Commands › Exchange Online

Remove-ClientAccessRule

Exchange Online ExchangeOnlineManagement Remove-*

> [!NOTE] > Client access rules were deprecated for all Exchange Online organizations in September 2025. For more information, see Update on Client Access Rules Deprecation in Exchange Online. This cmdlet is functional only in Exchange Server 2019 or later. Use the Remove-ClientAccessRule cmdlet to remove client access rules. Client access rules help you control access to your organization based on the properties of the connection.

Quick start script

# Remove-ClientAccessRule — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-ClientAccessRule
$before | Format-List

# 3. Make the change (dry run first)
Remove-ClientAccessRule -Identity <ClientAccessRuleIdParameter> -WhatIf
Remove-ClientAccessRule -Identity <ClientAccessRuleIdParameter>

# 4. Verify and diff
$after = Get-ClientAccessRule
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

Remove-ClientAccessRule [-Identity] <ClientAccessRuleIdParameter>
 [-Confirm]
 [-DomainController <Fqdn>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (4)

Parameter	Type	Required	What it controls
-Identity	ClientAccessRuleIdParameter	yes	The Identity parameter specifies the client access rule that you want to remove. You can use any value that uniquely identifies the client access rule. For example:
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-DomainController	Fqdn		The DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory. You identify the domain controller by its fully qualified domain name...
-WhatIf	SwitchParameter		The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.