• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2569
  • Last Modified:

Remove permisions to a calaendar

Hi

I am strugling with the correct Power Shell command to remove permisions to a users Calendar in Exchange 2010.

The Permisions on the Mailbox Calendar are currently as below.
..........................................................................................................................................................
[PS] C:\Windows\system32>Get-MailboxFolderPermission -identity "gina waldron:\Calendar"


RunspaceId   : 40383525-60cf-4a1f-81bd-874230905680
FolderName   : Calendar
User         : Default
AccessRights : {AvailabilityOnly}
Identity     : Default
IsValid      : True

RunspaceId   : 40383525-60cf-4a1f-81bd-874230905680
FolderName   : Calendar
User         : _All NSF CMi Employees Including Overseas Divisions
AccessRights : {Reviewer}
Identity     : _All NSF CMi Employees Including Overseas Divisions
IsValid      : True

...................................................................................................................................................

Identity _All NSF CMi Employees Including Overseas Divisions is a distribution group.  The alias of the distribution group is ALL.

I need to remove this distribution group from having access to this users Mailbox.

I thought the command below was correct but it does not want to work.

[PS] C:\Windows\system32>Remove-MailboxPermission -Identity "gina waldron:\calendar" -User ALL  -AccessRights reviewer -inheritanceType all

But I get the error below.  

Cannot process argument transformation on parameter 'AccessRights'. Cannot convert value "reviewer" to type "Microsoft.
Exchange.Management.RecipientTasks.MailboxRights[]". Error: "Cannot convert value "reviewer" to type "Microsoft.Exchang
e.Management.RecipientTasks.MailboxRights" due to invalid enumeration values. Specify one of the following enumeration
values and try again. The possible enumeration values are "FullAccess, SendAs, ExternalAccount, DeleteItem, ReadPermiss
ion, ChangePermission, ChangeOwner"."
    + CategoryInfo          : InvalidData: (:) [Remove-MailboxPermission], ParameterBindin...mationException
    + FullyQualifiedErrorId : ParameterArgumentTransformationError,Remove-MailboxPermission

What have i got wrong?

0
cmiadmin
Asked:
cmiadmin
  • 5
  • 4
1 Solution
 
LeeDerbyshireCommented:
I would try using ChangePermission instead of reviewer, only because it seems the closest fit from the available enumerations.
0
 
LeeDerbyshireCommented:
Oops, I think ReadPermission is actually the closest.
0
 
cmiadminAuthor Commented:
I have tried this:

remove-mailboxfolderpermission -identity "gwaldron:\calendar" -user ALL  -accessRights Reviewer

But get this result:

A positional parameter cannot be found that accepts argument '-accessRights'.
    + CategoryInfo          : InvalidArgument: (:) [Remove-MailboxFolderPermission], ParameterBindingException
    + FullyQualifiedErrorId : PositionalParameterNotFound,Remove-MailboxFolderPermission

0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
LeeDerbyshireCommented:
What it is saying is that Reviewer is not a valid value for the -AccessRights parameter.  Even though it appears in your output for Get-MailboxFolderPermission.  Try
 -AccessRights ReadPermission
instead.

You could probably do this in Outlook, too, if you have access to a PC configured to log into that mailbox.
0
 
cmiadminAuthor Commented:
That would be the easy way if I had access to the users mailbox but I don't unfortunatly I don't.


Also I am trying to learn all the correct PowerShell commands because I can see that once mastered it is much quicker to use than the GUI.

I have triied using -AccessRights ReadPermission

but get the same "A positional parameter cannot be found that accepts argument '-accessRights'"

error..
0
 
LeeDerbyshireCommented:
Try this (Remove-MailboxFolderPermission instead of Remove-MailboxPermission, and dropping AccessRights altogether, because Remove-MailboxPermission doesn't use it):

Remove-MailboxFolderPermission -identity "gwaldron:\calendar" -user ALL
0
 
LeeDerbyshireCommented:
I mean Remove-MailboxFolderPermission doesn't use it.  Or InheritanceType.
0
 
cmiadminAuthor Commented:
Hi

Managed to do it.
This is the command that I used:

remove-mailboxfolderpermission -identity "gwaldron:\calendar" -user ALL

Thanks for all your help.

Regards
Kevan
0
 
cmiadminAuthor Commented:
Thanks for your help
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now