Asked by:
Removing shared mailboxes from user's Outlook

-
There are several users that have several shared mailboxes in their Outlook that we would like to remove. I believe the right commands to do this are:
Remove-MailboxPermission -Identity <Mailbox to be removed> -User <User account> -AccessRights FullAccess
and
Add-MailboxPermission -Identity <Mailbox to be removed> -User <User account> -AccessRights FullAccess -AutoMapping:$falseHowever I'm getting the message:
WARNING: Can't remove the access control entry on the object "CN=Team (Ashtons),CN=Users,DC=movewithus,DC=local" for
account "MOVEWITHUS\JMcDouallADM" because the ACE doesn't exist on the object.after the first command.
Not sure exactly what to do.
Question
All replies
-
There are several users that have several shared mailboxes in their Outlook that we would like to remove. I believe the right commands to do this are:
Remove-MailboxPermission -Identity <Mailbox to be removed> -User <User account> -AccessRights FullAccess
and
Add-MailboxPermission -Identity <Mailbox to be removed> -User <User account> -AccessRights FullAccess -AutoMapping:$falseHowever I'm getting the message:
WARNING: Can't remove the access control entry on the object "CN=Team (Ashtons),CN=Users,DC=movewithus,DC=local" for
account "MOVEWITHUS\JMcDouallADM" because the ACE doesn't exist on the object.after the first command.
Not sure exactly what to do.
-
-
hello,
I have seen few cases where the auto mapped shared mailboxes will not get went away from the user’s outlook profile even though the full access permissions were removed for those users from the shared mailboxes. This may be caused due to problem in AD replication or because of any corruptions in the objects
So, on such I prefer to deal with these two different attributes
msexchdelegatelistlink is the attribute which populates the list of DN values of the shared mailboxes which were auto mapped to your user mailbox.
msExchDelegateLinkListBL is the attribute which populates the list of DN values of the user mailboxes to whom it will auto map to it.
Read more to know how to overcome this issue .
https://blogs.msmvps.com/acefekay/2017/05/22/removing-orphaned-populated-msexchangedelegatelinklist-and-msexchangedelegatelinklistbl-automapping-attributes/
https://blogs.msmvps.com/acefekay/2018/03/31/removing-orphaned-populated-msexchangedelegatelinklist-and-msexchangedelegatelinklistbl-automapping-attributes-2/
https://www.slipstick.com/exchange/removing-managed-mailboxes-from-an-outlook-profile/
http://www.neroblanco.co.uk/2015/07/links-and-backlinks-in-active-directory-for-exchange/
Thanks & Regards S.Nithyanandham
- Proposed as answer by Steve FanMicrosoft contingent staff, Moderator Wednesday, February 13, 2019 9:36 AM
-
I am one of the mailbox users, so I know there are a few mailboxes to remove.
Ok, Im not sure what you mean by that.
Also, this command is incorrect:
Should be :
Remove-MailboxPermission -Identity <Owner User Mailbox> -User <User account of user who is losing full access> -AccessRights FullAccess
-
Hi Jon,
We have a wiki article elaborate on this issue, you may want to have a look at it:
Exchange Server/Online: The ACE doesn't exist on the object
Hope this helps.
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.- Edited by Steve FanMicrosoft contingent staff, Moderator Tuesday, February 12, 2019 8:44 AM
-
Hi Jon,
How is everything going? Is this issue fixed now? Feel free to post back if further assistance is needed here.
Regards,
Steve FanPlease remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams. -
I was putting in the wrong thing after -user, so the command is now correct. However after entering both commands above (Remove-MailboxPermission -Identity <Mailbox to be removed> -User <User account> -AccessRights FullAccess and Add-MailboxPermission -Identity <Mailbox to be removed> -User <User account> -AccessRights FullAccess -AutoMapping:$false) the shared mailbox was still in Outlook after several hours.
-
Thank you for the update, Jon.
May I know whether you have got an opportunity to try Nithyanandham's suggestion? Edit the user accounts in the Active Directory and remove your names from the MsExchDelegateListLink attribute.
Regards,
Steve FanPlease remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams. -
-
How about we check the MsExchDelegateListLink attribute directly in Active Directory Users and Computers?
- Open Active Directory Users and Computers
- Go to View menu and select Advanced Features
- Open the user account that is showing in your mailbox (in the screenshot, user5's mailbox is in administrator's profile)
- Open the Properties dialog
- Click Attribute Editor tab
- Locate MsExchDelegateListLink
- Click Edit.
- Remove your name from the attribute
- Close the dialog
Regards,
Steve FanPlease remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams. -
-
Thank you for the update Jon.
Do you have Outlook restarted after disabling AutoMapping?
How about configuring the email account in a new mail profile or on a different computer? Do you see the same result?
Besides, we may check under Account Settings incase the shared mailboxes were manually added as additional mailboxes instead of being automapped.
Regards,
Steve FanPlease remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams. -
-
can you execute this command and see if it removes the mailbox.
Set-Mailbox <Mailbox Alias> -ApplyMandatoryProperties
if it doesn't work check the users computer LogonServer, once you get the DC check MsExchDelegateListLink on that DC as mentioned by Nithyanandham. if its not empty then it might be your AD replication from Exchange Connected AD to the AD where user is authenticated.
thanks,
Zak
ZakBhai