Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm trying to use Powershell to remove certain full access permissions on an account as part of a disable user process.

I need to remove all full access permissions on the account except for:

NT AUTHORITY\SELF and DOMAIN\svcEnterpriseVault

How can I go about doing this using the Remove-MailboxPermission cmdlet?


Edit: I've gotten a little further with the command below, but I am having trouble passing the list of full-access users to the Remove-MailboxPermission cmdlet.

Get-MailboxPermission -Identity $TheUser | Select User | where {($_.User -notlike
 "NT AUTHORITY\SELF") -and ($_.User -notlike "DOMAIN\svcEnterpriseVault")} | Remove-MailboxPermission -Identity $TheUser -User [ALL THE USERS FROM THE GET-MAILBOX COMMAND]
share|improve this question

1 Answer 1

up vote 2 down vote accepted

Can you just do this? I removed the "Select User" since that is for display purposes only and used no parameters on "Remove-MailboxPermision" since it accepts input. Haven't tested though.

Get-MailboxPermission -Identity $TheUser | where {($_.User -notlike
"NT AUTHORITY\SELF") -and ($_.User -notlike "DOMAIN\svcEnterpriseVault")} | 
share|improve this answer
Thank you, that worked. –  chris Jul 2 '12 at 20:25

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.