diff --git a/Public/Invoke-GPOZaurrPermission.ps1 b/Public/Invoke-GPOZaurrPermission.ps1
index 24bb30a..5a6c291 100644
--- a/Public/Invoke-GPOZaurrPermission.ps1
+++ b/Public/Invoke-GPOZaurrPermission.ps1
@@ -195,7 +195,7 @@
                 } elseif ($Rule.Action -eq 'Remove') {
                     $GPOPermissions = Get-GPOZaurrPermission -GPOGuid $GPO.GUID -IncludeDomains $GPO.DomainName -IncludePermissionType $Rule.IncludePermissionType -ExcludePermissionType $Rule.ExcludePermissionType -Type $Rule.Type -IncludeGPOObject -PermitType $Rule.PermitType -Principal $Rule.Principal -PrincipalType $Rule.PrincipalType -ExcludePrincipal $Rule.ExcludePrincipal -ExcludePrincipalType $Rule.ExcludePrincipalType -ADAdministrativeGroups $ADAdministrativeGroups
                     foreach ($Permission in $GPOPermissions) {
-                        Remove-PrivPermission -Principal $Permission.Sid -PrincipalType Sid -GPOPermission $Permission -IncludePermissionType $Permission.Permission
+                        Remove-PrivPermission -Principal $Permission.PrincipalSid -PrincipalType Sid -GPOPermission $Permission -IncludePermissionType $Permission.Permission
                     }
                 } elseif ($Rule.Action -eq 'Add') {
                     # Initially we were askng for same domain as user requested, but in fact we need to apply GPODomain as it can be linked to different domain
diff --git a/README.md b/README.md
index 42c3abd..9b1fb77 100644
--- a/README.md
+++ b/README.md
@@ -62,6 +62,7 @@ That's it. Whenever there's a new version, you run the command, and you can enjo
     - [x] Type `GPOList` - added more data, added Optimization Step
   - [x] Added `Set-GPOZaurrStatus`
   - [x] Added `Optimize-GPOZaurr`
+  - [x] Fixed `Invoke-GPOZaurrPermission` which would not remove permission due to internal changes earlier on
 - 0.0.95 - 04.12.2020
   - [x] Fix for too big int - [#4](https://github.com/EvotecIT/GPOZaurr/issues/4) - tnx neztach
   - [x] Improved `Invoke-GPOZaurr`