FROM:
https://lazyadmin.nl/powershell/find-email-addresses/
Find Email Addresses in Office 365 with PowerShell
Last Updated on March 7, 2022 10 Comments
Sometimes you need to find the user or a mailbox that is using a particular email address. Especially aliases are sometimes hard to find, and you don’t want to open each mailbox to check if it’s using the email address that you need.
You can add email addresses to users or groups in different locations, but they all come together in your Exchange Online server. So that is the place where we are going to search.
We are going to use the new Exchange Online PowerShell Module for this, if you haven’t used it before, then you can follow this short guide to install it and connect to Exchange Online. The advantage of the new module is that you can easily connect to different tenants and it supports MFA.
Finding Emailaddresses with PowerShell
All the email addresses of a mailbox are listed in the EmailAddresses property of the EXOMailbox cmdlet. We can search for any email address by applying a filter on the EmailAddresses. The advantage of the filter is that we can also use wildcards.
Let’s start simple and search for a specific email address. In the example, we are going to look up who is using the [email protected] email address.
# Make sure you are connected to Exchange Online
Connect-ExchangeOnline
# Search for the emailaddress
# -eq stands for equels, so the emailaddress must be exactly the same as the given string
Get-EXOMailbox –filter {EmailAddresses -eq [email protected]}
The result is one mailbox that contains the email address that we are looking for.
Using wildcards
Wildcards allow you to search on a part of the email address. In PowerShell, you can use the * as a wildcard token, which can be placed anywhere in the string.
Let’s say we want to find all mailboxes that have an email address that contains the word support. We will be using a wildcard in front and after the word Support. Note that we are not using the -eq operator but the -like operator.
When you expect multiple results it is most useful to format the output in a table with the ft cmdlet
# Get all mailboxes that contain the word support
Get-EXOMailbox –Filter {EmailAddresses -like “*support*”} | ft
One downside of the format-table output (ft) is that not all properties will fit on your screen. To solve this you can select only the fields that you need, autosize the table and wrap the lines.
Get-EXOMailbox –Filter {EmailAddresses -like “*support*”} |
ft -Property DisplayName,RecipientType,Identity,EmailAddresses -AutoSize -Wrap
Search in Distribution Lists
The PowerShell commands above search through all mailboxes for the mail address. But email addresses can also be used in Distribution lists or Office 365 Groups.
To search through the distributions lists we will need to use the Get-DistributionGroup cmdlet from the Exchange Online module.
There are two email fields in the distribution list, the PrimarySMTPAddress, and EmailAddresses. We are going to use the latter because this will also contain all aliases from the Distribution list.
Get-DistributionGroup –Filter {EmailAddresses -like “*support*”} |
ft -Property DisplayName,RecipientType,Identity,EmailAddresses -AutoSize -Wrap
Search Email Address in Office 365 Groups
The last place where you might want to search for an email address is in the Office 365 Groups. The groups have the same structure as the distribution groups, so we are going to search in the emailaddresses field.
Get-UnifiedGroup –Filter {EmailAddresses -like “*support*”} |
ft -Property DisplayName,RecipientType,Identity,EmailAddresses -AutoSize -Wrap
Powershell List all Email Addresses and Aliases
Using this principle we can also get a list with all email addresses and aliases and export it to a CSV file for example.
Getting the list with email addresses is a bit more difficult because the EmailAddresses field also contains the SPO (used for SharePoint Online features) and SIP addresses. So we need to filter those out.
By using an expression we can filter the EmailAddresses field and select only the SMTP address. The operator -clike is a case-sensitive like operator.
Get-EXOMailbox |
Select-Object DisplayName,RecipientType,PrimarySmtpAddress, @{Name=“Aliases”;Expression={$_.EmailAddresses | Where-Object {$_ -clike “smtp:*”}}}
As you can see in the results, the aliases contain the prefix smtp:. We want to remove those as well before we export the results to a csv file. The -join operator joins multiple aliases together with a comma between them.
Get-EXOMailbox |
Select-Object DisplayName,RecipientType,PrimarySmtpAddress, @{Name=“Aliases”;Expression={($_.EmailAddresses | Where-Object {$_ -clike “smtp:*”} |
ForEach-Object {$_ -replace “smtp:”,“”}) -join “,” }}
If you want to export the results to excel, then you only need to add Export-Csv c:\path\filename.csv behind it:
Get-EXOMailbox |
Select-Object DisplayName,RecipientType,PrimarySmtpAddress, @{Name=“Aliases”;Expression={($_.EmailAddresses | Where-Object {$_ -clike “smtp:*”} |
ForEach-Object {$_ -replace “smtp:”,“”}) -join “,” }} |
Export-Csv c:\temp\emailaddresses.csv
Return more then 1000 results
By default, the results are limited to 1000 records. If you have more than 1000 mailboxes then add -ResultSize unlimited after Get-ExoMailbox cmdlet:
Get-EXOMailbox -ResultSize unlimited
Search Email Address in all Office 365 locations
I have created a small script that will search in all three locations for the use of an email address. You can also search on a part of the email address. Results are outputted or can be exported to CSV if you like with the Export-CSV cmdlet.
You can download the complete script here from my Github repository.
param(
[Parameter(
Mandatory = $true,
HelpMessage = “Enter the Exchange Online or Global admin username”
)]
[string]$adminUPN,
[Parameter(
Mandatory = $true,
HelpMessage = “Emailaddress or part of it to find”
)]
[string]$emailAddress
)
Function ConnectTo-EXO {
<#
.SYNOPSIS
Connects to EXO when no connection exists. Checks for EXO v2 module
#>
process {
# Check if EXO is installed and connect if no connection exists
if ((Get-Module -ListAvailable -Name ExchangeOnlineManagement) -eq $null)
{
Write-Host “Exchange Online PowerShell v2 module is requied, do you want to install it?” -ForegroundColor Yellow
$install = Read-Host Do you want to install module? [Y] Yes [N] No
if($install -match “[yY]”)
{
Write-Host “Installing Exchange Online PowerShell v2 module” -ForegroundColor Cyan
Install-Module ExchangeOnlineManagement -Repository PSGallery -AllowClobber -Force
}
else
{
Write-Error “Please install EXO v2 module.”
}
}
if ((Get-Module -ListAvailable -Name ExchangeOnlineManagement) -ne $null)
{
# Check if there is a active EXO sessions
$psSessions = Get-PSSession | Select-Object -Property State, Name
If (((@($psSessions) -like ‘@{State=Opened; Name=ExchangeOnlineInternalSession*’).Count -gt 0) -ne $true) {
Connect-ExchangeOnline -UserPrincipalName $adminUPN
}
}
else{
Write-Error “Please install EXO v2 module.”
}
}
}
Function Search-Mailboxes {
<#
.SYNOPSIS
Search for email address in the mailboxes
#>
process {
Write-Host “Searching in mailboxes for $emailAddress“ -ForegroundColor Cyan
Get-EXOMailbox –filter “EmailAddresses -like ‘*$emailAddress*'”
}
}
Function Search-Distributionlists {
<#
.SYNOPSIS
Search for email address in the distributionlists
#>
process {
Write-Host “Searching in distributionlists for $emailAddress“ -ForegroundColor Cyan
Get-DistributionGroup –Filter “EmailAddresses -like ‘*$emailAddress*'”
}
}
Function Search-Groups {
<#
.SYNOPSIS
Search for email address in the mailboxes
#>
process {
Write-Host “Searching in groups for $emailAddress“ -ForegroundColor Cyan
Get-UnifiedGroup –Filter “EmailAddresses -like ‘*$emailAddress*'”
}
}
Function Search-DynamicDistributionlists {
<#
.SYNOPSIS
Search for email address in the distributionlists
#>
process {
Write-Host “Searching in dynamic distributionlists for $emailAddress“ -ForegroundColor Cyan
Get-DynamicDistributionGroup –Filter “EmailAddresses -like ‘*$emailAddress*'”
}
}
Function Find-EmailAddress{
<#
.SYNOPSIS
Get all AD users
#>
process {
$result = @()
$result += Search-Mailboxes
$result += Search-Distributionlists
$result += Search-Groups
$result += Search-DynamicDistributionlists
$result | ForEach {
[pscustomobject]@{
“DisplayName” = $_.DisplayName
“RecipientType” = $_.RecipientType
“Identity” = $_.identity
“EmailAddresses” = $_.EmailAddresses
}
}
}
}
# Connect to Exchange Online
ConnectTo-EXO
Find-EmailAddress | Sort-Object DisplayName
Wrapping up
I hope you found this article useful. If you have any questions, just drop a comment below. You may also like the following related articles:
· Connect to Exchange Online with PowerShell
· Update users from a CSV file with PowerShell
Comments are closed