Practical 365

You are here: Home / Exchange Server / Output a List of In-Policy Users for a Resource Mailbox Using PowerShell

Output a List of In-Policy Users for a Resource Mailbox Using PowerShell

by 36 Comments

Ricky asks:

How do you export a copy of the list of users in the resource in policy tab?

What Ricky is referring to are calendar processing settings, often used on room and equipment mailboxes, that can be used to control who can do such things as make booking requests for a meeting room.

For example, this meeting room has a list of users who are allowed to submit in-policy requests that will be automatically approved.

exchange-inpolicy-requests

We can use Get-CalendarProcessing to query the setting with the Exchange Management Shell.


The formatting of that output is not very useful though, if we’re trying to export a list of the users.

Instead, we can pipe to Select-Object.


Still, that is more output than we really want in this situation. So instead I would run this command to see a nice, neat list of the users.

Comments

  1. dp says

    $resourceIdentity = “YourResuorceMailboxEmailAddress”
    try
    {
    (Get-CalendarProcessing -Identity $resourceIdentity).Bookinpolicy | Get-user -ErrorAction SilentlyContinue | ft -AutoSize
    }
    finally
    {
    (Get-CalendarProcessing -Identity $resourceIdentity).Bookinpolicy | Get-Group -ErrorAction SilentlyContinue | select name,recipienttype | ft
    }

    Reply

    • Michel Van Delden says

      Thanks for you comment that was exactly what I was looking for.
      I personally was only curious about actual users so I expanded on your group output.

      $resourceIdentity = Read-Host
      try
      {
      (Get-CalendarProcessing -Identity $resourceIdentity).Bookinpolicy | Get-user -ErrorAction SilentlyContinue | ft name -AutoSize
      }
      finally
      {
      (Get-CalendarProcessing -Identity $resourceIdentity).Bookinpolicy | Get-Group -ErrorAction SilentlyContinue |% {Get-DistributionGroupMember $_.identity}| select name | ft
      }

      Reply

  2. Emily says

    First of all, thank you! This is very informational and does, for the most part, get me what I need.

    However, piping Select Name produces a list of nothing for me. Just 7 rows of blank (like the field is blank on the user record or something). Without that, I do get the correct results, they’re just ugly and using format-list doesn’t change how it is shown. I also tried Alias and DisplayName (instead of Name along with Select) but received the same results. We are using O365 hybrid. Any ideas?

    Reply

  3. Greg says

    Thanks Paul. I actually discovered (through one of your other posts) a way to get the info I needed. It’s exactly what we were looking for. Thank you again.

    Reply

    • Rhys says

      What was the post or command used to get this info?

      I am having the same issue with bookinpolicy returning truncated values. When I pipe this to “| Select Name” it returns blank lines.
      I checked one of the mailboxes and legacydn property has the same truncated value

      Reply

  4. Greg says

    Tried that, here is the output. Same results, different format.

    Get-CalendarProcessing “Conf Rm (Webinar Studio)” | Select-Object -ExpandProperty:bookinpolicy | Format-List
    /o=ExchangeLabs/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=47ad2662a8ac4c80b4bacb16db1eac48-Ricky Rober
    /o=ExchangeLabs/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=25f8646437d94061999a064b308a05c0-Eric Anthon
    /o=ExchangeLabs/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=15d4db8f8cae4a11854ae881869c88e2-Bill Willia

    Reply

  5. Greg says

    When running this my results are cut off. Any idea how this can be resolved?
    Notice the Names, Becky Jone vs Becky Jones. These are example names only.

    Get-CalendarProcessing “HO Meeting Room 1” | Select-Object -ExpandProperty:bookinpolicy

    PS C:\windows\system32> Get-CalendarProcessing “Conf Rm 3 (Webinar Studio)” | Select-Object -ExpandProperty:bookinpolicy
    /o=ExchangeLabs/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=47ad2662a8ac4c80b4bacb16db1eac48-Ricky Rober
    /o=ExchangeLabs/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=25f8646437d94061999a064b308a05c0-Eric Anthon
    /o=ExchangeLabs/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=29587308c56e4c4285cb7e00143a78fd-Becky Jone
    /o=ExchangeLabs/ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Recipients/cn=15d4db8f8cae4a11854ae881869c88e2-Bill Willia

    Reply

  6. Shawn says

    This works if there is only a single group assigned to bookinpolicy

    $Proxy = “x500:” + (Get-CalendarProcessing -Identity “roomname” | Select -expand BookInPolicy)
    Get-ADGroup -Filter {proxyAddresses -Like $Proxy}

    Reply

  7. Aamir says

    Do you have any idea how to remove one user which is added in Bookinpolicy?

    I can add one without affecting others but not able to remove.

    Reply

  8. PK says

    We have the same problem with Exchange 2013, been problem since CU6.
    If we add users or groups to BookInPolicy, the users and groups have the the booking rights but when we try to check value of BookInPolicy, Select-Object -ExpandProperty:bookinpolicy or Select-Object -ExpandProperty bookinpolicy returns nothing. To mix things a little more, all users/groups that were assigned prior CU6 shows up in the BookInPolicy but users and groups that were added after CU6 was installed doesn’t.

    Reply

      • PK says

        We still have this problem in CU12. BookInPolicy stays empty (ie returns nothing with expandproperty) but users/groups that are added will have the proper rights. Checking who has the rights is p.i.t.a.

        Reply

        • Bryan Siler says

          Have you found a solution to this? Having the same issue, cannot audit for rights to bookinpolicy or requestoutofpolicy. on CU13

          Reply

  9. Koen says

    dear,

    I’ve been trying your approach yet, it only works when the bookinpolicy had users assigned to it. When a group is assigned, I seem to be unable to retrieve the correct groupname.
    can you please assist me?

    rgd

    K.

    Reply

  10. Rikard Strand says

    I did not get it to work either. But this did it for me (extracting Alias):
    foreach ( $x in (Get-CalendarProcessing “*room*” | Select-Object -ExpandProperty:bookinpolicy) ) { get-mailbox $x | select -ExpandProperty:alias }

    Reply

    • Chris P says

      if you do get-recipient instead of get-mailbox, you can also extract the alias if a group is assigned:

      foreach ( $x in (Get-CalendarProcessing “podcast_room_2gp-4” | Select-Object -ExpandProperty:bookinpolicy) ) { get-recipient $x | select -ExpandProperty:alias }

      Reply

  12. Deanne Barton says

    Hi Paul

    How do you get a list of all meeting rooms that currently use the In-policy or out-policy?

    Reply

Leave a Reply

You have to agree to the comment policy.