if we go to EMC, and go to "manage Full access Permission", can t remove users with a command line.
If we try to manually remove them it works, but it needs to be done in all databases, for all mailbox
We run the command:
1./Get-Mailbox | Remove-MailboxPermission -User test -AccessRights FullAccess -InheritanceType All
got the warning for all mailbox: An inherited access control entry has been specified: [Rights: CreateChild, ControlType: Allow] and was ignored on object
2./ try to run another command:
Get-Mailbox | Remove-MailboxPermission -User test – deny –AccessRights ‘FullAccess’ -InheritanceType All
Got another warning message: Can’t remove the access control entry on the object “CN……. “ for account “test” because the ACE doesn’t exist on the object
3./ went to adsit.edit ( configuration)
services>microsoft exchange>administrative groyps>exchange administrative groups. went to security tab of "databases" but users that are listed on EMC are not there.
if i create a new user, these users are automatically added.
How can i remove them?