I know the possibility to add users to the exceptionlist in lockdownmode $HostAccessManager.UpdateLockdownExceptions($accountName) .
.is there a possibility to remove the user by powercli
The update procedure accepts the $null argument. "$HostAccessManager.UpdateLockdownExceptions($null)" worked for me.
For those following the VMware STIG, I am adding some tags for Google...
V-63175, ESXI-06-000003, SV-77665r1_rule