Exchange 2019 - PS remoting over SSL without Basic Auth

Occasional Visitor

I want to do PS remoting over SSL to an Exchange Server 2019:

- Using MS Exchange Server 2019 (ExchangeServer2019-x64-CU11.ISO) on MS Windows Server 2019 (17763.737.190906-2324.rs5_release_svc_refresh_SERVER_EVAL_x64FRE_en-us_1.iso)

Now i want to do powershell remoting to Exchange Server and it should be all secured with a self-signed SSL certificate and no basic authentication allowed.
As basic authentication is insecure and will be deprecated by Microsoft this year and was already removed in MSX O365 what i read.


- PS> SessionOpt = New-PSSessionOption -SkipCACheck:$true -SkipCNCheck:$true -SkipRevocationCheck:$true
  PS> Enter-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://<myexchangeserver>/PowerShell/ -Authentication Kerberos -Credential MYEXCHANGE\Administrator -SessionOption $SessionOpt

- PS> SessionOpt = New-PSSessionOption -SkipCACheck:$true -SkipCNCheck:$true -SkipRevocationCheck:$true
  PS> Enter-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://<myexchangeserver>/PowerShell/ -Authentication Basic -Credential MYEXCHANGE\Administrator -SessionOption $SessionOpt


- The remote box with PS is not part of the domain, no Windows trusts in place.
So in my opinion kerberos authentication does not work et all ? Correct ?


- Connection via http protocol '-ConnectionUri parameter' is required to use. No other command.

- Basic Authentication is disabled by default in WinRM, so it wont work unless i lighten the security.


Questions i have:
- In 2019 Exchange Server is Kerberos a valid option when the server is not part of the domain ?


- Does Exchange Server 2019 support another authentication method via -ConnectionUri over https (not Basic Authentication) ?


Thank you

0 Replies