Several months ago we added a feature to the Microsoft 365 Roadmap which generated a lot of interest. The feature was named Disable Basic Authentication in Exchange Online using Authentication Polici...
Updated Jul 01, 2019
Version 2.0
Blog Post
3 MIN READ
Disabling Basic authentication in Exchange Online – Public Preview Now Available
Hi Greg,
Do you have this switch in your authentication policy set to true?
-AllowBasicAuthPowershell
We use both modern and basic for specific modules to call:
Import-Module MsOnline
Connect-MsolService -Credential $credential
$session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "https://outlook.office365.com/powershell-liveid/" -Credential $cred -Authentication Basic -AllowRedirection
Import-PSSession $session
Hi Kerry,
We don't have an authenticationpolicy created at this time, get-authenticationpolicy returns no data. We are blocking basic authentication at the OS level for Windows 10 computers by setting Allow basic authenication to disabled in the GPO Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Remote Management (WinRM)\WinRM Service.
Here is what I use to connect to Exchange Online via powershell:
Import-Module MSOnline
$O365Cred = Get-Credential
$O365Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $O365Cred -Authentication Basic -AllowRedirection
Import-PSSession $O365Session
Connect-MsolService –Credential $O365Cred
Connect-AzureAD –Credential $O365Cred
-Geoff
- Hey Geoff,
We had a similar scenario and found that we needed to use the EXO PS module. It allowed us to have MFA w/modern auth as we are disabling basic auth from our federation point to O365.
https://docs.microsoft.com/en-us/powershell/exchange/exchange-online/connect-to-exchange-online-powershell/mfa-connect-to-exchange-online-powershell?view=exchange-ps
Hope that helps.