Error while removing user access from Manage Full Access Permission using EM Console in Excahgne 2007/Win 2008
As two users are migrated from 2003 exchange to 2007 Exchange long back... When I tried removing full access permission from one another, it gives me error. I even changed their storage groups and the OU as per some advice in the net, but no Luck. Can please someone help me in solving this up. Error:- Summary: 1 item(s). 0 succeeded, 1 failed. Elapsed time: 00:00:00 Error: Cannot remove ACE on object “CN=XXX,OU=XXX,DC=XXX,DC=XXX,DC=XXX,DC=XXX” for account “xxxxxxxx.xxxx” because it is not present. Exchange Management Shell command attempted: Remove-MailboxPermission -Identity ‘CN=XXX,OU=XXX,DC=XXX,DC=XXX,DC=XXX,DC=XXX’ -User ‘xxxxxxxx.xxx’ -InheritanceType ‘All’ -AccessRights ‘FullAccess’ Elapsed Time:00:00:00
March 28th, 2011 7:31pm

Are you sure that the permission is set on the mailbox? The output of the remove-mailboxpermission cmdlet dont think it is. Use "Get-MailboxPermission" to verify what permission is set on the mailbox lasse at humandata dot se, http://anewmessagehasarrived.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
March 28th, 2011 9:40pm

Hi Pet, THer is the reply, I check that all, it showes the user permission is avaliable....pasting the result with some edit. [PS] C:\Users\>Get-MailboxPermission "Ma..., Sam..." Identity User AccessRights IsInherited Deny XXXX.XXXX... XXX\Ki..., Em... {FullAccess} False False XXXX.XXXX... XXXX.XXXX... [PS] C:\Users\>Remove-MailboxPermission "Ma..., Sam..." -AccessRights FullAccess -User "Ki..., Em..." Confirm Are you sure you want to perform this action? Removing mailbox permission "Ma..., Sam..." for user "Ki..., Em..." with access rights "'FullAccess'". [Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"):y Remove-MailboxPermission : Cannot remove ACE on object "CN=Ma...\, Sam..., OU=Xxx Xxx,OU=User Accounts,OU=Accounts,DC=xxx,DC=xxx" for account "XXX\Em...Ki..." because it is not present. At line:1 char:25 + Remove-MailboxPermission <<<< "Ma..., Sam..." -AccessRights FullAccess -User "Ki..., Em..." Now please tell me what should i do next...?
March 29th, 2011 12:45pm

Verify that permission is inherited to the account owning the mialbox. Use ADUC and then go to security page, advanced button, verify that the checbox "Include Inherited permission...." is checked. lasse at humandata dot se, http://anewmessagehasarrived.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
March 29th, 2011 3:14pm

If you still have Exchange 2003 use ESM to remove the permission on the mailbox. That works for us. Let me know how it goes.
March 30th, 2011 8:06am

Hello Both, I check the Include Inherited permission, It is Checked. But please tell me, how to get the Exchange Advance Tab in ADUC, even after installing Exchange 2003 Admin tool with SP3 and running Domine prep from Win XP SP2. I am also facing this issue..Iam not getting the Excahnge Advance Tab in ADUC. Please help. I cannot install Exchange 2003 Server in my Domain now.... Luke
Free Windows Admin Tool Kit Click here and download it now
March 31st, 2011 5:22am

Hi Luke, The “Exchange Advanced” Tab(in ADUC) is not existed in Exchange 2007 and Exchange 2010. In Exchange 2003, you can get the Exchange Advanced Tab by this way: Active Directory Users and Computers->View->choose Advanced Features->Then “Exchange Advanced” Tab will appear on users‘ properties tab For your problem, here are some related threads for you, hope it help: cann't remove Full Access rights for one user??!!!! http://social.technet.microsoft.com/Forums/en-US/exchangesoftwareupdate/thread/50a94a45-903e-409e-ba5c-116d84bed7ff Migrated Mailboxes with Delegated permissions cannot be administrated http://social.technet.microsoft.com/forums/en-us/exchangesvradmin/thread/6F08AEAE-22B9-4D06-8FEB-06B1DBFE69E8 Thanks, Evan Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
April 1st, 2011 2:35am

Here is a good article for you: http://www.exchange-powershell.com/2010/06/03/exchange-cannot-remove-ace-on-object-because-it-is-not-present/ Smart
Free Windows Admin Tool Kit Click here and download it now
April 1st, 2011 2:43am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics