From bc5b759800555c1fdc2cc832562d1ca9b0599d88 Mon Sep 17 00:00:00 2001 From: astavitsky Date: Thu, 13 Aug 2020 11:32:59 -0400 Subject: [PATCH 1/3] Replace FullAccess with actual AccessRights --- Get-RecipientPermissions.ps1 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Get-RecipientPermissions.ps1 b/Get-RecipientPermissions.ps1 index ade093c..2b5abba 100644 --- a/Get-RecipientPermissions.ps1 +++ b/Get-RecipientPermissions.ps1 @@ -809,12 +809,12 @@ Begin{ #Add Support for the -Confirm:$False Switch If(($PerformRemoval)-and($ConfirmPreference -eq 'None')){ - Remove-MailboxPermission -Identity $Identity.DisplayName -User $FMPobj_USER.SamAccountName -AccessRights FullAccess -InheritanceType All -Confirm:$False + Remove-MailboxPermission -Identity $Identity.DisplayName -User $FMPobj_USER.SamAccountName -AccessRights $FMP.AccessRights -InheritanceType All -Confirm:$False } Else{ - Remove-MailboxPermission -Identity $Identity.DisplayName -User $FMPobj_USER.SamAccountName -AccessRights FullAccess -InheritanceType All + Remove-MailboxPermission -Identity $Identity.DisplayName -User $FMPobj_USER.SamAccountName -AccessRights $FMP.AccessRights -InheritanceType All } From 7cd4fa7f1627c56f808fa4f47973e9fd8d610eaf Mon Sep 17 00:00:00 2001 From: astavitsky Date: Fri, 14 Aug 2020 11:37:24 -0400 Subject: [PATCH 2/3] Update Get-RecipientPermissions.ps1 --- Get-RecipientPermissions.ps1 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Get-RecipientPermissions.ps1 b/Get-RecipientPermissions.ps1 index 2b5abba..da0175d 100644 --- a/Get-RecipientPermissions.ps1 +++ b/Get-RecipientPermissions.ps1 @@ -809,12 +809,12 @@ Begin{ #Add Support for the -Confirm:$False Switch If(($PerformRemoval)-and($ConfirmPreference -eq 'None')){ - Remove-MailboxPermission -Identity $Identity.DisplayName -User $FMPobj_USER.SamAccountName -AccessRights $FMP.AccessRights -InheritanceType All -Confirm:$False + Remove-MailboxPermission -Identity $Identity.DisplayName -User $FMPobj_USER.SamAccountName -AccessRights $FMPobj.AccessRights -InheritanceType All -Confirm:$False } Else{ - Remove-MailboxPermission -Identity $Identity.DisplayName -User $FMPobj_USER.SamAccountName -AccessRights $FMP.AccessRights -InheritanceType All + Remove-MailboxPermission -Identity $Identity.DisplayName -User $FMPobj_USER.SamAccountName -AccessRights $FMPobj.AccessRights -InheritanceType All } From e62dbdc34572bc6e435f2a28bd78df7028177acd Mon Sep 17 00:00:00 2001 From: astavitsky Date: Fri, 23 Oct 2020 12:42:17 -0400 Subject: [PATCH 3/3] Update Get-RecipientPermissions.ps1 --- Get-RecipientPermissions.ps1 | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/Get-RecipientPermissions.ps1 b/Get-RecipientPermissions.ps1 index da0175d..1c3fdd8 100644 --- a/Get-RecipientPermissions.ps1 +++ b/Get-RecipientPermissions.ps1 @@ -807,15 +807,13 @@ Begin{ Try{ #Add Support for the -Confirm:$False Switch - If(($PerformRemoval)-and($ConfirmPreference -eq 'None')){ - - Remove-MailboxPermission -Identity $Identity.DisplayName -User $FMPobj_USER.SamAccountName -AccessRights $FMPobj.AccessRights -InheritanceType All -Confirm:$False - - } - Else{ - - Remove-MailboxPermission -Identity $Identity.DisplayName -User $FMPobj_USER.SamAccountName -AccessRights $FMPobj.AccessRights -InheritanceType All + If($PerformRemoval){ + $CMDlet_RemovePerms = "Remove-MailboxPermission -Identity `$Identity.DisplayName -User `$FMPobj_USER.SamAccountName -AccessRights `$FMPobj.AccessRights -InheritanceType All" + If($ConfirmPreference -eq 'None') {$CMDlet_RemovePerms += " -Confirm:`$false"} + If($FMPobj.Deny) {$CMDlet_RemovePerms += " -Deny"} + Invoke-Expression $CMDlet_RemovePerms + } If(($?)-and($WhatIfPreference -ne $True)){