How can I remove membership from all shared mailboxes of a user when disabled?

Question

https://www.adaxes.com/script-repository/remove-all-group-memberships-for-a-user-account-s33.htm

I found this script but it only removes 365 groups, security groups, and distrobution lists.

We also need to remove the user from all shared mailboxes they are a member of when disabling a user.

Thanks!

Comments

Hello,

Membership in shared mailboxes is determined based on the Full Access and Send As permissions. As such, you just need to revoke the permissions. Unfortunately, there is no easy way to do that and it can only be done using a script. Do we understand correctly that you need to only revoke the permissions from shared mailboxes and none other?

---

Yes the script in my OP works well to remove users from all groups. (365 groups, DL, and security groups) but lacked removal from shared mailboxes.

I was able to re write some code from the above linked script and it works well removing the users from shared mailboxes now as well. We now include it with our disable user action.

I would upload the script but not sure how on the script repository.

Answer 1

Hello,

We currently do not allow posting scripts in our repository. You can post the script here if you like.

Comments

I was actually looking for a script just like this as well for the same scenario. We want to remove any users who have been previously delegated access to shared mailboxes once they are terminated.