Share via

Exchange PowerShell mailbox rights issue

Step to IT 125 Reputation points
2023-12-06T18:52:01.63+00:00

Please tell me how the "Deny" parameter works in the Exchange "MailboxPermission" cmdlet. For example, I check the permissions on the "test-mailbox" and see some groups there where the "Deny" parameter is set to "True". However, access is available from these groups. I tried another option: I added full rights to the mailbox for another account with the "Deny" = "True" parameter, but nothing changed, access has not disappeared. How does it work?

And the second question is where I can view and edit the current inherited mailbox permissions ("IsInherited" = "True")?

Exchange | Other
Exchange | Other

A powerful email and collaboration platform developed by Microsoft, designed to support enterprise-level communication and productivity. Miscellaneous topics that do not fit into specific categories.

0 comments No comments

2 answers

Sort by: Most helpful
  1. Anonymous
    2023-12-08T09:15:34.3966667+00:00

    Please check this :Exchange Mailbox Rights
    https://community.spiceworks.com/topic/34358-exchange-mailbox-rights

    (Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.)

    Regards

    SF


    If the answer is helpful, please click "Accept Answer" and kindly upvote it.

    Was this answer helpful?


  2. Anonymous
    2023-12-07T07:43:00.9533333+00:00

    Hello @Step to IT

    In your case, it's possible that the groups you are seeing with the "Deny" parameter set to "True" have also been granted other permissions that allow them to access the mailbox.

    Here is an explanation about Deny:

    User's image

    <<where I can view and edit the current inherited mailbox permissions ("IsInherited" = "True")?

    If you only want to view inherited permissions use:

    Get-MailboxPermission -Identity <MailboxIdentity> | Where-Object { $_.IsInherited -eq $true }

    Or run the following command to view all the current permissions for a mailbox:

    Get-MailboxPermission -Identity <MailboxIdentity>

    Regards

    SF


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.