Troubleshooter: Using a Script to List Mailbox Delegates

My company's chief information officer (CIO) wants a list of all the people who have delegate access to mailboxes in our Exchange Server organization. Can I use a script to obtain this information?

An Active Directory (AD) user object's publicDelegates attribute lists the delegates for the user's mailbox. By querying this attribute on each user object in an organizational unit (OU) or a domain, you can see which users have defined delegates. The simple script that Listing 1 shows should get you started. When you run this script on a domain controller (DC), it returns all users in the specified container, then iterates over each user, printing out the delegate list for every mailbox that has defined delegates. You can modify the strTargetContainer variable to point to any domain or OU in your forest.