Remove Deny Permissions from Exchange Mailbox using Powershell


Last updated on April 17th, 2023 at 12:18 am

Read Time:1 Minute, 10 Second

If you are an Exchange administrator and are having trouble in accessing other mailboxes although you have full access, then you may find that you need to remove the “Deny” permission on the mailbox you are trying to access. Sometimes this can be your own account or maybe a group like “Domain Admins”.

To check the existing permissions on the mailbox, you can use the script below within the Exchange Management Shell (EMS):

Get-MailboxPermission -identity [Mailbox-Alias]


  • [Mailbox-Alias] = Alias of the mailbox you want to check the permissions on

One you have identified the permissions you want to change, you can now carry out the change using the script below within EMS:

Remove-MailboxPermission -identity [Mailbox-Alias] -user [User to remove] -AccessRights FullAccess -Deny


  • [Mailbox-Alias] = Alias of the mailbox you change to change the permissions on
  • [User to remove] = The user (or user group) you want to remove the Deny permissions for


Remove-MailboxPermission -identity joe.bloggs -user “Domain Admins” -AccessRights FullAccess -Deny

Once you have done this you should now try and gain access to the mailbox again and this should now allow you to have the permissions you wanted.


If you have any questions or comments on this guide, please feel free to leave us a message below using our comments system and we will get back to you as soon as we can.

Click to rate this post!
[Total: 2 Average: 5]

Discover more from TechyGeeksHome

Subscribe to get the latest posts to your email.

Leave us a message...

This site uses Akismet to reduce spam. Learn how your comment data is processed.