My company is upgrading to Exchange 2010 from Exchange 2003 and I have been asked to get a list of users that have permissions to group mailboxes, since it appears that we will need to simultaneously upgrade the mailbox to 2010 and the users accessing that mailbox to Office 2010. I have been using DSGET and DSQUERY for other AD related items, but I can't seem to get it to pull the security permissions from the mailbox. So far my searches on the net have only turned up tools for people who are already on Exchange 2010 and need this information. I can run items on the server if need be, but not if they need to be installed and require a reboot. Direction in this matter is greatly appreciated.