Recently a customer wanted a secruity group to have access to ALL mailboxes I ran the following :
"Get-MailboxDatabase | Add-ADPermission -identity "group" -AccessRights GenericAll"
now they want it removed.
WOuld it be as simple as
"Get-MailboxDatabase | Remove-ADPermission -identity "group" -AccessRights GenericAll"
This would only remove the groups rights?
and not removing individual user rights default in exchange 2010?