New-RoleAssignmentPolicy "No Distribution Group Management"
$Roles = Get-ManagementRoleAssignment -RoleAssignee "Default Role Assignment Policy"
$Roles | Where {$_.Role -NotLike "*Distribution*" } | New-ManagementRoleAssignment -Policy "No Distribution Group Management"
Set-RoleAssignmentPolicy "No Distribution Group Management" -IsDefault
Set-RoleAssignmentPolicy "Default Role Assignment Policy" -Name "Old_Default Role Assignment Policy"
转载于:https://blog.51cto.com/357355/742872