• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Remove permission

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2010] >> Management >> Remove permission Page: [1]
Login
Message << Older Topic   Newer Topic >>
Remove permission - 27.Sep.2010 12:23:07 PM   
saune

 

Posts: 4
Joined: 27.Sep.2010
Status: offline
Hi all,

Does anyone know the proper PowerShell command to REMOVE this Mailbox Permission entry?


RunspaceId : e92a9622-0647-4698-b99a-a634af269bdc
AccessRights : {FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner}
Deny : False
InheritanceType : All
User : [DOMAIN]\[firstname.lastname]
Identity : domain/Users/[User Name]
IsInherited : True
IsValid : True

Any help would be appreciated... :)
Post #: 1
RE: Remove permission - 27.Sep.2010 3:59:27 PM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
Since the permissions are inherited you'll need to break the inheritance first, then run:

Remove-MailboxPermission -Identity DOMAIN\User (<-the mailbox itself) -User Test2 (<- the user with permissions) -AccessRights FullAccess, DeleteItem, ReadPermission, ChangePermission, ChangeOwner -InheritanceType All

Remove-MailboxPermission

(in reply to saune)
Post #: 2
RE: Remove permission - 27.Sep.2010 4:11:59 PM   
saune

 

Posts: 4
Joined: 27.Sep.2010
Status: offline
Thank you, Jesper. And how/where would I break the inheritance?

(in reply to Jesper Bernle)
Post #: 3
RE: Remove permission - 27.Sep.2010 4:24:03 PM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
Hahaha - Like the Mailman with the mail

Sorry for the irony but the simple answer is somewhere in the structure above the mailbox - the database level I'm guessing.

(in reply to saune)
Post #: 4
RE: Remove permission - 27.Sep.2010 4:34:22 PM   
saune

 

Posts: 4
Joined: 27.Sep.2010
Status: offline


Well, as you may understand, I am quite new to this...

Exactly what tool would I use to break this Inheritance, and what commands, etc.?

I would greatly appreciate it were you to be very spesific, otherwise I am afraid I will not find my way around... :)

(in reply to Jesper Bernle)
Post #: 5
RE: Remove permission - 28.Sep.2010 4:28:05 AM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
Okay, let's try this ...

1. Go to the Start menu on your Exchange Server and in "Search Programs and Files" type in ADSIEdit.msc.
2. Click om ADSIEdit.
3. Choose Action -> Connetc to ...
4. In the Connection point area, click 'Select a well known Naming Context' and choose 'Configuration' from the Drop Down Menu.
5. Hit OK
6. Browse down to Services\Microsoft Exchange\<Name of your Exchange Organization>\Administrative Groups\Exchange Administrative Group (FYDIBOHF23SPDLT)\Servers

From there you will find your Exchange Servers and below them all of the databases. Since we don't know where the initial security setting is added, we need to do some investigation (please put on your detective hat ).

What you'll need to do, is to right click on, let's say the Server object, and choose Properties. Go to the Security Tab and locate the User which permissions you want to modifiy.

If the check boxes are grayed out it just means that the permission setting is inherited from somewhere above. If so, then hit the Advanced button. Luckily ADSIEdit shows you from where by looking in the column 'Inherited from'. Go to that location and alter as needed.

Please be very careful when working with ADSIEdit. There is no safety lines in this tool. You are actually modifying the Active Directory live and can create alot of problems if you modify incorrectly.

Hope this is descriptive enough

(in reply to saune)
Post #: 6
RE: Remove permission - 28.Sep.2010 11:27:41 AM   
saune

 

Posts: 4
Joined: 27.Sep.2010
Status: offline
Thanks a lot, Jesper. You have saved my day :)

Skal følge bloggen din fremover, den ser fin ut :)

(in reply to Jesper Bernle)
Post #: 7
RE: Remove permission - 30.Sep.2010 4:13:16 PM   
Jesper Bernle

 

Posts: 912
Joined: 15.Oct.2007
Status: offline
quote:

ORIGINAL: saune

...

Skal følge bloggen din fremover, den ser fin ut :)


Tack så mycket!

(in reply to saune)
Post #: 8

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2010] >> Management >> Remove permission Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter