如何扩展“Get-ADPermission”的“ExtendedRights”属性?

我需要枚举Get-AdPermission的属性“ExtendedRights”中embedded的权限。

如何扩展这个多值对象中的属性并显示它们?

通常我看到这样的命令:

 Get-Mailbox | Get-ADPermission | where {($_.ExtendedRights -like "*Send-As*")} | Fl 

但现在我处于这种情况,我只想报告授予用户的权限(可以发送,可以接收)

附加这个ft identity,user,extendedrights,accessrights让我看到扩展的权利:

 [PS] C:\Scripts\Exchange>Get-ReceiveConnector | Get-ADPermission | where {$_.User -like '*anonymous*'} | ft identity,user,extendedrights,accessrights Identity User ExtendedRights AccessRights -------- ---- -------------- ------------ CAS01\Default HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-SMTP-Accept-Authoritative-Domain-Sender} {ExtendedRight} CAS01\Default HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-SMTP-Accept-Any-Sender} {ExtendedRight} CAS01\Default HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-SMTP-Submit} {ExtendedRight} CAS01\Default HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-Accept-Headers-Routing} {ExtendedRight} CAS01\Default HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-Store-Create-Named-Properties} {ExtendedRight} CAS01\Default HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-Create-Public-Folder} {ExtendedRight} CAS01\Default HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {GenericRead} CAS01\Default HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {GenericRead} CAS01\Client HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-Store-Create-Named-Properties} {ExtendedRight} CAS01\Client HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-Create-Public-Folder} {ExtendedRight} CAS01\Client HUBCAS01 NT AUTHORITY\ANONYMOUS LOGON {GenericRead}