Exchagne 2010 Sercurity Question

Grady-Vogt
Grady-Vogt used Ask the Experts™
on
Recently a customer wanted a secruity group to have access to ALL mailboxes I ran the following :
"Get-MailboxDatabase | Add-ADPermission -identity "group" -AccessRights GenericAll"

now they want it removed.
WOuld it be as simple as
"Get-MailboxDatabase | Remove-ADPermission -identity "group" -AccessRights GenericAll"
This would only remove the groups rights?
and not removing individual user rights default in exchange 2010?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
It would only remove the group, not any members of that group that might have had permissions applied directly.

Source: I love/live powershell

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial