0

We have been using Exchange 2013 CU22 on Server 2012 R2.

I run this:

Remove-MailboxPermission "SharedMailbox" -User "User" -AccessRights FullAccess -InheritanceType All

I get this:

WARNING: An inherited access control entry has been specified: [Rights: CreateChild, Delete, ReadControl, WriteDacl, WriteOwner, ControlType: Allow]  and was ignored on o
bject "CN=SharedMailbox,DC=contoso,DC=com".

Get-MailboxPermission "SharedMailbox"

Result : 

Identity             User                 AccessRights         IsInherited Deny 
--------             ----                 ------------         ----------- ---- 
contoso.com/... Contoso\User              {FullAccess}         False       True

Get-MailboxDatabase SharedDB | Get-ADPermission

Result : 

Identity             User                 Deny  Inherited
--------             ----                 ----  ---------
SharedMailbox         Contoso\User      True  True
SharedMailbox         Contoso\User      False  True

Any assistance would be greatly appreciated. Blind

womble
  • 95,029
  • 29
  • 173
  • 228
Cell-o
  • 317
  • 4
  • 13
  • 29

1 Answers1

0

You can follow the steps mentioned in this article to Remove Exchange Inherited permissions to Mailboxes. The permission can be added at multiple levels so it’s aways a diagnostic trail to where this was added. Go through each of those mentioned and if IsInherited is set to False you’ve found out where it’s being applied from.

Beverly Gao
  • 126
  • 4