I managed to go forward in this up to the clean up point where it asked to run a cmdlt to clear some permission which is in raw format Remove-ADPermission "dc=<Domain>" -user "<RootDomain>\Exchange Servers" -AccessRights WriteDACL -InheritedObjectType Group can someone give me an example Thanks