Kontaktliste in Userpostfach importieren via PS

New-ManagementRoleAssignment -Name:impersonationAssignmentName -Role:ApplicationImpersonation -User:Administrator

<#
    Sync AD-Users to Contact-Folder in all Mailboxes  EX2010  / (c) @colinardo

   Vor dem Start des Skript ist dem User welcher das Skript später ausführt die Impersonation-Berechtigungzu erteilen:
   In diesem Beispiel der User 'Administrator' (Bitte einmalig in einer EMS ausführen)  

    New-ManagementRoleAssignment -Name:impersonationAssignmentName -Role:ApplicationImpersonation -User:Administrator
#>

if ($PSVersionTable.PSVersion.Major -lt 3){write-host "ERROR: Minimum Powershell Version 3.0 is required!" -F Yellow; return}    

# Active Directory Modul laden
Import-Module ActiveDirectory

# EWS DLL laden
Add-Type -Path "$(Split-Path $MyInvocation.MyCommand.Definition -Parent)\Microsoft.Exchange.WebServices.dll"  

# Mit Exchange verbinden
try{
    $exchange_server = Get-ADObject -LDAPFilter 'objectClass=msExchExchangeServer' -SearchBase (([ADSI]"LDAP://RootDse").configurationNamingContext.ToString()) -Properties networkaddress | select -Expand networkaddress | ?{$_ -match 'ncacn_ip_tcp'} | %{$_.split(":")[1]} | select -First 1  
    if (!$exchange_server){Write-Host "Could not determine Exchange-Server FQDN from AD" -ForegroundColor Red; return}  
    write-host "Creating connection to Exchange-Server '$exchange_server' ..." -ForegroundColor Green  
    $session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "http://$exchange_server/powershell" -Authentication Kerberos  
    Import-PSSession $session -DisableNameChecking -AllowClobber | out-null
}catch{
    throw $_
    return
}

# Start Variablen -------------------------------------------------------------------------
# Name des Ordners in dem die Kontake angelegt werden
$foldername = "Firmenkontakte"  
# Überordner festlegen
$parentFolder = [Microsoft.Exchange.WebServices.Data.WellKnownFolderName]::Contacts
# Ende Variablen -------------------------------------------------------------------------

# Custom Propertyset erstellen um einen Kontakt eindeutig zu identifizieren
$propid = [GUID]'{05591a58-e392-4aa9-8cbd-06627d605c95}'  
$propset = New-Object Microsoft.Exchange.WebServices.Data.ExtendedPropertyDefinition($propid,'ObjectSID',[Microsoft.Exchange.WebServices.Data.MapiPropertyType]::String)  

# EWS Objekt erstellen
$ews = new-object Microsoft.Exchange.WebServices.Data.ExchangeService([Microsoft.Exchange.WebServices.Data.ExchangeVersion]::Exchange2010_SP2)
$ews.Url = [string](Get-WebServicesVirtualDirectory).InternalURL
# Benutze die Credentials mit dem das Skript ausgeführt wird
$ews.UseDefaultCredentials = $true

# Eigenschaft der User welche abgerufen werden
$user_properties =  @('DisplayName','EmailAddress','Company','facsimileTelephoneNumber','givenName','initials','l','mailNickname','name','pager','postalCode','sn','streetAddress','telephoneNumber','HomePhone','MobilePhone','title','co','State','Department','Office','wwwHomePage','Manager')  

# Aktivierte Benutzer abrufen welche als Kontake in den Mailboxen angelegt werden
$users = Get-ADUser -Filter{ObjectCategory -eq "Person" -and objectClass -eq "user" -and Enabled -eq $true} -Properties $user_properties  

# Funktion zum Prüfen von Eigenschaften
function Get-PropValue($prop){return @{$true=$prop;$false=$null}[$prop -ne ""]}  

# Für alle aktivierten Usermailboxen ausführen
Get-Mailbox -RecipientTypeDetails UserMailbox -Filter "IsMailBoxEnabled -eq 'True'" | %{  
    write-host "Updating Mailbox '$($_.Name)'." -ForegroundColor Blue -BackgroundColor White  
    $ews.ImpersonatedUserId = New-Object Microsoft.Exchange.WebServices.Data.ImpersonatedUserId([Microsoft.Exchange.WebServices.Data.ConnectingIdType]::SmtpAddress, [string]$_.PrimarySmtpAddress)
    # Nach dem Ordner "Firmenkontakte" im Default Kontakte-Ordner suchen  
    $view = New-Object Microsoft.Exchange.WebServices.Data.FolderView(1)
    $view.PropertySet = New-Object Microsoft.Exchange.WebServices.Data.PropertySet([Microsoft.Exchange.WebServices.Data.BasePropertySet]::IdOnly,[Microsoft.Exchange.WebServices.Data.FolderSchema]::DisplayName)
    $view.Traversal = [Microsoft.Exchange.WebServices.Data.FolderTraversal]::Shallow
    $filter = New-Object Microsoft.Exchange.WebServices.Data.SearchFilter+IsEqualTo([Microsoft.Exchange.WebServices.Data.FolderSchema]::DisplayName,$foldername)
    $result = $ews.FindFolders($parentFolder,$filter,$view)
    
    if ($result.TotalCount){
        # Ordner wurde gefunden
        $targetFolder = $result.Folders
    }else{
        # Ordner existiert noch nicht, lege ihn an
        write-host "Creating the contact folder '$foldername' in Mailbox." -ForegroundColor Green  
        $targetFolder = New-Object Microsoft.Exchange.WebServices.Data.ContactsFolder($ews)
        $targetFolder.DisplayName = $foldername
        $targetFolder.Save($parentFolder)
    }
    
    # Items im Ordner auflisten
    $view = New-Object Microsoft.Exchange.WebServices.Data.ItemView(10000)
    $view.PropertySet = New-Object Microsoft.Exchange.WebServices.Data.PropertySet([Microsoft.Exchange.WebServices.Data.BasePropertySet]::IdOnly,[Microsoft.Exchange.WebServices.Data.ContactSchema]::DisplayName,$propset)
    $result = $ews.FindItems($targetFolder.Id,$view)

    $targetSIDs =  $result | %{$_.ExtendedProperties | ?{$_.PropertyDefinition.PropertySetId -eq $propid} | select -Expand Value}

    # überschüssige Kontakte die vom User dort angelegt wurden im Ordner löschen
    $result | ?{$_.ExtendedProperties.Value -notin $users.SID -or $_.ExtendedProperties.Count -eq 0 } | %{
        write-host "Removing abandoned contact '$($_.DisplayName)' in '$foldername.'" -ForegroundColor Yellow  
        $_.Delete([Microsoft.Exchange.WebServices.Data.DeleteMode]::HardDelete)
    }
    
    # Vorhandene Kontakte aktualisieren und neue erstellen
    foreach ($user in $users){
        if ($user.SID -in $targetSIDs){
            $isupdate = $true
            $contact = $result | ?{($_.ExtendedProperties | ?{$_.PropertyDefinition.PropertySetId -eq $propid}).Value -eq $user.SID}
            write-host "Updating contact '$($user.Name)'." -ForegroundColor Green  
        }else{
            $isupdate = $false
            $contact = new-object Microsoft.Exchange.WebServices.Data.Contact($ews)
            write-host "Creating new contact '$($user.Name)'." -ForegroundColor Green  
        }

        $contact.GivenName = Get-PropValue $user.GivenName
        $contact.Surname = Get-PropValue $user.sn
        $contact.Initials = Get-PropValue $user.Initials
        $contact.DisplayName = Get-PropValue $user.DisplayName
        $contact.CompanyName = Get-PropValue $user.Company
        $contact.OfficeLocation = Get-PropValue $user.Office
        $contact.Department = Get-PropValue $user.Department
        $contact.JobTitle = Get-PropValue $user.Title
        $contact.BusinessHomePage = Get-PropValue $user.wwwHomePage
        $contact.Manager = Get-PropValue $user.Manager

        $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::HomePhone] = Get-PropValue $user.HomePhone
        $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::BusinessPhone] = Get-PropValue $user.telephoneNumber
        $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::MobilePhone] = Get-PropValue $user.MobilePhone
        $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::Pager] = Get-PropValue $user.Pager
        $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::BusinessFax] = Get-PropValue $user.facsimileTelephoneNumber
        
        $privateAddress = New-Object Microsoft.Exchange.WebServices.Data.PhysicalAddressEntry
        $privateAddress.Street = Get-PropValue $user.streetAddress
        $privateAddress.City = Get-PropValue $user.l
        $privateAddress.PostalCode = Get-PropValue $user.postalCode
        $privateAddress.State = Get-PropValue $user.State
        $privateAddress.CountryOrRegion = Get-PropValue $user.co
        $contact.PhysicalAddresses[[Microsoft.Exchange.WebServices.Data.PhysicalAddressKey]::Home] = $privateAddress
        $contact.PostalAddressIndex = [Microsoft.Exchange.WebServices.Data.PhysicalAddressIndex]::Home

        $contact.EmailAddresses['EMailAddress1'] = Get-PropValue $user.EMailAddress  
        $contact.FileAsMapping = [Microsoft.Exchange.WebServices.Data.FileAsMapping]::SurnameCommaGivenName

        if ($isupdate){
            $contact.Update([Microsoft.Exchange.WebServices.Data.ConflictResolutionMode]::AlwaysOverwrite)
        }else{
            # Schreibe die SID des Users in die custom extended property des Kontakts (Dient zur eindeutigen Identifikation des Kontakts)
            $contact.SetExtendedProperty($propset,[string]$user.SID)
            $contact.Save($targetFolder.id)
        }
    }
}

# Exchange Session beenden
Remove-PSSession $session

Get-Mailbox 'maxmuster' | %{   

$users = Get-ADUser -Filter{ObjectCategory -eq "Person" -and objectClass -eq "user" -and Enabled -eq $true} -Properties $user_properties | ?{$_.telephoneNumber -ne $null -or $_.MobilePhone -ne $null}  

$users = Get-AdUser -LDAPFilter "(&(ObjectCategory=Person)(ObjectClass=User)(!userAccountControl:1.2.840.113556.1.4.803:=2)(|(mobile=*)(telephoneNumber=*)))" -Properties $user_properties  

<#
   Sync AD-Users to Contact-Folder in all Mailboxes / (c) @colinardo
   Vor dem Start des Skript ist dem User welcher das Skript später ausführt die Impersonation-Berechtigungzu erteilen:
   In diesem Beispiel der User 'Administrator' (Bitte einmalig in einer EMS ausführen)  
   New-ManagementRoleAssignment -Name:impersonationAssignmentName -Role:ApplicationImpersonation -User:Administrator
#>

if ($PSVersionTable.PSVersion.Major -lt 3){write-host "ERROR: Minimum Powershell Version 3.0 is required!" -F Yellow; return}    

# Active Directory Modul laden
Import-Module ActiveDirectory

# EWS DLL laden
Add-Type -Path "$(Split-Path $MyInvocation.MyCommand.Definition -Parent)\Microsoft.Exchange.WebServices.dll"  

# Mit Exchange verbinden
try{
    $exchange_server = Get-ADObject -LDAPFilter 'objectClass=msExchExchangeServer' -SearchBase (([ADSI]"LDAP://RootDse").configurationNamingContext.ToString()) -Properties networkaddress | select -Expand networkaddress | ?{$_ -match 'ncacn_ip_tcp'} | %{$_.split(":")[1]} | select -First 1  
    if (!$exchange_server){Write-Host "Could not determine Exchange-Server FQDN from AD" -ForegroundColor Red; return}  
    write-host "Creating connection to Exchange-Server '$exchange_server' ..." -ForegroundColor Green  
    $session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "http://$exchange_server/powershell" -Authentication Kerberos  
    Import-PSSession $session -DisableNameChecking -AllowClobber | out-null
}catch{
    throw $_
    return
}

# Start Variablen -------------------------------------------------------------------------
# Name des Ordners in dem die Kontake angelegt werden
$foldername = "Firmenkontakte"  
# Überordner festlegen
$parentFolder = [Microsoft.Exchange.WebServices.Data.WellKnownFolderName]::Contacts
# Ende Variablen -------------------------------------------------------------------------

# Allen Zertifikaten vertrauen
Add-Type @"  
    using System.Net;
    using System.Security.Cryptography.X509Certificates;
    public class TrustAllCertsPolicy : ICertificatePolicy {
        public bool CheckValidationResult(
            ServicePoint srvPoint, X509Certificate certificate,
            WebRequest request, int certificateProblem) {
            return true;
        }
    }
"@  
# Trust all certs policy dem ServicePointManager zuweisen
[System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy

# Custom Propertyset erstellen um einen Kontakt eindeutig zu identifizieren
$propid = [GUID]'{05591a58-e392-4aa9-8cbd-06627d605c95}'  
$propset = New-Object Microsoft.Exchange.WebServices.Data.ExtendedPropertyDefinition($propid,'ObjectSID',[Microsoft.Exchange.WebServices.Data.MapiPropertyType]::String)  

# EWS Objekt erstellen
$ews = new-object Microsoft.Exchange.WebServices.Data.ExchangeService
$ews.Url = [string](Get-WebServicesVirtualDirectory).InternalURL
# Benutze die Credentials mit dem das Skript ausgeführt wird
$ews.UseDefaultCredentials = $true

# Eigenschaft der User welche abgerufen werden
$user_properties =  @('DisplayName','EmailAddress','Company','facsimileTelephoneNumber','givenName','initials','l','mailNickname','name','pager','postalCode','sn','streetAddress','telephoneNumber','HomePhone','MobilePhone','title','co','State','Department','Office','wwwHomePage','Manager')  

# Aktivierte Benutzer abrufen welche als Kontake in den Mailboxen angelegt werden
$users = Get-ADUser -Filter{ObjectCategory -eq "Person" -and objectClass -eq "user" -and Enabled -eq $true} -Properties $user_properties  

# Funktion zum Prüfen von Eigenschaften
function Get-PropValue($prop){return (@{$true=$prop;$false=$null}[![string]::IsNullOrEmpty($prop)])}

# Für alle aktivierten Usermailboxen ausführen
Get-Mailbox -RecipientTypeDetails UserMailbox -Filter "IsMailBoxEnabled -eq 'True'" | %{  
    write-host "Updating Mailbox '$($_.Name)'." -ForegroundColor Blue -BackgroundColor White  
    $ews.ImpersonatedUserId = New-Object Microsoft.Exchange.WebServices.Data.ImpersonatedUserId([Microsoft.Exchange.WebServices.Data.ConnectingIdType]::SmtpAddress, [string]$_.PrimarySmtpAddress)
    # Nach dem Ordner "Firmenkontakte" im Default Kontakte-Ordner suchen  
    $view = New-Object Microsoft.Exchange.WebServices.Data.FolderView(1)
    $view.PropertySet = New-Object Microsoft.Exchange.WebServices.Data.PropertySet([Microsoft.Exchange.WebServices.Data.BasePropertySet]::IdOnly,[Microsoft.Exchange.WebServices.Data.FolderSchema]::DisplayName)
    $view.Traversal = [Microsoft.Exchange.WebServices.Data.FolderTraversal]::Shallow
    $filter = New-Object Microsoft.Exchange.WebServices.Data.SearchFilter+IsEqualTo([Microsoft.Exchange.WebServices.Data.FolderSchema]::DisplayName,$foldername)
    $result = $ews.FindFolders($parentFolder,$filter,$view)
    
    if ($result.TotalCount){
        # Ordner wurde gefunden
        $targetFolder = $result.Folders
    }else{
        # Ordner existiert noch nicht, lege ihn an
        write-host "Creating the contact folder '$foldername' in Mailbox." -ForegroundColor Green  
        try{
            $targetFolder = New-Object Microsoft.Exchange.WebServices.Data.ContactsFolder($ews)
            $targetFolder.DisplayName = $foldername
            $targetFolder.Save($parentFolder)
        }catch{
            Write-Host $_ -F Red
            return
        }
    }
    
    # Items im Ordner auflisten
    $view = New-Object Microsoft.Exchange.WebServices.Data.ItemView(10000)
    $view.PropertySet = New-Object Microsoft.Exchange.WebServices.Data.PropertySet([Microsoft.Exchange.WebServices.Data.BasePropertySet]::IdOnly,[Microsoft.Exchange.WebServices.Data.ContactSchema]::DisplayName,$propset)
    $result = $ews.FindItems($targetFolder.Id,$view)

    $targetSIDs =  $result | %{$_.ExtendedProperties | ?{$_.PropertyDefinition.PropertySetId -eq $propid} | select -Expand Value}

    # überschüssige Kontakte die vom User dort angelegt wurden im Ordner löschen
    $result | ?{$_.ExtendedProperties.Value -notin $users.SID -or $_.ExtendedProperties.Count -eq 0 } | %{
        write-host "Removing abandoned contact '$($_.DisplayName)' in '$foldername.'" -ForegroundColor Yellow  
        $_.Delete([Microsoft.Exchange.WebServices.Data.DeleteMode]::HardDelete)
    }
    
    # Vorhandene Kontakte aktualisieren und neue erstellen
    foreach ($user in $users){

        try{
            if ($user.SID -in $targetSIDs){
                $isupdate = $true
                $contact = $result | ?{($_.ExtendedProperties | ?{$_.PropertyDefinition.PropertySetId -eq $propid}).Value -eq $user.SID}
                $contact.Load()
                write-host "Updating contact '$($user.Name)'." -ForegroundColor Green  
            }else{
                $isupdate = $false
                $contact = new-object Microsoft.Exchange.WebServices.Data.Contact($ews)
                write-host "Creating new contact '$($user.Name)'." -ForegroundColor Green  
            }
            $contact.GivenName = Get-PropValue $user.GivenName
            $contact.Surname = Get-PropValue $user.sn
            $contact.Initials = Get-PropValue $user.Initials
            $contact.DisplayName = Get-PropValue $user.DisplayName
            $contact.CompanyName = Get-PropValue $user.Company
            $contact.OfficeLocation = Get-PropValue $user.Office
            $contact.Department = Get-PropValue $user.Department
            $contact.JobTitle = Get-PropValue $user.Title
            $contact.BusinessHomePage = Get-PropValue $user.wwwHomePage
            $contact.Manager = Get-PropValue $user.Manager
            
            $number = ""  
            $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::HomePhone,[ref]$number)
            $prop = Get-PropValue $user.HomePhone
            if (($numberFound -and $number -ne $user.HomePhone) -or (!$numberFound -and $prop -ne $null)){
                $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::HomePhone] = @{$true=$prop;$false=[char]129}[$prop -ne $null]
            }
            $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::BusinessPhone,[ref]$number)
            $prop = Get-PropValue $user.telephoneNumber
            if (($numberFound -and $number -ne $user.telephoneNumber) -or (!$numberFound -and $prop -ne $null)){
                $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::BusinessPhone] = @{$true=$prop;$false=[char]129}[$prop -ne $null]
            }
            $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::MobilePhone,[ref]$number)
            $prop = Get-PropValue $user.MobilePhone
            if (($numberFound -and $number -ne $user.MobilePhone) -or (!$numberFound -and $prop -ne $null)){
                $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::MobilePhone] =  @{$true=$prop;$false=[char]129}[$prop -ne $null]
            }
            $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::Pager,[ref]$number)
            $prop = Get-PropValue $user.Pager
            if (($numberFound -and $number -ne $user.Pager) -or (!$numberFound -and $prop -ne $null) ){
                $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::Pager] = @{$true=$prop;$false=[char]129}[$prop -ne $null]
            }

            $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::BusinessFax,[ref]$number)
            $prop = Get-PropValue $user.facsimileTelephoneNumber
            if (($numberFound -and $number -ne $user.facsimileTelephoneNumber) -or (!$numberFound -and $prop -ne $null)){
                 $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::BusinessFax] =  @{$true=$prop;$false=[char]129}[$prop -ne $null]
            }
        
            
            $privateAddress = New-Object Microsoft.Exchange.WebServices.Data.PhysicalAddressEntry
            $privateAddress.Street = Get-PropValue $user.streetAddress
            $privateAddress.City = Get-PropValue $user.l
            $privateAddress.PostalCode = Get-PropValue $user.postalCode
            $privateAddress.State = Get-PropValue $user.State
            $privateAddress.CountryOrRegion = Get-PropValue $user.co
            $contact.PhysicalAddresses[[Microsoft.Exchange.WebServices.Data.PhysicalAddressKey]::Home] = $privateAddress
            $contact.PostalAddressIndex = [Microsoft.Exchange.WebServices.Data.PhysicalAddressIndex]::Home

            $contact.EmailAddresses[[Microsoft.Exchange.WebServices.Data.EmailAddressKey]::EmailAddress1] = Get-PropValue $user.EMailAddress
            $contact.FileAsMapping = [Microsoft.Exchange.WebServices.Data.FileAsMapping]::SurnameCommaGivenName
            
            if ($isupdate){
                $contact.Update([Microsoft.Exchange.WebServices.Data.ConflictResolutionMode]::AlwaysOverwrite)
            }else{
                # Schreibe die SID des Users in die custom extended property des Kontakts (Dient zur eindeutigen Identifikation des Kontakts)
                $contact.SetExtendedProperty($propset,[string]$user.SID)
                $contact.Save($targetFolder.id)
            }
         }catch{
            Write-host $_ -F Red
            return
         }
    }
}

# Exchange Session beenden
Remove-PSSession $session

 $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::Pager,[ref]$number)
            $prop = Get-PropValue $user.Pager
            if (($numberFound -and $number -ne $user.Pager) -or (!$numberFound -and $prop -ne $null) ){
                $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::Pager] = @{$true=$prop;$false=[char]129}[$prop -ne $null]

<#
   Sync AD-Users to Contact-Folder in all Mailboxes / (c) @colinardo
   Vor dem Start des Skript ist dem User welcher das Skript später ausführt die Impersonation-Berechtigungzu erteilen:
   In diesem Beispiel der User 'Administrator' (Bitte einmalig in einer EMS ausführen)  
   New-ManagementRoleAssignment -Name:impersonationAssignmentName -Role:ApplicationImpersonation -User:Administrator
#>

if ($PSVersionTable.PSVersion.Major -lt 3){write-host "ERROR: Minimum Powershell Version 3.0 is required!" -F Yellow; return}    

# Active Directory Modul laden
Import-Module ActiveDirectory

# EWS DLL laden
#Original auskommentiert, da das Sktipt in einem anderen Pfad liegt.
#Add-Type -Path "$(Split-Path $MyInvocation.MyCommand.Definition -Parent)\Microsoft.Exchange.WebServices.dll"  
Add-Type -Path "D:\Exchange\V15\Bin\Microsoft.Exchange.WebServices.dll"  

# Mit Exchange verbinden
try{
    #$exchange_server = Get-ADObject -LDAPFilter 'objectClass=msExchExchangeServer' -SearchBase (([ADSI]"LDAP://RootDse").configurationNamingContext.ToString()) -Properties networkaddress | select -Expand networkaddress | ?{$_ -match 'ncacn_ip_tcp'} | %{$_.split(":")[1]} | select -First 1  
 #Server Manuell angegeben
    $exchange_server = "exchangeserver1-b.domäne.intern"  
    if (!$exchange_server){Write-Host "Could not determine Exchange-Server FQDN from AD" -ForegroundColor Red; return}  
    write-host "Creating connection to Exchange-Server '$exchange_server' ..." -ForegroundColor Green  
    $session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "http://$exchange_server/powershell" -Authentication Kerberos  
    Import-PSSession $session -DisableNameChecking -AllowClobber | out-null
}catch{
    throw $_
    return
}

# Start Variablen -------------------------------------------------------------------------
# Name des Ordners in dem die Kontake angelegt werden
$foldername = "Firmenkontakte"  
# Überordner festlegen
$parentFolder = [Microsoft.Exchange.WebServices.Data.WellKnownFolderName]::Contacts
# Ende Variablen -------------------------------------------------------------------------

# Allen Zertifikaten vertrauen
Add-Type @"  
    using System.Net;
    using System.Security.Cryptography.X509Certificates;
    public class TrustAllCertsPolicy : ICertificatePolicy {
        public bool CheckValidationResult(
            ServicePoint srvPoint, X509Certificate certificate,
            WebRequest request, int certificateProblem) {
            return true;
        }
    }
"@  
# Trust all certs policy dem ServicePointManager zuweisen
[System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy

# Custom Propertyset erstellen um einen Kontakt eindeutig zu identifizieren
$propid = [GUID]'{05591a58-e392-4aa9-8cbd-06627d605c95}'  
$propset = New-Object Microsoft.Exchange.WebServices.Data.ExtendedPropertyDefinition($propid,'ObjectSID',[Microsoft.Exchange.WebServices.Data.MapiPropertyType]::String)  

# EWS Objekt erstellen
$ews = new-object Microsoft.Exchange.WebServices.Data.ExchangeService
$ews.Url = [string](Get-WebServicesVirtualDirectory).InternalURL
# Benutze die Credentials mit dem das Skript ausgeführt wird
$ews.UseDefaultCredentials = $true

# Eigenschaft der User welche abgerufen werden
$user_properties =  @('DisplayName','EmailAddress','Company','facsimileTelephoneNumber','givenName','initials','l','mailNickname','name','pager','postalCode','sn','streetAddress','telephoneNumber','HomePhone','MobilePhone','title','co','State','Department','Office','wwwHomePage','Manager')  

# Aktivierte Benutzer abrufen welche als Kontake in den Mailboxen angelegt werden
$users = Get-ADUser -Filter{ObjectCategory -eq "Person" -and objectClass -eq "user" -and Enabled -eq $true} -Properties $user_properties  

# Funktion zum Prüfen von Eigenschaften
function Get-PropValue($prop){return (@{$true=$prop;$false=$null}[![string]::IsNullOrEmpty($prop)])}

# Für alle aktivierten Usermailboxen ausführen
    #Für Testzwecke abgeändert
        #Get-Mailbox -RecipientTypeDetails UserMailbox -Filter "IsMailBoxEnabled -eq 'True'" | %{  
Get-Mailbox 'timo test' | %{  
    write-host "Updating Mailbox '$($_.Name)'." -ForegroundColor Blue -BackgroundColor White  
    $ews.ImpersonatedUserId = New-Object Microsoft.Exchange.WebServices.Data.ImpersonatedUserId([Microsoft.Exchange.WebServices.Data.ConnectingIdType]::SmtpAddress, [string]$_.PrimarySmtpAddress)
    # Nach dem Ordner "Firmenkontakte" im Default Kontakte-Ordner suchen  
    $view = New-Object Microsoft.Exchange.WebServices.Data.FolderView(1)
    $view.PropertySet = New-Object Microsoft.Exchange.WebServices.Data.PropertySet([Microsoft.Exchange.WebServices.Data.BasePropertySet]::IdOnly,[Microsoft.Exchange.WebServices.Data.FolderSchema]::DisplayName)
    $view.Traversal = [Microsoft.Exchange.WebServices.Data.FolderTraversal]::Shallow
    $filter = New-Object Microsoft.Exchange.WebServices.Data.SearchFilter+IsEqualTo([Microsoft.Exchange.WebServices.Data.FolderSchema]::DisplayName,$foldername)
    #$result = $ews.FindFolders($parentFolder,$filter,$view)
    
    if ($result.TotalCount){
        # Ordner wurde gefunden
        $targetFolder = $result.Folders
    }else{
        # Ordner existiert noch nicht, lege ihn an
        write-host "Creating the contact folder '$foldername' in Mailbox." -ForegroundColor Green  
        try{
            $targetFolder = New-Object Microsoft.Exchange.WebServices.Data.ContactsFolder($ews)
            $targetFolder.DisplayName = $foldername
            $targetFolder.Save($parentFolder)
        }catch{
            Write-Host $_ -F Red
            return
        }
    }
    
    # Items im Ordner auflisten
    $view = New-Object Microsoft.Exchange.WebServices.Data.ItemView(10000)
    $view.PropertySet = New-Object Microsoft.Exchange.WebServices.Data.PropertySet([Microsoft.Exchange.WebServices.Data.BasePropertySet]::IdOnly,[Microsoft.Exchange.WebServices.Data.ContactSchema]::DisplayName,$propset)
    $result = $ews.FindItems($targetFolder.Id,$view)

    $targetSIDs =  $result | %{$_.ExtendedProperties | ?{$_.PropertyDefinition.PropertySetId -eq $propid} | select -Expand Value}

    # überschüssige Kontakte die vom User dort angelegt wurden im Ordner löschen
    $result | ?{$_.ExtendedProperties.Value -notin $users.SID -or $_.ExtendedProperties.Count -eq 0 } | %{
        write-host "Removing abandoned contact '$($_.DisplayName)' in '$foldername.'" -ForegroundColor Yellow  
        $_.Delete([Microsoft.Exchange.WebServices.Data.DeleteMode]::HardDelete)
    }
    
    # Vorhandene Kontakte aktualisieren und neue erstellen
    foreach ($user in $users){

        try{
            if ($user.SID -in $targetSIDs){
                $isupdate = $true
                $contact = $result | ?{($_.ExtendedProperties | ?{$_.PropertyDefinition.PropertySetId -eq $propid}).Value -eq $user.SID}
                $contact.Load()
                write-host "Updating contact '$($user.Name)'." -ForegroundColor Green  
            }else{
                $isupdate = $false
                $contact = new-object Microsoft.Exchange.WebServices.Data.Contact($ews)
                write-host "Creating new contact '$($user.Name)'." -ForegroundColor Green  
            }
            $contact.GivenName = Get-PropValue $user.GivenName
            $contact.Surname = Get-PropValue $user.sn
            $contact.Initials = Get-PropValue $user.Initials
            $contact.DisplayName = Get-PropValue $user.DisplayName
            $contact.CompanyName = Get-PropValue $user.Company
            $contact.OfficeLocation = Get-PropValue $user.Office
            $contact.Department = Get-PropValue $user.Department
            $contact.JobTitle = Get-PropValue $user.Title
            $contact.BusinessHomePage = Get-PropValue $user.wwwHomePage
            $contact.Manager = Get-PropValue $user.Manager
            
            $number = ""  
            $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::HomePhone,[ref]$number)
            $prop = Get-PropValue $user.HomePhone
            if (($numberFound -and $number -ne $user.HomePhone) -or (!$numberFound -and $prop -ne $null)){
                $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::HomePhone] = @{$true=$prop;$false=[char]129}[$prop -ne $null]
            }
            $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::BusinessPhone,[ref]$number)
            $prop = Get-PropValue $user.telephoneNumber
            if (($numberFound -and $number -ne $user.telephoneNumber) -or (!$numberFound -and $prop -ne $null)){
                $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::BusinessPhone] = @{$true=$prop;$false=[char]129}[$prop -ne $null]
            }
            $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::MobilePhone,[ref]$number)
            $prop = Get-PropValue $user.MobilePhone
            if (($numberFound -and $number -ne $user.MobilePhone) -or (!$numberFound -and $prop -ne $null)){
                $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::MobilePhone] =  @{$true=$prop;$false=[char]129}[$prop -ne $null]
            }
            $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::Pager,[ref]$number)
            $prop = Get-PropValue $user.Pager
            if (($numberFound -and $number -ne $user.Pager) -or (!$numberFound -and $prop -ne $null) ){
                $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::Pager] = @{$true=$prop;$false=[char]129}[$prop -ne $null]
            }

            $numberFound = $contact.PhoneNumbers.TryGetValue([Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::BusinessFax,[ref]$number)
            $prop = Get-PropValue $user.facsimileTelephoneNumber
            if (($numberFound -and $number -ne $user.facsimileTelephoneNumber) -or (!$numberFound -and $prop -ne $null)){
                 $contact.PhoneNumbers[[Microsoft.Exchange.WebServices.Data.PhoneNumberKey]::BusinessFax] =  @{$true=$prop;$false=[char]129}[$prop -ne $null]
            }
        
            
            $privateAddress = New-Object Microsoft.Exchange.WebServices.Data.PhysicalAddressEntry
            $privateAddress.Street = Get-PropValue $user.streetAddress
            $privateAddress.City = Get-PropValue $user.l
            $privateAddress.PostalCode = Get-PropValue $user.postalCode
            $privateAddress.State = Get-PropValue $user.State
            $privateAddress.CountryOrRegion = Get-PropValue $user.co
            $contact.PhysicalAddresses[[Microsoft.Exchange.WebServices.Data.PhysicalAddressKey]::Home] = $privateAddress
            $contact.PostalAddressIndex = [Microsoft.Exchange.WebServices.Data.PhysicalAddressIndex]::Home

            $contact.EmailAddresses[[Microsoft.Exchange.WebServices.Data.EmailAddressKey]::EmailAddress1] = Get-PropValue $user.EMailAddress
            $contact.FileAsMapping = [Microsoft.Exchange.WebServices.Data.FileAsMapping]::SurnameCommaGivenName
            
            if ($isupdate){
                $contact.Update([Microsoft.Exchange.WebServices.Data.ConflictResolutionMode]::AlwaysOverwrite)
            }else{
                # Schreibe die SID des Users in die custom extended property des Kontakts (Dient zur eindeutigen Identifikation des Kontakts)
                $contact.SetExtendedProperty($propset,[string]$user.SID)
                $contact.Save($targetFolder.id)
            }
         }catch{
            Write-host $_ -F Red
            return
         }
    }
}

# Exchange Session beenden
Remove-PSSession $session

% : Ausnahme beim Aufrufen von "FindFolders" mit 3 Argument(en):  "The request failed. Der Remoteserver hat einen Fehler zurückgegeben: (403) Unzulässig."  
In C:\PS-Skripte\MLKontakte.ps1:79 Zeichen:23
+ Get-Mailbox 'FooBar' | %{  
+                       ~~
    + CategoryInfo          : NotSpecified: (:) [ForEach-Object], MethodInvocationException
    + FullyQualifiedErrorId : ServiceRequestException,Microsoft.PowerShell.Commands.ForEachObjectCommand

$ews = new-object Microsoft.Exchange.WebServices.Data.ExchangeService ([Microsoft.Exchange.WebServices.Data.ExchangeVersion]::Exchange2016)