Unable to remove calendar permission

User def.hij and klm.nop had permission on calendar folder of User abc. Now user def.hij is gone and the account is disabled. When i check the existing permission of calender folder of abc i see def.hij and klm.nop listed there and i am trying to remove that but getting below errors. i was able to remove klm.nop using the same command but cant remove def.hij

Using this to check the permission:


get-mailboxfolderPermission -Identity abc@xyz.net:\calendar

RunspaceId   : 7b90a9bb-33fe-4fca-9ef0-3298b530fd44
FolderName   : Calendar
User         : Default
AccessRights : {AvailabilityOnly}
Identity     : Default
IsValid      : True

RunspaceId   : 7b90a9bb-33fe-4fca-9ef0-3298b530fd44
FolderName   : Calendar
User         : NT User:xyz\def.hij
AccessRights : {Owner}
Identity     : NT User:xyz\def.hij
IsValid      : True


Using this to remove the permission:

Remove-MailboxFolderPermission -identity "abc@xyz.net:\calendar" -User def.hij


There is no existing permission entry found for user: def hij.
    + CategoryInfo          : NotSpecified: (0:Int32) [Remove-MailboxFolderPermission], UserNotFoundInPermissionEntryE
   xception
    + FullyQualifiedErrorId : B9E1C51A,Microsoft.Exchange.Management.StoreTasks.RemoveMailboxFolderPermission
    + PSComputerName        : servername.domain.net
techdeepAsked:
Who is Participating?
 
VB ITSConnect With a Mentor Specialist ConsultantCommented:
Do you have multiple DCs in your environment? If so you may have to wait for replication to occur before trying again.

From my experience you do have to wait a bit after you re-enable a disabled account before you can make changes and vice versa.
0
 
Satya PathakLead Technical ConsultantCommented:
try below command

remove-MailboxFolderPermission -Identity Owner:\Calendar -User TargetUser
0
 
techdeepAuthor Commented:
That's this exactly what i am using but getting error.

Remove-MailboxFolderPermission -identity "abc@xyz.net:\calendar" -User def.hij
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
VB ITSSpecialist ConsultantCommented:
Re-enable the def.hij account and then try re-running the command.

You can't modify (add, edit or remove) the old user's permissions to another mailbox when their account is disabled. I tested and confirmed this very recently in another EE question.
0
 
techdeepAuthor Commented:
You want me to enable account in AD only or you want to assign it a mailbox as-well before we try to remove it ?
0
 
VB ITSSpecialist ConsultantCommented:
Did you remove the mailbox from the account then disable the account in AD?

Try enabling the account in AD and then run the command. If that doesn't work you may have to re-link the disconnected mailbox to the def.hij account.
0
 
techdeepAuthor Commented:
The mailbox was not disconnected and only AD account was disabled. I have enabled the account but still getting same error. Only one thing changed and that is when I run get-mailboxfolderPermission command I dont see "NT User" thing and now see the User's name.

Using this to check the permission:


get-mailboxfolderPermission -Identity abc@xyz.net:\calendar

RunspaceId   : 7b90a9bb-33fe-4fca-9ef0-3298b530fd44
FolderName   : Calendar
User         : Default
AccessRights : {AvailabilityOnly}
Identity     : Default
IsValid      : True

RunspaceId   : 7b90a9bb-33fe-4fca-9ef0-3298b530fd44
FolderName   : Calendar
User         : def hij
AccessRights : {Owner}
Identity     : def hij
IsValid      : True
0
 
techdeepAuthor Commented:
yes... this issue was resolved. was able to remove the permission using same command after


Enabled the account ----> Forced AD replication ---> restarted exchange transport service
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.