This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 28.999999999999996%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDH%3C/text%3E%3C/svg%3E)
Hello guys, i would like to get some advice, how to remove mailbox folder permission for usertype Unknown in ExchangeOnline
I am connected to exchange online via PS with prefix EO as Exchange Online, so cmdlets will start with EO, because we have hybrid environment and i need to manage both in one PS.
I have shared mailbox, where is some corrupted ACL for user group, which i want to remove.
[PS] C:\ExchangeScripts\ExchangeOnline\Resource Migration>(Get-EOMailboxFolderPermission "Mailbox") | select -ExpandProperty user
UserType RecipientPrincipal DisplayName
Default Default
Anonymous Anonymous
Unknown %GroupName%
so i am able to select this unknown UserType:
Get-EOMailboxFolderPermission -identity "Mailbox" | where {$_.user.usertype -like "unknown"}
But i cannot remove this rights, through pipeline:
Get-EOMailboxFolderPermission -identity "Mailbox" | where {$_.user.usertype -like "unknown"} | Remove-EOMailboxFolderPermission
Cannot process argument transformation on parameter 'User'. Cannot convert value "GroupName" to type "Microsoft.Exchange.Management.StoreTasks.MailboxFolderUserIdParameter". Error: "Cannot convert hashtable to an object of the following
type: Microsoft.Exchange.Management.StoreTasks.MailboxFolderUserIdParameter. Hashtable-to-Object conversion is not supported in constrained language mode, restricted language mode or a Data section."
I dunno, why it returns that error described upper....
Do you have any ideas how to deal with it?
Thanks you
D.
Try to recover this mailbox, then check whether this "Unknown" user become visible on this permission list.
If you cannot recover this mailbox, you can try to create a service request to Office 365 team, check whether they could delete this permission from the backend.
If they cannot remove the permission for you, I think you may need to recreate this mailbox. In this way, all permission on this mailbox will gone. But you need to add needed permission back to this mailbox again.
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@Daniel Hnyk
I am writing here to confirm with you any update about this thread now? Do you remove permission successfully?
If the above suggestion helps, please be free to mark it as an answer for helping more people.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 40%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJR%3C/text%3E%3C/svg%3E)
even if the thread is old ...
I have the same problem, did you ever solved this problem?
I was told to reset the delegates, but this doesn´t help.
Hello, i think i removed them manually, one by one via PS. I had to select that displayname, or you can use ms outlook client to manage/remove that corrupted permission.
Hi,
outlook client will only show the default folder. There are a lot of folders, that you can only view with exchange online powershell.
For example ...
We had a few users, with yammer-root folders or calendars with unknown user type.
I can share the solution, thanks to Microsoft and the support specialist Adedolapo.
This is a quick&dirty Script to query for all mailbox folder for all eo-users.
$AllUserMailbox = (Get-Mailbox).UserPrincipalName
ForEach($Mailbox in $AllUserMailbox)
{
$Root = "Posteingang" # inbox
$Folders = ((Get-MailboxFolderStatistics $Mailbox) |Where {$_.FolderPath.Contains("/" + $Root) -eq $True}) | Select Name, FolderPath, Foldertype, Identity
ForEach($Folder in $Folders)
{
$fname = $Mailbox + ":" + $Folder.FolderPath.Replace(“/”,”\”);
$fname | Out-File ("C:\tmp\" + $Mailbox + $Root + ".txt") -Append # -Encoding ASCII
$ACL = (Get-MailboxFolderPermission -Identity "$fname")
$ACL | Select -ExpandProperty User | Where-Object{$_.UserType -match "Unknown"} | FT | Out-File ("C:\tmp\" + $Mailbox + $Root + ".txt") -Append # -Encoding ASCII
}
}
$mfp = Get-MailboxFolderPermission -Identity "COMPLETE THE MAILBOX AND FOLDER"
$mfp (check the output for the orphaneduser)
$mfp[PUT THE NUMBER OF THE ORDER THAT THE ORPHANED USER LISTED FROM THE COMMAND ABOVE, MAKE SURE IT'S THE RIGHT USER]
$mfp[THE NUMBER FROM ABOVE] | Remove-MailboxFolderPermission -Identity "COMPLETE THE MAILBOX AND FOLDER" -Force