Remove Deny Permissions from Exchange Mailbox using Powershell

Last updated on April 17th, 2023 at 12:18 am

If you are an Exchange administrator and are having trouble in accessing other mailboxes although you have full access, then you may find that you need to remove the “Deny” permission on the mailbox you are trying to access. Sometimes this can be your own account or maybe a group like “Domain Admins”.

To check the existing permissions on the mailbox, you can use the script below within the Exchange Management Shell (EMS):

Get-MailboxPermission -identity [Mailbox-Alias]

Where:

• [Mailbox-Alias] = Alias of the mailbox you want to check the permissions on

One you have identified the permissions you want to change, you can now carry out the change using the script below within EMS:

Remove-MailboxPermission -identity [Mailbox-Alias] -user [User to remove] -AccessRights FullAccess -Deny

Where:

• [Mailbox-Alias] = Alias of the mailbox you change to change the permissions on
• [User to remove] = The user (or user group) you want to remove the Deny permissions for

Example:

Remove-MailboxPermission -identity joe.bloggs -user “Domain Admins” -AccessRights FullAccess -Deny

Once you have done this you should now try and gain access to the mailbox again and this should now allow you to have the permissions you wanted.

COMMENTS

If you have any questions or comments on this guide, please feel free to leave us a message below using our comments system and we will get back to you as soon as we can.