Skip to content

Latest commit

 

History

History
37 lines (28 loc) · 3.57 KB

Reset_Folder_Permissions_recursive_BULK.md

File metadata and controls

37 lines (28 loc) · 3.57 KB
Raw

Office 365 Reset mailbox folder permissions

The script enumerates the default and user-created folders for one or more mailboxes and removes any permissions on them, effectively "resetting" the folder-level permissions of the mailbox. The following parameters are supported:

  • Mailbox: used to designate the mailbox on which permissions will be adjusted. Any valid Exchange mailbox identifier can be specified. Multiple mailboxes can be specified in a comma-separated list or array. You can also use the Identity parameter as alias.
  • WhatIf: used to run the script in a “simulation” mode, without making any actual changes. Works the same way as with other Exchange cmdlets.
  • Verbose: used to force the script to provide additional details on the cmdlet progress. Useful when troubleshooting issues.
  • Quiet: used to suppress output to the console. By default, each added/changed permission entry will be displayed in the console, apart from saving it to the CSV file.

As the full list of mailboxes and their folders needs to be cycled in order to reset the permissions, the script will use Invoke-Command in order to get a minimum set of attributes returned. In case you run into throttling or connectivity errors, consider adjusting the artificial delay added on line 139.

To further reduce the time to execute the script, consider limiting the list of folders to only those you are interested in. This can be achieved by editing the $includedfolders and $excludedfolders arrays:

$includedfolders = @("Root","Inbox","Calendar", "Contacts", "DeletedItems", "Drafts", "JunkEmail", "Journal", "Notes", "Outbox", "SentItems", "Tasks", "CommunicatorHistory", "Clutter", "Archive") 
 
$excludedfolders = @("News Feed","Quick Step Settings","Social Activity Notifications","Suggested Contacts", "SearchDiscoveryHoldsUnindexedItemFolder", "SearchDiscoveryHoldsFolder","Calendar Logging")

The script does not handle connectivity to Exchange Online, due to the variety of methods now available. If any existing session is detected, it will be used to run the script, otherwise an error will be thrown. Exchange on-premises is also supported, as is running the script in the EMS, but those scenarios are not extensively tested. Do note that you will have to replace line 64 to use the $_.User.ADRecipient property instead of $_.User.RecipientPrincipal, due to the difference in output between ExO and Exchange Server. The script requires PowerShell v3 at minimum.

Here are some example uses of the script. To remove permissions on all folders in a specific mailbox, use:

.\Reset_Folder_Permissions_recursive_BULK.ps1 -Mailbox sharednew

To remove permissions on all folders in multiple mailboxes, use:

.\Reset_Folder_Permissions_recursive_BULK.ps1 -Mailbox mailbox1,mailbox2,mailbox3

You can also directly use the output of Get-Mailbox or Get-User to provide values. When Bulk adding permissions, it's strongly advised to use the -WhatIf switch in order to preview the changes first, as well as the -Verbose switch:

.\Reset_Folder_Permissions_recursive_BULK.ps1 -Mailbox (Get-Mailbox -RecipientTypeDetails RoomMailbox) -WhatIf -Verbose

By default the script outputs the results to a CSV file and also stores them in the $varFolderPermissionsRemoved variable. To suppress the Console output, use the -Quiet switch.

Additional information about the script can be found in the built-in help or in this article.

Questions and feedback are welcome.