I have an AD group that I grant full access to Exchange 2007 mailboxes which works fine. It is intended to allow admins access to user mailboxes. The problem arises when I remove someone from the group or remove the group from a mailbox. If a user in the group is removed, or if the group is removed from their mailbox, they lose access. They will still be listed as having full access permissions, but don’t. I have tried removing and re-adding them, but the only thing that works is re-adding the security group (or adding them back into the group). Going through the shell or the UI both lists the user as still having full access permissions. Also, this problem does not affect anyone that is not in the security group. Any ideas?