Exchange 通讯组添加外部收件人

新建邮箱联系人-添加到通讯组中

批量导入成员至通讯组

Import-csv C:\members.txt | foreach {add-distributiongroupmember test1 -member $_.Name}

txt 格式如下

  • name
  • name01@xiahan.com
  • name02@xiahan.com

New-MailContact -Name “Chris Ashton” -ExternalEmailAddress “chris@tailspintoys.com” -DisplayName Chris

新建通讯组

New-DistributionGroup -Name “企业级产品事业本部软通全体员工” -Alias qyjbdrt -OrganizationalUnit CN=企业级产品事业本部,OU=公用邮件分发列表,DC=thtfpc,DC=com

设置通讯组发送权限

Set-DistributionGroup -Identity qyjbdrt -AcceptMessagesOnlyFrom qyjhr

批量新建外部联系人

Import-Csv C:\Users\administrator.THTFPC\Documents\rt.csv | ForEach-Object {New-MailContact -Name $_.Name -ExternalEmailAddress $_.Mailbox -DisplayName $_.DisplayName }

批量添加外部联系人到通讯组

Import-Csv C:\Users\administrator.THTFPC\Documents\rt.csv | ForEach-Object {Add-DistributionGroupMember qyjbdrt -Member $_.Name}

CSV格式文件如下 :

Exchange 收件人发送权限

https://community.spiceworks.com/t/giving-send-as-permission-to-a-distribution-group/694969

https://learn.microsoft.com/zh-cn/exchange/recipients/mailbox-permissions?view=exchserver-2019#use-the-exchange-management-shell-to-assign-the-send-as-permission-to-mailboxes-and-groups

Grant a user Send-On-Behalf to a distribution group so they can Send-on-behalf of the distribution group.(授予用户代表发送给通讯组的权限,以便他们可以代表通讯组发送。)

Set-DistributionGroup -Identity “Group” -GrantSendOnBehalfTo “User”

Grant a user Send As permissions to a distribution group so they can send as the distribution group(授予用户对通讯组的发送方式权限,以便他们可以作为通讯组发送)

Get-DistributionGroup “Group” | Add-ADPermission -User “User” -ExtendedRights “Send As”

查找通讯组可以接收的收件人邮箱有哪些

Get-DistributionGroup | Select-Object PrimarySmtpAddress,AcceptMessagesOnlyFrom

使用 Exchange 命令行管理程序 来向邮箱和组分配代理发送权限

Windows ActiveDirectory 用户密码组策略设置

Finding Weak Passwords in Active Directory

https://4sysops.com/archives/find-weak-active-directory-passwords-with-powershell

https://blog.51cto.com/jiushu/1675200

https://www.cnblogs.com/amsilence/p/17972726

www.alitajran.com/active-directory-weak-password-checker/

www.enzoic.com/active-directory-lite/

https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr

查看用户锁定

Search-ADAccount -LockedOut -UsersOnly | Select-Object Name, SamAccountName
解锁用户
Unlock-ADAccount -Identity