Manche Systemmeldung eines Exchange Servers enthalten nur die GUID msExchMailboxGUID des reklamierten Postfachs. Anhand dieser GUID kann das Postfach identifiziert werden. Umgekehrt kann man die GUID eines Postfachs mit dem Get-Mailbox Kommando herausfinden (Zeile 7):
[PS] C:\Windows\system32>get-mailbox dude | fl Name, *Guid*Name : dude
ExchangeGuid : ec85efae-1d78-4288-9b5e-717163a58da4
MailboxContainerGuid :
AggregatedMailboxGuids : {}
ArchiveGuid : 00000000-0000-0000-0000-000000000000
DisabledArchiveGuid : 00000000-0000-0000-0000-000000000000
Guid : e0258f7c-8f1b-4b17-bd34-85318d74afc7
Hat man die GUID gibt das Get-MailboxStatistic Kommando uA die Informationen zum Postfach aus dem Active Directory zurück, die Ihnen bei der Identifizierung weiterhelfen:
[PS] C:\Windows\system32>Get-MailboxStatistics -Identity e0258f7c-8f1b-4b17-bd34-85318d74afc7 | flRunspaceId : d7fd5db5-6b91-4787-9729-99dec6f89db6
MoveHistory :
AssociatedItemCount : 57
DeletedItemCount : 2
ItemCount : 659
TotalDeletedItemSize : 36.55 KB (37,427 bytes)
TotalItemSize : 46.9 MB (49,177,885 bytes)
MessageTableTotalSize : 5.688 MB (5,963,776 bytes)
MessageTableAvailableSize : 1.5 MB (1,572,864 bytes)
AttachmentTableTotalSize : 40.47 MB (42,434,560 bytes)
AttachmentTableAvailableSize : 352 KB (360,448 bytes)
OtherTablesTotalSize : 1.125 MB (1,179,648 bytes)
OtherTablesAvailableSize : 384 KB (393,216 bytes)
IsEncrypted : False
DataEncryptionPolicyId :
KeyVersionIDs :
AdvancedDataEncryptionDetails :
CurrentSchemaVersion : 0.174
DisconnectDate :
DisconnectReason :
DisplayName : Cohen Pictures - Jeffrey (The Dude) Lebowski
LastLoggedOnUserAccount :
LastLogoffTime : 08.09.2022 08:55:49
LastLogonTime : 08.09.2022 09:20:48
LegacyDN : /o=Mail-Domain/ou=Exchange Administrative Group
(FYDIBOHF23SPDLT)/cn=Recipients/cn=dude5bc
MailboxGuid : ec85efae-1d78-4288-9b5e-717163a58da4
OwnerADGuid : e0258f7c-8f1b-4b17-bd34-85318d74afc7
MailboxType : Private
MailboxTypeDetail : UserMailbox
ObjectClass : Unknown
StorageLimitStatus :
MailboxTableIdentifier :
Database : DB1
ServerName : MTA-1
DatabaseName : DB1
IsDatabaseCopyActive : True
IsClutterEnabled : False
IsQuarantined : False
QuarantineDescription :
QuarantineLastCrash :
QuarantineEnd :
QuarantineFileVersion :
IsAbandonedMoveDestination : False
ExternalDirectoryOrganizationId : 00000000-0000-0000-0000-000000000000
IsArchiveMailbox : False
IsMoveDestination : False
MailboxMessagesPerFolderCountWarningQuota :
MailboxMessagesPerFolderCountReceiveQuota :
DumpsterMessagesPerFolderCountWarningQuota :
DumpsterMessagesPerFolderCountReceiveQuota :
FolderHierarchyChildrenCountWarningQuota :
FolderHierarchyChildrenCountReceiveQuota :
FolderHierarchyDepthWarningQuota :
FolderHierarchyDepthReceiveQuota :
FoldersCountWarningQuota :
FoldersCountReceiveQuota :
NamedPropertiesCountQuota : 16384
SystemMessageSize : 0 B (0 bytes)
SystemMessageCount : 0
SystemMessageSizeWarningQuota : 21.56 GB (23,149,873,725 bytes)
SystemMessageSizeShutoffQuota : 22 GB (23,622,320,128 bytes)
FastIsEnabled : True
BigFunnelIsEnabled : False
BigFunnelMaintainRefiners : False
BigFunnelFilterTableTotalSize : 0 B (0 bytes)
BigFunnelFilterTableAvailableSize : 0 B (0 bytes)
BigFunnelPostingListTableTotalSize : 0 B (0 bytes)
BigFunnelPostingListTableAvailableSize : 0 B (0 bytes)
BigFunnelLargePOITableTotalSize : 0 B (0 bytes)
BigFunnelLargePOITableAvailableSize : 0 B (0 bytes)
BigFunnelTotalPOISize : Unlimited
BigFunnelMessageCount :
BigFunnelIndexedSize : Unlimited
BigFunnelPartiallyIndexedSize : Unlimited
BigFunnelNotIndexedSize : Unlimited
BigFunnelCorruptedSize : Unlimited
BigFunnelStaleSize : Unlimited
BigFunnelShouldNotBeIndexedSize : Unlimited
BigFunnelIndexedCount :
BigFunnelPartiallyIndexedCount :
BigFunnelNotIndexedCount :
BigFunnelCorruptedCount :
BigFunnelStaleCount :
BigFunnelShouldNotBeIndexedCount :
BigFunnelMailboxCreationVersion :
DatabaseIssueWarningQuota : 28 GB (30,064,771,072 bytes)
DatabaseProhibitSendQuota : 29 GB (31,138,512,896 bytes)
DatabaseProhibitSendReceiveQuota : 30 GB (32,212,254,720 bytes)
ResourceUsageRollingAvgRop :
ResourceUsageRollingClientTypes :
NeedsToMove : None
MCDBMessageTableTotalSize :
MCDBMessageTableAvailableSize :
MCDBMessageTablePercentReplicated :
MCDBOtherTablesTotalSize :
MCDBOtherTablesAvailableSize :
MCDBBigFunnelFilterTableTotalSize :
MCDBBigFunnelFilterTableAvailableSize :
MCDBBigFunnelFilterTablePercentReplicated :
MCDBBigFunnelLargePOITableTotalSize :
MCDBBigFunnelLargePOITableAvailableSize :
MCDBBigFunnelLargePOITablePercentReplicated :
MCDBBigFunnelPostingListTableTotalSize :
MCDBBigFunnelPostingListTableAvailableSize :
MCDBBigFunnelPostingListTablePercentReplicated :
Identity : ec85efae-1d78-4288-9b5e-717163a58da4
MapiIdentity : ec85efae-1d78-4288-9b5e-717163a58da4
OriginatingServer : mta-1.domain.local
IsValid : True
ObjectState : Unchanged
Mit dem Uitility ADFind von Joe Richards kann diese Aufgabe zB auch von jedem beliebigen Rechner erledigt werden, der mit der zu durchsuchenden Domäne verbunden ist:
[PS] C:\orgfiles\AdFind> .\adfind -gc -b "" -binenc -f " msExchMailboxGUID={{GUID:ec85efae-1d78-4288-9b5e-717163a58da4}}" -dn
AdFind V01.57.00cpp Joe Richards (support@joeware.net) November 2021
Transformed Filter: msExchMailboxGUID=\AE\EF\85\ECx\1D\88B\9B\5Eqqc\A5\8D\A4
Using server: DC-1.DOMAIN.local:3268
Directory: Windows Server 2016
dn:CN=dude,OU=_Testbenutzer,OU=intern,OU=Users_dh,DC=DOMAIN,DC=local
1 Objects returned