I’ve accidently removed a complete AD account from a user (LDAP browser). This was not a great issue, I just created a new account fort his user. However, In Exchange 2010 the removed user account had FullAccess rights on different mailboxes which I can’t remove (I can add the newly created account with FullAccess rights). The removed account still shows up in Exchange Console but when I try to remove the entry the result is as follow (Remove-MailboxPermission -Identity '[targetmailbox]' -User '[removed account]' -InheritanceType 'All' -AccessRights 'FullAccess'):
Warning:
Can't remove the access control entry on the object "[targetmailbox]" for account "[removed account]" because the ACE doesn't exist on the object.
This is not odd because the old account does not excist anymore. But is there a way to remove all these entries of the removed account? In a LDAP browser there is no entry for the removed account visible in the object [targetmailbox]
Thnx Remco
