<div>
Thank you Todd. For documentation purposes, is there a parameter that will report on all actions taken?
</div>


<div>
During? &nbsp;Probably, but I keep it basic for me. &nbsp;I will typically run something like this command before and after to look for any discrepancies or misses.<br />
<br />

<pre><code class="code-1 nolinks" id="code-20-41848746-1"><span>Get-PublicFolder -Identity &quot;\&quot; -Recurse -ResultSize Unlimited | Get-PublicFolderClientPermission | Where-Object { $_.User -like &quot;NT User:S-1-*&quot; } | Select-Object Identity,User,@{Name=&quot;AccessRights&quot;;Expression={$_.AccessRights} } | Export-Csv &quot;C:\OrphanedPFPermissions.csv&quot; -NoTypeInformation</span>
</code></pre>
</div>


<div>
Todd, I appreciate your assistance, but this script only applies to Public Folders, not Mailboxes.
</div>


<div>
Jon, will provide an update to your progress?
</div>


<div>
<div class="content wysiwyg-content">
I ran a powershell report to extract AccessRights for all O365 mailboxes. A small portion of them only listed SID that still has access rights. Is there a powershell command that can be run to remove the access rights from those SID references? Approximately half of those SIDs no longer exist in AD. For the most part, we don't remove user accounts. The SIDs could have referenced a user that existed prior to our Exchange 2010/O365 hybrid environment.<br />
<br />
If you could also please help me build a command to remove access rights given UPN and Mailbox. I also have the AccessRights listed per entry.<br />
<br />
Thank you
</div>
</div>


I ran a powershell report to extract AccessRights for all O365 mailboxes. A small portion of them only listed SID that still has access rights. Is there a powershell command that can be run to remove the access rights from those SID references? Approximately half of those SIDs no longer exist in AD. For the most part, we don't remove user accounts. The SIDs could have referenced a user that existed prior to our Exchange 2010/O365 hybrid environment.

If you could also please help me build a command to remove access rights given UPN and Mailbox. I also have the AccessRights listed per entry.

Thank you

Given a User's SID, how to remove O365 mailbox AccessRights

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

Exchange

Office 365 is a group of software plus services subscriptions that provides productivity software and related services to its subscribers. Office 365 allows the use of Microsoft Office apps on Windows and OS X, provides storage space on Microsoft's cloud storage service OneDrive, and grants 60 Skype minutes per month. Office 365 includes e-mail and social networking services through hosted versions of Exchange Server, Skype for Business Server, SharePoint and Office Online, integration with Yammer, as well as access to the Office software. All of Office 365's components can be managed and configured through an online portal; users can be added manually, imported from a CSV file, or Office 365 can be set up for single sign-on with a local Active Directory using Active Directory Federation Services.

Microsoft 365

Windows PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language built on the .NET Framework. PowerShell provides full access to the Component Object Model (COM) and Windows Management Instrumentation (WMI), enabling administrators to perform administrative tasks on both local and remote Windows systems as well as WS-Management and Common Information Model (CIM) enabling management of remote Linux systems and network devices.