Forum Discussion

Brass Contributor

Oct 08, 2020

Solved

Disable Powershell management for Exchange Online for all users

Hi,

I want to disable Powershell access for all users and Admin except for a single admin (myadmin)

how can i do this, I try doing this using conditional access, but did not find any thing to block Powershell access, I saw only the ActiveSync Client and Browser

Any help

VasilMichev
Oct 08, 2020
For Exchange Online, best use the Client Access Rules functionality: https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/client-access-rules/client-access-rules

5 Replies

Pierfish
Microsoft
Oct 09, 2020
niazstinu you can disable powershell with

Set-User -Identity userToDisable -RemotePowerShellEnabled:$False
- niazstinu
  Brass Contributor
  Oct 17, 2020
  Pierfish
  So Azure Conditional Access wont help in this case. yes ?!
  - Pierfish
    Microsoft
    Oct 19, 2020
    niazstinu not in this case because you can block completely access to Exchange with Conditional Access but you cannot discriminate between OWA and PowerShell for example
VasilMichev
MVP
Oct 08, 2020
For Exchange Online, best use the Client Access Rules functionality: https://docs.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/client-access-rules/client-access-rules
- niazstinu
  Brass Contributor
  Oct 09, 2020
  VasilMichev
  But is this doable using Azure AD Conditional Access or not?!