This also was showing users who had photos already.

Most of the photos were added prior to us migrating to 365 and were done using the following command:

 $photo = [byte[]](Get-Content C:\photos\jdoe.jpg -Encoding byte)
 Set-ADUser jdoe -Replace @{thumbnailPhoto=$photo}

We would use a CSV to import using those commands. I found this article explaining the process we used.

http://woshub.com/how-to-import-user-photo-to-active-directory-using-powershell/

This is why I was initially trying to use the thumbnailPhoto attribute to see who had something for that value, but my command wasn't good enough to determine if that value contained data or not.

That did the trick. Thanks!

For posterity, this is exactly what I ran to get the information (restricting my search to just that OU instead of filtering by enabled users--our Disabled users are in a sub-OU from that one, so this was a better option for me):

 $filter = '(&(Objectclass=user)(!thumbnailphoto=*)(!jpegphoto=*))'
 get-aduser -searchbase 'OU=Users,DC=domain,DC=local' -SearchScope OneLevel -ldapfilter $filter | sort-object surname | select-object Surname,GivenName,SamAccountName

Running the Get-MailboxFolderPermission command against UserA:\Calendar\New_Project shows the proper permissions.

I had User A add me and it showed up fine for me.

It's strange that it's showing up fine in User B's OWA so permissions wise everything seems fine, but I just don't see why User B's Outlook won't display it, but will display the one I created as a test.

I've not tried the SARA tool yet (neither the user or I have had time to look further into the issue). I hope to give this a shot this week. Thanks.

I have run Test-WSMan and it completes normally, even if I connect from another machine (such as my workstation). I can type Test-WSman -Computername Server01 and I get the following output:

wsmid : http://schemas.dmtf.org/wbem/wsman/identity/1/wsmanidentity.xsd
ProtocolVersion : http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd
ProductVendor : Microsoft Corporation
ProductVersion : OS: 0.0.0 SP: 0.0 Stack: 3.0

Regarding the trustedhosts I currently have it set to all hosts. All machines in this scenario are domain members.

This was a setting I had to do within Outlook (I had to temporarily license the mailbox and enable the account to do so).

Remote mailbox is still on-prem, and the license does have a 365 E3 license assigned to it (it auto-assigned when I restored the account from soft-delete).

I'm going to re-delete it, and this time just move the AD object back in to sync back. Before I restored it from the admin center, and when I believe it showed as being a cloud account. I moved the account locally back into the sync OU and then it showed in the admin center as being a synced account.

That did the trick. Apparently I borked something doing it two different ways. I removed the account from being synced, waited until it disappeared and went inactive again, then just moved it back into a synced OU and it allowed me to remove the hold/add delegates/etc.

This isn't an option unfortunately. This is a mailbox for a user that has been gone for some time. Another user was granted access to the mailbox and is not syncing shared mailboxes to his local machine.

The mailbox was only made inactive for about 1-2 hours before I tried to undo it. The mailbox shows up in Exchange Admin Center and shows the proper size (4.5GB used) but I have no way of accessing it.

I did do this, I apologize for not mentioning it. The user shows as being a synced user in the admin center, not a cloud user.

I did do that, yes. The user shows up in the admin center as a synced user, but I still get the errors.

Time and date all look fine, and I don't have any issues getting to the internet in any way from what I've tested. I ran the network troubleshooter just to see if there was something under the hood that Windows didn't like, but it didn't find any issues either.

No, I'm trying to export one user's contacts which contains internal users they added from the GAL. Normal contacts export normally, but the internal users don't include the SMTP address, which won't do him any good once he's no longer on our system.

I could try to curate the output from the command you provided, however that method seems to only give me their name and SMTP address, and doesn't include their contact info (phone numbers, addresses, etc) that are in the user's contact. This could be manually updated, but there are almost 800 of them (many of which he doesn't need).

It was a pretty cumbersome process. The user didn't want the entire directory, they only wanted the ones they'd copied to their contacts (which was about 60 out of over 1000 corporate contacts). I wound up just searching their contacts for the corporate users they'd added, made a note of them, then deleted them and manually added them all for them. :(

I wish there'd just been a way to export the contacts from their contact list with the SMTP addresses themselves instead of the Exchange addresses.

I tried logging in using the local administrator account and that didn't work either.