Scenario: You want to prevent users from configuring forwarding within Outlook on the Web (OWA).

Solution: Run the following in Exchange PowerShell

To Create the Policy:

New-ManagementRole MyBaseOptions-NoForward -Parent MyBaseOptions
Set-ManagementRoleEntry MyBaseOptions-NoForward\Set-Mailbox -RemoveParameter -Parameters DeliverToMailboxAndForward, ForwardingSmtpAddress

Set-ManagementRoleEntry MyBaseOptions-NoForward\New-InboxRule -RemoveParameter -Parameters ForwardTo, RedirectTo, ForwardAsAttachmentTo

Set-ManagementRoleEntry MyBaseOptions-NoForward\Set-InboxRule -RemoveParameter -Parameters ForwardTo, RedirectTo, ForwardAsAttachmentTo

New-RoleAssignmentPolicy -Name PolicyWithNoEmailForward -Roles MyContactInformation, MyRetentionPolicies, MyMailSubscriptions, MyTextMessaging, MyVoiceMail, MyDistributionGroupMembership, MyDistributionGroups, MyProfileInformation, MyBaseOptions-NoForward -Description “User role assignment policy that restricts the assignees from being able to autoforward email outside the organization”

To set it:

get-mailboxplan | Set-mailboxplan -RoleAssignmentPolicy PolicyWithNoEmailForward

get-mailbox | Set-Mailbox -RoleAssignmentPolicy PolicyWithNoEmailForward

Scenario: You want to view who is RDP’ed into a specific Server and then log off remotely specific sessions:

Scriptlet:

To View:
Invoke-Command -ComputerName “ExSrv1” -ScriptBlock { quser }

To LogOff:
Invoke-Command -ComputerName ‘ExSrv2’ -ScriptBlock { logoff 2 }

Scenario: You need to perform a search for membership of AD Groups, including nested membership, for specific AD Groups

Function:

Function Get-GroupMembers {
   param(
          [string]$GroupName
   )

    #Var
    $objects = @()
    $members = @()
If($Layer -eq $Null){$layer = 1}else{$layer = $layer + 1}


    get-ADGroup $GroupName  -Properties *|select -ExpandProperty members | %{$Members += Get-ADObject -Filter {Distinguishedname -eq $_} | Select Name, ObjectClass, DistinguishedName}
    If($OriginalGroup -eq $Null){$OriginalGroup = $groupname}



   foreach ($member in $members) {

          if ($member.objectClass -eq "group") {
                 $objects += Get-GroupMembers -GroupName $member.distinguishedname
          }


            $obj = new-object psObject
            $obj | Add-Member -membertype noteproperty -Name Group -Value $OriginalGroup
            $obj | Add-Member -MemberType noteproperty -Name Layer -Value $layer
            $obj | Add-Member -membertype noteproperty -Name ObjectClass -Value $member.objectclass
            $obj | Add-Member -MemberType noteproperty -Name Name -Value $member.name
            $obj | Add-Member -membertype noteproperty -Name NameDN -Value $groupname

            $objects = $objects += $obj




   } # foreach

   return $objects
}#

Results: Run the following in Powershell after copying the function from above: Get-groupmembers -groupname “EmailAdmins”