Remove Deny Permissions from Exchange Mailbox using Powershell


If you are an Exchange administrator and are having trouble in accessing other mailboxes although you have full access, then you may find that you need to remove the “Deny” permission on the mailbox you are trying to access. Sometimes this can be your own account or maybe a group like “Domain Admins”.

To check the existing permissions on the mailbox, you can use the script below within the Exchange Management Shell (EMS):

Get-MailboxPermission -identity [Mailbox-Alias]


  • [Mailbox-Alias] = Alias of the mailbox you want to check the permissions on

One you have identified the permissions you want to change, you can now carry out the change using the script below within EMS:

Remove-MailboxPermission -identity [Mailbox-Alias] -user [User to remove] -AccessRights FullAccess -Deny


  • [Mailbox-Alias] = Alias of the mailbox you change to change the permissions on
  • [User to remove] = The user (or user group) you want to remove the Deny permissions for


Remove-MailboxPermission -identity joe.bloggs -user “Domain Admins” -AccessRights FullAccess -Deny

Once you have done this you should now try and gain access to the mailbox again and this should now allow you to have the permissions you wanted.


If you have any questions or comments on this guide, please feel free to leave us a message below using our comments system and we will get back to you as soon as we can.

Free Subscription!Subscribe to our site to receive updates via email!

Enter your email address below and click the Subscribe button to receive email notifications about new and exciting downloads available through our website at

You will also receive notifications about new technical guides, latest news and MSI installer downloads that are available through our blog here at 

We will not spam you and we will not pass on any of your details to anyone else. We tend to post new content once or twice a week.

Join 279 other subscribers

You can unsubscribe any time you like.

About A.J. Armstrong

Founder of TechyGeeksHome and Head Editor for over eight years! IT expert in multiple areas for over 20 years. Sharing experience and knowledge whenever possible! Making IT Happen.

View all posts by A.J. Armstrong