I want to do PS remoting over SSL to an Exchange Server 2019:
- Using MS Exchange Server 2019 (ExchangeServer2019-x64-CU11.ISO) on MS Windows Server 2019 (17763.737.190906-2324.rs5_release_svc_refresh_SERVER_EVAL_x64FRE_en-us_1.iso)
Now i want to do powershell remoting to Exchange Server and it should be all secured with a self-signed SSL certificate and no basic authentication allowed.
As basic authentication is insecure and will be deprecated by Microsoft this year and was already removed in MSX O365 what i read.
- PS> SessionOpt = New-PSSessionOption -SkipCACheck:$true -SkipCNCheck:$true -SkipRevocationCheck:$true
PS> Enter-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://<myexchangeserver>/PowerShell/ -Authentication Kerberos -Credential MYEXCHANGE\Administrator -SessionOption $SessionOpt
- PS> SessionOpt = New-PSSessionOption -SkipCACheck:$true -SkipCNCheck:$true -SkipRevocationCheck:$true
PS> Enter-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://<myexchangeserver>/PowerShell/ -Authentication Basic -Credential MYEXCHANGE\Administrator -SessionOption $SessionOpt
- The remote box with PS is not part of the domain, no Windows trusts in place.
So in my opinion kerberos authentication does not work et all ? Correct ?
- Connection via http protocol '-ConnectionUri parameter' is required to use. No other command.
- Basic Authentication is disabled by default in WinRM, so it wont work unless i lighten the security.
Questions i have:
- In 2019 Exchange Server is Kerberos a valid option when the server is not part of the domain ?
- Does Exchange Server 2019 support another authentication method via -ConnectionUri over https (not Basic Authentication) ?
Thank you
