendAs Permission to user $Identity for shared mailbox $Mailbox" Add-RecipientPermission -Identity $Identity -Trustee $Mailbox -AccessRights 'SendAs' # Adding full permissions for $Identity to shared mailbox $Mailbox" Add-MailboxPermission -Identity $Identity -User $Mailbox -AccessRights 'FullAccess' -InheritanceType 'All' # Change a user mailbox to a shared mailbox Set-Mailbox -Identity user1@osbornepro.com -Type Shared # Get a list of Shared Mailboxes and Member Permissions on them Get-Mailbox -RecipientTypeDetails SharedMailbox -ResultSize:Unlimited | Get-MailboxPermission | Select-Object -Property Identity,User,AccessRights | Where-Object -FilterScript { ($_.user -like '*@*') } # Get forwarding rules applied to a specific email address Get-Mailbox -Identity rosborne | Select-Object -Property UserPrincipalName,ForwardingSmtpAddress,DeliverToMailboxAndForward # Get list of mailboxes forwarding to an external domain Get-Mailbox -Filter {ForwardingAddress -ne $Null} | Select-Object -Property UserPrincipalName,ForwardingSmtpAddress,DeliverToMailboxAndForward # Enable Send As permissions on a mailbox for a user Add-RecipientPermission -Identity "Help Desk" -AccessRights SendAs -Trustee "Robert Osborne" # Remove Send As permissions on a mailbox for a user Remove-RecipientPermission -Identity "Help Desk" -AccessRights SendAs -Trustee "Robert Osborne" # Grant rosborne Owner permissions to the Marketing folder in user1's mailbox Add-MailboxFolderPermission -Identity user1@osbornepro.com:\Marketing -User rosborne@osbornepro.com -AccessRights Owner # Add rosborne as a calendar delegate to User1's mailbox without access to private items Add-MailboxFolderPermission -Identity user1@osbornepro.com:\Calendar -User rosborne@osbornepro.com -AccessRights Editor -SharingPermissionFlags Delegate # Add rosborne as a calendar delegate to User1's mailbox with access to private items Add-MailboxFolderPermission -Identity user1@osbornepro.com:\Calendar -User rosborne@osbornepro.com -AccessRights Editor -SharingPermissionFlags Delegate,CanViewPrivateItems # Create a distribtion list in Office365 that anyone can join New-DistributionGroup -Name "Company Employees" -Alias employees -MemberJoinRestriction open # Change main email address of a distribution group tp co.employees@osbornepro.com from colorado@osbornepro.com Set-DistributionGroup "Colorado Employees" -EmailAddresses SMTP:co.employees@osbornepro.com,smtp:colorado@osbornepro.com # Get the members of a distribution group in Office365 Get-DistributionGroupMember -Identity co.employees@osbornepro.com # Create a conference room list New-DistributionGroup -Name "Building 32 Conference Rooms" -OrganizationalUnit "osbornepro.com/rooms" -RoomList # Create a Conference Room Resource Mailbox New-Mailbox -Name ConfRoom1 -DisplayName "Conference Room 1" -Room # Add a conference room resource to your conference room list Add-DistributionGroupMember -Identity "Building 32 Conference Rooms" -Member ConfRoom1@osbornepro.com # Disable SMTP AUTH for an organization Set-TransportConfig -SmtpClientAuthenticationDisabled $True # Enable SMTP AUTH for a specific user Set-CASMailbox -Identity rosborne@osbornepro.com -SmtpClientAuthenticationDisabled $False # Disable SMTP AUTH for a specific user Set-CASMailbox -Identity rosborne@osbornepro.com -SmtpClientAuthenticationDisabled $True # Enable SMTP AUTH for an organization Set-TransportConfig -SmtpClientAuthenticationDisabled $False # Disable SMTP AUTH for a list of users $DisableSmtpAuthForTheseUsers | ForEach-Object { Set-CASMailbox -Identity $_ -SmtpClientAuthenticationDisabled $True } # View SMTP AUTH Settings for each mailbox in an organization Get-TransportConfig | Format-List -Property SmtpClientAuthenticationDisabled # Get Organization Info Get-MSolCompanyInformation # Get All Users Get-MSolUser -All # Get All Groups Get-MSolGroup -All # Get All Service Principals Get-MsolServicePrincipal

Azure Commands

# Install Azure Module Install-Module -Name Az -Force Connect-AzAccount -Credential $LiveCred # Get Tenant ID $AzureContexts = Get-AzContext -ListAvailable $AzureContexts.Tenant.id # Get Azure VMs Get-AzVM # Get Azure AD Applications Get-AzAdApplication # Get Azure Virtual Network Info Get-AzVirtualNetwork Get-AzPublicIpAddress Get-AzExpressRouteCircuit Get-AzVpnConnection # Get Azure SQL Servers $AzureSQL = Get-AzSQLServer $AzureSQL # Get Azure SQL Databases Get-AzSqlDatabase -ServerName $AzureSQL[0].ServerName -ResourceGroupName $AzureSQL[0].ResourceGroupName # Get Azure SQL Firewall Rules Get-AzSqlServerFirewallRule –ServerName $AzureSQL[0].ServerName -ResourceGroupName $AzureSQL[0].ResourceGroupName # Get Azure SQL Admins Get-AzSqlServerActiveDirectoryAdminstrator -ServerName $AzureSQL[0].ServerName -ResourceGroupName $AzureSQL[0].ResourceGroupName # Get Azure Subscription Info Get-AzSubscription # Get Azure Resources Get-AzResource # Get Azure Resource Groups Get-AzResourceGroup # Get Azure Storage Accounts $AzureResourceGroups = Get-AzResourceGroup $AzureResourceGroups | ForEach-Object { Get-AzStorageAccount -ResourceGroupName $_.ResourceGroupName } # Get Azure Web Apps $AzureResourceGroups = Get-AzResourceGroup $AzureResourceGroups | ForEach-Object { Get-AzWebApp -ResourceGroupName $_.ResourceGroupName } # Sync Azure AD with On Premise AD Start-ADSyncSyncCycle -PolicyType Initial Start-ADSyncSyncCycle -PolicyType Delta # Reset Kerberos Keys for Azure # Importing AzureADSSO.psd1 from directory $AzureFile $AzureFile = (Get-ChildItem -Path "C:\" -Filter "AzureADSSO.psd1" -Recurse -Force -ErrorAction SilentlyContinue).FullName Import-Module "$AzureFile" -Force New-AzureADSSOAuthenticationContext -CloudCredentials $LiveCred # Checking for errors Update-AzureADSSOForest -OnPremCredentials $cred1