• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 40
  • Last Modified:

Exchange Permissions inherited for admin, showing in PS report

I've got a PS report that I run that tells me who has access to mailboxes other than their own. On this report, i have one admin who is showing to have permissions to several mailboxes, yet these do not show in EAC. I have ran the PS command to remove their permissions, but it's still showing on my report.

Here is the PS report I'm pulling: Get-Mailbox | Get-MailboxPermission | where {$_.user.tostring() -ne “NT AUTHORITY\SELF” -and $_.IsInherited -eq $false} | Select Identity,User,@{Name=’Access Rights’;Expression={[string]::join(‘, ‘, $_.AccessRights)}} | Export-Csv

Any ideas?
0
MortgageInvestors
Asked:
MortgageInvestors
  • 2
1 Solution
 
Amit KumarCommented:
By default there are few System/Design mailbox permissions are enabled on a Mailbox which does not show in EAC but PS will show. This is default behavior and don't change then as such permissions help you to manage Compliance/Discover/Litigation Hold etc.
0
 
MortgageInvestorsAuthor Commented:
Thank you Amit, but we are trying to remove these permissions to these specific mailboxes.  Any idea how to remove them?
0
 
Amit KumarCommented:
Remove-MailboxPermission is CMDLet to remove permissions, however being Exchange Admin I won't recommend to remove system permissions. You can remove permissions for non-system user or service accounts if required.

https://technet.microsoft.com/en-us/library/bb125153(v=exchg.160).aspx
0
 
Seth SimmonsSr. Systems AdministratorCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Amit Kumar (https:#a42350561)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now