I had an admin on my staff that is no longer with the company. Somehow, anytime a new mailbox gets created, he gets FullAccess Rights to any new mailboxes. I ran the command below - It did successfully remove the FullAccess Rights for this user from all mailboxes: get-mailbox | Add-MailboxPermission -User 'Domain\admin_account' -Deny -AccessRights FullAccess -InheritanceType All As a test I created a new mailbox and there he is again! I thought the -InheritanceType All switch would prevent this... How can I get rid of this user once and for all? I appreciate it - Thanks!

Check inheritance on the store or server or Org level via adsiedit. Why hasnt the ex-employee's account been removed? I assume it s disabled at least.

He's been gone for a few days now and yes, his account has been disabled.

Hi Do you have anything to update ?Terence Yu TechNet Community Support