I'm trying to use Powershell to remove certain full access permissions on an account as part of a disable user process.
I need to remove all full access permissions on the account except for:
NT AUTHORITY\SELF
and
DOMAIN\svcEnterpriseVault
How can I go about doing this using the Remove-MailboxPermission
cmdlet?
Thanks
Edit: I've gotten a little further with the command below, but I am having trouble passing the list of full-access users to the Remove-MailboxPermission cmdlet.
Get-MailboxPermission -Identity $TheUser | Select User | where {($_.User -notlike
"NT AUTHORITY\SELF") -and ($_.User -notlike "DOMAIN\svcEnterpriseVault")} | Remove-MailboxPermission -Identity $TheUser -User [ALL THE USERS FROM THE GET-MAILBOX COMMAND]