Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2607
  • Last Modified:

Remove permisions to a calaendar

Hi

I am strugling with the correct Power Shell command to remove permisions to a users Calendar in Exchange 2010.

The Permisions on the Mailbox Calendar are currently as below.
..........................................................................................................................................................
[PS] C:\Windows\system32>Get-MailboxFolderPermission -identity "gina waldron:\Calendar"


RunspaceId   : 40383525-60cf-4a1f-81bd-874230905680
FolderName   : Calendar
User         : Default
AccessRights : {AvailabilityOnly}
Identity     : Default
IsValid      : True

RunspaceId   : 40383525-60cf-4a1f-81bd-874230905680
FolderName   : Calendar
User         : _All NSF CMi Employees Including Overseas Divisions
AccessRights : {Reviewer}
Identity     : _All NSF CMi Employees Including Overseas Divisions
IsValid      : True

...................................................................................................................................................

Identity _All NSF CMi Employees Including Overseas Divisions is a distribution group.  The alias of the distribution group is ALL.

I need to remove this distribution group from having access to this users Mailbox.

I thought the command below was correct but it does not want to work.

[PS] C:\Windows\system32>Remove-MailboxPermission -Identity "gina waldron:\calendar" -User ALL  -AccessRights reviewer -inheritanceType all

But I get the error below.  

Cannot process argument transformation on parameter 'AccessRights'. Cannot convert value "reviewer" to type "Microsoft.
Exchange.Management.RecipientTasks.MailboxRights[]". Error: "Cannot convert value "reviewer" to type "Microsoft.Exchang
e.Management.RecipientTasks.MailboxRights" due to invalid enumeration values. Specify one of the following enumeration
values and try again. The possible enumeration values are "FullAccess, SendAs, ExternalAccount, DeleteItem, ReadPermiss
ion, ChangePermission, ChangeOwner"."
    + CategoryInfo          : InvalidData: (:) [Remove-MailboxPermission], ParameterBindin...mationException
    + FullyQualifiedErrorId : ParameterArgumentTransformationError,Remove-MailboxPermission

What have i got wrong?

0
cmiadmin
Asked:
cmiadmin
  • 5
  • 4
1 Solution
 
LeeDerbyshireCommented:
I would try using ChangePermission instead of reviewer, only because it seems the closest fit from the available enumerations.
0
 
LeeDerbyshireCommented:
Oops, I think ReadPermission is actually the closest.
0
 
cmiadminAuthor Commented:
I have tried this:

remove-mailboxfolderpermission -identity "gwaldron:\calendar" -user ALL  -accessRights Reviewer

But get this result:

A positional parameter cannot be found that accepts argument '-accessRights'.
    + CategoryInfo          : InvalidArgument: (:) [Remove-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Remove-MailboxFolderPermission

0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
LeeDerbyshireCommented:
What it is saying is that Reviewer is not a valid value for the -AccessRights parameter.  Even though it appears in your output for Get-MailboxFolderPermission.  Try
 -AccessRights ReadPermission
instead.

You could probably do this in Outlook, too, if you have access to a PC configured to log into that mailbox.
0
 
cmiadminAuthor Commented:
That would be the easy way if I had access to the users mailbox but I don't unfortunatly I don't.


Also I am trying to learn all the correct PowerShell commands because I can see that once mastered it is much quicker to use than the GUI.

I have triied using -AccessRights ReadPermission

but get the same "A positional parameter cannot be found that accepts argument '-accessRights'"

error..
0
 
LeeDerbyshireCommented:
Try this (Remove-MailboxFolderPermission instead of Remove-MailboxPermission, and dropping AccessRights altogether, because Remove-MailboxPermission doesn't use it):

Remove-MailboxFolderPermission -identity "gwaldron:\calendar" -user ALL
0
 
LeeDerbyshireCommented:
I mean Remove-MailboxFolderPermission doesn't use it.  Or InheritanceType.
0
 
cmiadminAuthor Commented:
Hi

Managed to do it.
This is the command that I used:

remove-mailboxfolderpermission -identity "gwaldron:\calendar" -user ALL

Thanks for all your help.

Regards
Kevan
0
 
cmiadminAuthor Commented:
Thanks for your help
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now