Home » Error » Fix ‘Can’t Remove Full Access Permission on Mailboxes Exchange 2013’ Problem

Fix ‘Can’t Remove Full Access Permission on Mailboxes Exchange 2013’ Problem

  author
Aswin Vijayan   
Published: Oct 20, 2018 • Error • 3 Min Read

Can't Remove Full Access Permission On Mailboxes Exchange 2013

Are you the one going through similar kind of following scenario :

One month ago, I had granted full access to an employee of my business. I allowed this power user complete right to use supervisor’s mailbox on the Exchange server 2013. Now the reason due to which I had granted him the permission is fulfilled and I want to remove full access permission. I tried to execute ‘Remove-MailboxPermission -identity ‘XXX’ -user ‘XXX\XXX’ -AccessRights FullAccess’ command in PowerShell but, encountered an error statement. I tried to shift the account on a separate storage group and again executed the same command but, it didn’t worked out for me. Is there any Exchange expert who can assist me in removing full access permission from all mailboxes Exchange 2013? Thanks in advance!

Alike above end user, there are several Microsoft server admins who can’t remove full access permission on mailboxes Exchange 2013. In this post, we are going to provide solution on this respective MS Exchange server  problem.

Is It Essential to Remove Permission, Can’t We Just Ignore the Error?

No not all! If an administrator does not remove the full access permission then, it is a big threat to business data security . High chances of incidences like data misuse, information leakage, etc., can be there because user is permitted with complete use of Exchange mailboxes. These business operations, if ignored could put business reputation at high risk. Even if you are facing a problem while removing full access permission then, you can implement the solution rendered on this post. But, we strongly recommend you not to ignore the error!

Don’t Ignore, Fix the Error!

‘Can’t remove full access permission on mailboxes in Exchange 2013’ issue appears, if Exchange admin tries to remove the granted permissions with the help of GUI or PowerShell. There exists a simple measure to the problem i.e., ‘disconnect the powered user mailbox and then, reconnect it again to change full access permission’.

Note down: powered user mailbox is the one to which full access permission was granted and now, it is to be removed. It is possible to learn reason behind the denying of permission by executing command in Exchange PowerShell window :
‘Get-MailboxPermission UserMailbox’

When the cmdlet gets executed, check whether the deny parameter is true or false. Of course the value of this parameter will be true, if problem is in present state. You have to run  cmdlet to change the deny parameter on that particular mailbox.

‘Add-MailboxPermission UserMailbox –Deny $False’

Now you can remove full access permissions in mailbox!

Are You Done With Error Fixing?

The solution to get out of ‘Can’t remove full access permission on mailboxes Exchange 2013’ problem is posted in this blog. You can bookmark this page to implement the provided approach in case issue persists in future. Also, if you are unable to fix problem from your end then, contact Invorx team of Microsoft Exchange experts. They will assist you with problem faced by you and enable you in troubleshooting your issue in shortest time period.

By Aswin Vijayan

Aswin Vijayan is a multi-talented professional known for his roles as a Cyber Security, and Content Strategist and Curator. His keen insight into cybersecurity ensures that organizations are safeguarded in the digital landscape. His expertise in curating and strategizing content complements these skills, making him an invaluable asset in the world of digital strategy and security.