How about disabling the mailbox, creating a new AD account and tying the mailbox to this new account?
Regards, Don Guyer Catholic Health East - Information Technology Enterprise Directory & Messaging Services 3805 West Chester Pike, Suite 100, Newtown Square, Pa 19073 email: [email protected]<mailto:[email protected]> Office: 610.550.3595 | Cell: 610.955.6528 | Fax: 610.271.9440 For immediate assistance, please open a Service Desk ticket or call the helpdesk @ 610-492-3839. [cid:[email protected]] From: [email protected] [mailto:[email protected]] On Behalf Of Russ Patterson Sent: Thursday, August 08, 2013 5:58 PM To: Exchange list Subject: Re: [Exchange] "the ACE doesn't exist on the object" Only on Mailboxes, as far as I know. Plus - mailboxes have been through Exchange 2003, 2007 & 2010, and managed with Outlook as well..... But I don't think GoodBye was an Admin, or even in the IT dept. Are you thinking this is some sort of 'reverse' AdminSDHolder weirdness? :) On Thu, Aug 8, 2013 at 5:50 PM, Michael B. Smith <[email protected]<mailto:[email protected]>> wrote: Did GoodBye ever have any special permissions in your domain? From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Russ Patterson Sent: Thursday, August 8, 2013 5:34 PM To: Exchange list Subject: [Exchange] "the ACE doesn't exist on the object" I have a customer who has a very old, very large (11 gig) mailbox. Let's call it HugeBox. There's a user who has retired & they want him to disappear from Get-MailboxPermission output. Let's call him GoodBye. If you do Get-MailboxPermission, you see his name (FullAccess.) If you do Add-MailboxPermission, with Goodbye as the user, it says' you can't because he's already there. If you do Remove-MailboxPermission, it says you can't because GoodBye's NOT there ("the ACE doesn't exist on the object.") We've tried moving the HugeBox mailbox. We've tried repairing the HugeBox mailbox. As I said, the Powershell cmdlets fail. Goodbye does NOT get listed if you do a Get-ADPermissions. The SIDHistory attribute of GoodBye is <not set.> We did lots more, to the point that we finally even edited the msExchMailboxSecurityDescriptor of HugeBox and removed the SID of GoodBye (along with the other stuff that was surrounded by the same set of parenthesis.) 3-4 hours later, that SID was back..... Any suggestions? I'm also told there's never been a different domain name, in case you suggest trying using OLDDOMAIN\Goodbye in the remove-MailboxPermission cmdlet - no OLDDOMAIN... I'd love some help here! - Thanks for your time! Confidentiality Notice: This e-mail, including any attachments is the property of Catholic Health East and is intended for the sole use of the intended recipient(s). It may contain information that is privileged and confidential. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please delete this message, and reply to the sender regarding the error in a separate email.
<<inline: image001.jpg>>
