CmdID / PowerShell / Cmdlets / Remove
Remove-ADPermission
Use the Remove-ADPermission cmdlet to remove permissions from an Active Directory object. Exchange PowerShell reference
From the Exchange PowerShell reference 13 parameters Its page in the reference
Parameters
-IdentityThe Identity parameter specifies the object from which the permission should be removed.-InstanceThe Instance parameter enables you to pass an entire object to the command to be processed.-UserThe User parameter specifies whose permissions are being removed from the Active Directory object.-AccessRightsThe AccessRights parameter specifies the rights that you want to remove from the user on the Active Directory object.-ChildObjectTypesThe ChildObjectTypes parameter specifies what type of object the permission should be removed from.-Confirm, -cfThe Confirm switch specifies whether to show or hide the confirmation prompt.-DenyThe Deny switch specifies that the permissions you're removing are Deny permissions.-DomainControllerThe DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory.-ExtendedRightsThe ExtendedRights parameter specifies the extended rights to remove.-InheritanceTypeThe InheritanceType parameter specifies how permissions are inherited.-InheritedObjectTypeThe InheritedObjectType parameter specifies what kind of object inherits this access control entry (ACE).-PropertiesThe Properties parameter specifies what properties the object contains.-WhatIf, -wiThe WhatIf switch shows what the command does without making any changes.