I'm having trouble removing full access permissions from a shared mailbox. It's the usual
"Can't remove the access control entry on the object for account because the ACE doesn't exist on the object."
But the users I'm trying to remove don't have any SIDhistory values apparent. The SID showing against the user object and the SID showing in msExchMailboxSecurityDescriptor match up. I have tried removing it via the username and via the SID, both failing in the same way. I'm wondering if I can just remove the entry using ADSIedit?
As much as the SIDhistory has been removed I do have a feeling that these users were migrated from an old domain.
I had a look at ADmodify but couldn't get it to play nicely with Exchange 2010 (at least the CDOEXC dll would never load up)
Any other suggestions gladly fielded.
Exchange 2010 RU5 with all roles installed on the one box.