Listing Which Exchange Users Have or Are Delegates

When a user assigns delegate access to their mailbox, the delegate information is stored in the directory. This is the same for Exchange 5.5 and Exchange 200x.

To generate a list of all users with delegates and/or all users that are delegates, the directory can be queried for that information.

In Exchange 5.5, the attribute that lists any delegates is public-delegates. In Active Directory for Exchange 200x, the attribute populated when a delegate is assigned is publicDelegates. In Exchange 5.5, the attribute where mailboxes for which delegate access has been granted is public-delegates-bl. In Active Directory, the same attribute is publicDelegatesBL.

To generate a list of all Exchange users that are or have delegates, use header.exe to create a .csv file with the username along with the public-delegates and public-delegates-bl attributes. Then do a directory export from Exchange Administrator to that file.

Generating a similar list of mail-enabled users with delegate access to another mailbox or have delegates assigned to their mailbox for Exchange 2000 or 2003, you need to query Active Directory. LDIFDE can query and export this information to file by executing with specific switches similar to:

c:\>ldifde -f delegates.txt -d "ou=users,dc=domain,dc=com" -l name,publicDelegates,publicDelegatesBL -r "(|(publicDelegates=*)(publicDelegatesBL=*))"

-f - assigns the output to the file named delegates.txt
-d - isolates OU in the directory to query
-l - determines what attributes to list
-r - filters for objects with any value for the attributes mentioned

The resulting query might look something like delegates.txt.

This might be useful in migration preparation or server consolidation planning.

William Lefkovics