List of VSA permissions - Enterprise Vault 9.0.1

There are a number of articles (a few below, a search turns up lots more) that help show how to add permissions both with the script and manually.  Also the EV documentation contains a section 'Microsoft Exchange permissions assigned to the Vault Service account' listing the permissions granted by the script and to which AD container.

http://www.symantec.com/docs/TECH51293

http://www.symantec.com/docs/TECH76700

http://www.symantec.com/docs/HOWTO75036

There is no way to list the existing permissions the EV account has, the procedure to go about this will really depend on how you set them in the first place.  General way to do this is use AdsiEdit and start at the top of the Exchange organization and check the security, if the EV account is listed but not inherited they would have been set manually or via the script.  If set by the script you can re-use the script to remove the permissions it set, if manual you'll need to walk the nodes and remove the permissions where found.

Start with the nodes listed in the EV documentation.

Thanks

Karl