Exchange
Exchange

Exchange Permissions inherited for admin, showing in PS report

I've got a PS report that I run that tells me who has access to mailboxes other than their own. On this report, i have one admin who is showing to have permissions to several mailboxes, yet these do not show in EAC. I have ran the PS command to remove their permissions, but it's still showing on my report.

Here is the PS report I'm pulling: Get-Mailbox | Get-MailboxPermission | where {$_.user.tostring() -ne “NT AUTHORITY\SELF” -and $_.IsInherited -eq $false} | Select Identity,User,@{Name=’Access Rights’;Expression={[string]::join(‘, ‘, $_.AccessRights)}} | Export-Csv

Any ideas?

MortgageInvestorsAsked: 2017-10-30

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

Experts Exchange Solution brought to you by

Enjoy your complimentary solution view.

Get every solution instantly with Premium. Start your 7-day free trial.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 19

Amit KumarCommented: 2017-10-30

By default there are few System/Design mailbox permissions are enabled on a Mailbox which does not show in EAC but PS will show. This is default behavior and don't change then as such permissions help you to manage Compliance/Discover/Litigation Hold etc.

MortgageInvestorsAuthor Commented: 2017-10-31

Thank you Amit, but we are trying to remove these permissions to these specific mailboxes. Any idea how to remove them?

LVL 19

Amit KumarCommented: 2017-10-31

Remove-MailboxPermission is CMDLet to remove permissions, however being Exchange Admin I won't recommend to remove system permissions. You can remove permissions for non-system user or service accounts if required.

https://technet.microsoft.com/en-us/library/bb125153(v=exchg.160).aspx

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial

LVL 37

Seth SimmonsSr. Systems AdministratorCommented: 2018-01-27

No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Amit Kumar (https:#a42350561)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer