Find Send-As rights on a Distribution Group

Following up on my previous post on how to find out who has send-as rights on a mailbox, here’s how you can do the same for a distribution group.

Get-ADPermission -identity distributiongroupname | where {($_.ExtendedRights -like “*Send-As*”) -and ($_.IsInherited -eq $false) -and -not ($_.User -like “NT AUTHORITY\SELF”)} | FT -Wrap

It’s essentially the same command. Instead of piping the mailbox object to the Get-ADPermission cmdlet, here you’re telling the Get-ADPermission cmdlet the name of the distribution group you want to find who has permissions for.