Is this in Exchange Online?
If so try:
Remove-MailboxPermission <user> -ResetDefault
Then re-add any other mailboxes that may have full access (check with get-mailboxpermission first)
This parameter is available or functional only in the cloud-based service.
The ResetDefault switch resets the default security descriptor of the mailbox. Permissions on the mailbox are reset so only the mailbox owner has FullAccess permission to the mailbox. The following types of permissions are not affected:
Recipient permissions (for example, SendAs, SendOnBehalf and delegates).
Mailbox folder permissions assigned using the MailboxFolderPermission cmdlets.
Mailbox folder permissions assigned using Outlook or other MAPI clients.
Also, because this switch removes FullAccess permission from other users on the mailbox, the mailbox is no longer auto-mapped by Autodiscover into the Outlook profiles of other users.