User receiving appointments acceptances from a shared mailbox calendar without having access

%3CLINGO-SUB%20id%3D%22lingo-sub-2828923%22%20slang%3D%22en-US%22%3EUser%20receiving%20appointments%20from%20a%20shared%20mailbox%20calendar%20without%20having%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2828923%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20everyone%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20a%20user%20who%20was%20once%20a%20member%20of%20a%20shared%20mailbox.%20He%20had%20full%20access%20to%20this%20mailbox%20and%20its%20calendar.%20Lately%20he%20has%20been%20removed%20because%20he%20doesn't%20need%20access%20to%20the%20shared%20mailbox%20any%20longer.%20If%20I%20check%20the%20mailboxpermission%20and%20the%20mailboxfolderpermission%20with%20PowerShell%2C%20his%20name%20doesn't%20appear%20on%20the%20users'%20list.%20However%2C%20he%20is%20receiving%20all%20the%20appointments'%20acceptances%20from%20that%20shared%20mailbox's%20calendar%20on%20his%20personal%20mailbox.%20It's%20quite%20annoying%20for%20him%2C%20as%20these%20confirmation%20messages%20can%20be%2020-30%20every%20day.%20I%20am%20not%20sure%20where%20to%20look%20to%20avoid%20this%2C%20he%20shouldn't%20receive%20any%20email%20from%20that%20shared%20mailbox.%26nbsp%3B%3C%2FP%3E%3CP%3ECould%20you%20please%20advise%20on%20this%20matter%3F%3C%2FP%3E%3CP%3EMany%20thanks%20in%20advance%20for%20your%20help!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFrancesco%26nbsp%3B%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2828923%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%20Online%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOutlook%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2829942%22%20slang%3D%22en-US%22%3ERe%3A%20User%20receiving%20appointments%20acceptances%20from%20a%20shared%20mailbox%20calendar%20without%20having%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2829942%22%20slang%3D%22en-US%22%3EHe's%20probably%20still%20listed%20as%20delegate%2C%20check%20via%20Get-CalendarProcessing%20and%20Get-MailboxFolderPermission%20on%20the%20Calendar%20folder.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2830194%22%20slang%3D%22en-US%22%3ERe%3A%20User%20receiving%20appointments%20acceptances%20from%20a%20shared%20mailbox%20calendar%20without%20having%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2830194%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20thanks%20for%20your%20reply.%3C%2FP%3E%3CP%3EI%20have%20already%20checked%20the%20MailboxFolderPermission%20on%20the%20Calendar%20folder%20and%20this%20person%20doesn't%20appear%20in%20the%20list%20(there%20are%20only%20the%20Default%20and%20the%20Anonymous%20users).%3CBR%20%2F%3EI%20tried%20with%20the%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3EGet-CalendarProcessing%20-Identity%20%3CSHAREDMAILBOXNAME%3E%20%7C%20Format-List%3C%2FSHAREDMAILBOXNAME%3E%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3E%26nbsp%3Bbut%20couldn't%20find%20any%20information%20about%20delegates.%20I%20noticed%20that%20there%20is%20a%20property%20called%20%22ResourceDelegates%22%2C%20but%20if%20I%20run%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3E(Get-CalendarProcessing%20-Identity%20%3CSHAREDMAILBOXNAME%3E).ResourceDelegates%3C%2FSHAREDMAILBOXNAME%3E%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3EI%20don't%20get%20any%20results.%3C%2FP%3E%3CP%3EI%20also%20tried%20the%20new%20switch%20parameter%20%22%3CEM%3EResetDelegateUserCollection%22%3C%2FEM%3E%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3ERemove-MailboxFolderPermission%20-Identity%20%22%3CSHAREDMAILBOXNAME%3E%3A%5CCalendar%22%20-ResetDelegateUserCollection%3C%2FSHAREDMAILBOXNAME%3E%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3Ebut%20it%20didn't%20work%2C%20the%20user%20is%20still%20receiving%20the%20appointments%20acceptances.%3C%2FP%3E%3CP%3EIt%20looks%20like%20his%20name%20is%20hidden%20somewhere%20but%20I%20can't%20find%20it.%20I%20checked%20also%20the%20Exchange%20Online%20Admin%20Center%20but%20to%20no%20avail.%3C%2FP%3E%3CP%3EAny%20other%20ideas%3F%3C%2FP%3E%3CP%3EMany%20thanks%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFrancesco%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2831295%22%20slang%3D%22en-US%22%3ERe%3A%20User%20receiving%20appointments%20acceptances%20from%20a%20shared%20mailbox%20calendar%20without%20having%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2831295%22%20slang%3D%22en-US%22%3ERun%20a%20message%20trace%20against%20one%20of%20the%20invites%2C%20then%20look%20at%20the%20message%20trace%20details%2C%20they%20should%20give%20you%20a%20clue%20as%20to%20what's%20happening%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2FExchange%2Fmonitoring%2Ftrace-an-email-message%2Fmessage-trace-modern-eac%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2FExchange%2Fmonitoring%2Ftrace-an-email-message%2Fmessage-trace-modern-eac%3C%2FA%3E%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E
Contributor

Hello everyone,

 

We have a user who was once a member of a shared mailbox. He had full access to this mailbox and its calendar. Lately he has been removed because he doesn't need access to the shared mailbox any longer. If I check the mailboxpermission and the mailboxfolderpermission with PowerShell, his name doesn't appear on the users' list. However, he is receiving all the appointments' acceptances from that shared mailbox's calendar on his personal mailbox. It's quite annoying for him, as these confirmation messages can be 20-30 every day. I am not sure where to look to avoid this, he shouldn't receive any email from that shared mailbox. 

Could you please advise on this matter?

Many thanks in advance for your help!

 

Francesco   

8 Replies
He's probably still listed as delegate, check via Get-CalendarProcessing and Get-MailboxFolderPermission on the Calendar folder.

Hi @Vasil Michev

 

Many thanks for your reply.

I have already checked the MailboxFolderPermission on the Calendar folder and this person doesn't appear in the list (there are only the Default and the Anonymous users).
I tried with the

Get-CalendarProcessing -Identity <sharedmailboxname> | Format-List

 but couldn't find any information about delegates. I noticed that there is a property called "ResourceDelegates", but if I run

(Get-CalendarProcessing -Identity <sharedmailboxname>).ResourceDelegates

I don't get any results.

I also tried the new switch parameter "ResetDelegateUserCollection"

Remove-MailboxFolderPermission -Identity "<sharedmailboxname>:\Calendar" -ResetDelegateUserCollection

but it didn't work, the user is still receiving the appointments acceptances.

It looks like his name is hidden somewhere but I can't find it. I checked also the Exchange Online Admin Center but to no avail.

Any other ideas?

Many thanks

 

Francesco

Run a message trace against one of the invites, then look at the message trace details, they should give you a clue as to what's happening: https://docs.microsoft.com/en-us/Exchange/monitoring/trace-an-email-message/message-trace-modern-eac
In an ideal situation, if the user is not added as a delegate to the shared mailbox he/she should not be receiving the updates.

If the user is still receiving the updates this could be because of a corrupt rule. I will recommend you to first take a backup of all the rules and list of delegates.

Using MFCMAPI Go to >> Root Container >> Top of Information Store >> Inbox.
Right click “Inbox” > “Open Tables” > "Open Rules Table" and check for any rules with blank name where the value of PR_RULE_PROVIDER is "SCHEDULE+ EMS Interface" and delete it

Once done, send a test invite to the shared mailbox and check if the impacted user is still receiving a notification. Let me know if it works

Hi @Vasil Michev,

 

I run the message trace against one of the invites (extended report), a csv file has been generated but I am not sure how to "read" all those information. I have a list of events, should I focus on the "deliver" event? I have many fields in the report, I have copied just a few below (removing IDs). Is there something in particular that I should check (server_hostname, connector_id, internal_message_id, reference, message_info, custom_data)? I also run the "Get-InboxRule" on the mailbox to check if there were some rules set, but I don't get any results. 

Many thanks in advance

 

source_contextsourceevent_idrecipient_statustotal_bytes
 RESOLVERRECIPIENTINFOUserMailbox.Forwardable.Resolver.CreateRecipientItems.4026782
<number>;2021-10-08T13:27:38.234Z;10SMTPRECEIVE 26782
 MAILBOXRULERECEIVETo25625
<number>;2021-10-08T13:34:35.617Z;ClientSubmitTime:2021-10-08T13:34:25.000ZSTOREDRIVERDELIVER 34820
Mailbox Rules AgentAGENTSUBMIT 25625
CatContentConversionAGENTAGENTINFO 28685

 

Hi @surajbudhani,

 

Thank you for your suggestion. I never used MFCMAPI, do I need to have full access to this mailbox to check the "rules table"?

Is this something you can check also with Powershell?

I will have a look at that and get back to you.

Many thanks!

Francesco 

@fstorer 

You wont be able to check this using PowerShell. You will have to configure the shared mailbox in Outlook online mode with full access permission and use MFCMAPI to check this. I have shared the download link in the previous reply.

On MFCMAPI >> Click on Tools >> Options >> Make sure the following two options are checked

Screenshot 2021-10-11 162257.jpg

 

After that:
On MFCMAPI Click on Session >> Login >> Select the profile >>Double Click on the Profile >> Root Container >> Top of Information Store >> Inbox.
Right click “Inbox” > “Open Tables” > "Open Rules Table" and check for any rules with blank name where the value of PR_RULE_PROVIDER is "SCHEDULE+ EMS Interface" and delete it

Once done, send a test invite to the shared mailbox and check if the impacted user is still receiving a notification. Let me know if it works.

@surajbudhani 

 

So I need to create a different profile in outlook just for the shared mailbox and also assign a password in order to access it?