You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: exchange/docs-conceptual/app-only-auth-powershell-v2.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,7 +14,7 @@ ms.custom:
14
14
ms.assetid:
15
15
search.appverid: MET150
16
16
ROBOTS: NOINDEX, NOFOLLOW
17
-
description: "Learn about using the Exchange Online V2 module in scripts and other long-running tasks with Modern Authentication and app-only authentication."
17
+
description: "Learn about using the Exchange Online V2 module in scripts and other long-running tasks with modern authentication and app-only authentication."
18
18
---
19
19
20
20
# App-only authentication for unattended scripts in the EXO V2 module
@@ -34,7 +34,7 @@ To update from an earlier version of the of the EXO V2 module, run the following
Auditing and reporting scenarios in Exchange Online often involve scripts that run unattended. In most cases, these unattended scripts access Exchange Online PowerShell using Basic authentication (a username and password). Even when the connection to Exchange Online PowerShell uses Modern authentication, the credentials are stored in a local file or a secret vault that's access at run-time.
37
+
Auditing and reporting scenarios in Exchange Online often involve scripts that run unattended. In most cases, these unattended scripts access Exchange Online PowerShell using Basic authentication (a username and password). Even when the connection to Exchange Online PowerShell uses modern authentication, the credentials are stored in a local file or a secret vault that's accessed at run-time.
38
38
39
39
Because storing user credentials locally is not a safe practice, we're releasing this feature to support authentication for unattended scripts (automation) scenarios using AzureAD applications and self-signed certificates.
40
40
@@ -72,13 +72,13 @@ The following examples show how to use the Exchange Online PowerShell V2 module
72
72
73
73
## How does it work?
74
74
75
-
The EXO V2 module uses the Active Directory Authentication Library to fetch an app-only token using the application Id, tenant Id & certificate thumbprint. The application object provisioned inside Azure AD has a Directory Role assigned to it, which is returned in the access token. Exchange Online configures the session RBAC using the directory role information that's available in the token.
75
+
The EXO V2 module uses the Active Directory Authentication Library to fetch an app-only token using the application Id, tenant Id (organization), and certificate thumbprint. The application object provisioned inside Azure AD has a Directory Role assigned to it, which is returned in the access token. Exchange Online configures the session RBAC using the directory role information that's available in the token.
76
76
77
77
## Setup app-only authentication
78
78
79
79
An initial onboarding is required for authentication using application objects. Application and service principal are used interchangeably, but an application is like a class object while a service principal is like an instance of the class. You can learn more about this at [Application and service principal objects in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/develop/app-objects-and-service-principals).
80
80
81
-
For a detailed visual flow bout creating applications in Azure AD, see <https://aka.ms/azuread-app>.
81
+
For a detailed visual flow about creating applications in Azure AD, see <https://aka.ms/azuread-app>.
82
82
83
83
1. Register the application in Azure AD at <https://portal.azure.com>.
Copy file name to clipboardExpand all lines: exchange/docs-conceptual/connect-to-exchange-online-powershell.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -21,7 +21,7 @@ Exchange Online PowerShell allows you to manage your Exchange Online settings fr
21
21
22
22
> [!NOTE]
23
23
>
24
-
> - We're eventually going to [disable Basic authentication in Exchange Online](https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-and-exchange-online-april-2020-update/ba-p/1275508), and the connection method described in this topic uses Basic authentication. We recommend that you use the [Exchange Online PowerShell V2 module](exchange-online-powershell-v2.md) to connect to Exchange Online PowerShell, because it uses Modern authentication in all scenarios.
24
+
> - We're eventually going to [disable Basic authentication in Exchange Online](https://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-and-exchange-online-april-2020-update/ba-p/1275508), and the connection method described in this topic uses Basic authentication. We recommend that you use the [Exchange Online PowerShell V2 module](exchange-online-powershell-v2.md) to connect to Exchange Online PowerShell, because it uses modern authentication in all scenarios.
25
25
>
26
26
> - The Exchange Online PowerShell V2 module works with multi-factor authentication (MFA). For MFA connection instructions using the older Exchange Online Remote PowerShell Module, see [Connect to Exchange Online PowerShell using multi-factor authentication](mfa-connect-to-exchange-online-powershell.md).
27
27
>
@@ -64,7 +64,7 @@ Exchange Online PowerShell allows you to manage your Exchange Online settings fr
64
64
To verify that Basic authentication is enabled for WinRM, run this command **in a Command Prompt**:
65
65
66
66
> [!NOTE]
67
-
> You must temporarily enable WinRM to run the following commands. You can enable it by running "winrm quickconfig".
67
+
> You must temporarily enable WinRM to run the following commands. You can enable it by running the command: `winrm quickconfig`.
68
68
69
69
```dos
70
70
winrm get winrm/config/client/auth
@@ -105,11 +105,11 @@ Exchange Online PowerShell allows you to manage your Exchange Online settings fr
105
105
106
106
- For Office 365 Germany, use the _ConnectionUri_ value: `https://outlook.office.de/powershell-liveid/`
107
107
108
-
- For Microsoft 365 Government Community Cloud High (GCC High), use the _ConnectionUri_ value: `https://outlook.office365.us/powershell-liveid/`
108
+
- For Microsoft 365 GCC High, use the _ConnectionUri_ value: `https://outlook.office365.us/powershell-liveid/`
109
109
110
110
- For Microsoft 365 DoD, use the _ConnectionUri_ value: `https://webmail.apps.mil/powershell-liveid`
111
111
112
-
- If you're behind a proxy server, run this command first: `$ProxyOptions = New-PSSessionOption -ProxyAccessType <Value>`, where the _ProxyAccessType_ value is `IEConfig`, `WinHttpConfig`, or `AutoDetect`.
112
+
- If you're behind a proxy server, run this command first: `$ProxyOptions = New-PSSessionOption -ProxyAccessType <Value>`, where \<Value\> is `IEConfig`, `WinHttpConfig`, or `AutoDetect`.
113
113
114
114
Then, add the following parameter and value to the end of the $Session = ... command: `-SessionOption $ProxyOptions`.
Copy file name to clipboardExpand all lines: exchange/docs-conceptual/connect-to-scc-powershell.md
+4-2Lines changed: 4 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -69,7 +69,7 @@ Security & Compliance Center PowerShell allows you to manage your Security & Com
69
69
To verify that Basic authentication is enabled for WinRM, run this command **in a Command Prompt**:
70
70
71
71
> [!NOTE]
72
-
> You must temporarily enable WinRM to run the following commands. You can enable it by running "winrm quickconfig".
72
+
> You must temporarily enable WinRM to run the following commands. You can enable it by running the command: `winrm quickconfig`.
73
73
74
74
```dos
75
75
winrm get winrm/config/client/auth
@@ -105,7 +105,9 @@ Security & Compliance Center PowerShell allows you to manage your Security & Com
105
105
106
106
- For Office 365 Germany, use the _ConnectionUri_ value: `https://ps.compliance.protection.outlook.de/powershell-liveid/`.
107
107
108
-
- For Microsoft 365 Government Community Cloud High (GCC High), use the _ConnectionUri_ value: `https://ps.compliance.protection.office365.us/powershell-liveid/`.
108
+
- For Microsoft 365 GCC High, use the _ConnectionUri_ value: `https://ps.compliance.protection.office365.us/powershell-liveid/`.
109
+
110
+
- For Microsoft 365 DoD, use the _ConnectionUri_ value: `https://l5.ps.compliance.protection.office365.us/powershell-liveid/`.
Copy file name to clipboardExpand all lines: exchange/docs-conceptual/exchange-online-powershell-v2.md
+9-23Lines changed: 9 additions & 23 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,5 @@
1
1
---
2
-
title: Exchange Online PowerShell with Modern Authentication using V2 Module
2
+
title: Exchange Online PowerShell with modern authentication using V2 Module
3
3
ms.author: chrisda
4
4
author: chrisda
5
5
manager: dansimp
@@ -13,10 +13,10 @@ ms.collection: Strat_EX_Admin
13
13
ms.custom:
14
14
ms.assetid:
15
15
search.appverid: MET150
16
-
description: "Learn how to install and use the Exchange Online PowerShell V2 module to connect to Exchange Online PowerShell with Modern Authentication."
16
+
description: "Learn how to install and use the Exchange Online PowerShell V2 module to connect to Exchange Online PowerShell with modern authentication."
17
17
---
18
18
19
-
# Use the Exchange Online PowerShell with Modern Authentication using V2 module
19
+
# Use the Exchange Online PowerShell with modern authentication using V2 module
20
20
21
21
The Exchange Online PowerShell V2 module (abbreviated as the EXO V2 module) enables admins to connect to their Exchange Online environment in Microsoft 365 to retrieve data, create new objects, update existing objects, remove objects as well as configure Exchange Online and its features.
22
22
@@ -32,7 +32,7 @@ Connect-ExchangeOnline -EnableErrorReporting -LogDirectoryPath <Path to store lo
32
32
33
33
The Exchange Online PowerShell V2 module contains a small set of new cmdlets that are optimized for bulk data retrieval scenarios (think: thousands and thousands of objects). Until you create a session to connect to your Exchange Online organization, you'll only see these new cmdlets in the module. After you connect to your Exchange Online organization, you'll see all of the older remote PowerShell cmdlets.
34
34
35
-
The EXO V2 module use Modern authentication for all cmdlets. You can't use Basic authentication in the EXO V2 module; however, you still need to configure the Basic authentication setting in WinRM as described later in this topic.
35
+
The EXO V2 module use modern authentication for all cmdlets. You can't use Basic authentication in the EXO V2 module; however, you still need to configure the Basic authentication setting in WinRM as described later in this topic.
36
36
37
37
The new cmdlets in the EXO V2 module are meant to replace their older, less efficient equivalents. However, the original cmdlets are still available in the EXO V2 module for backwards compatibility **after** you create a session to connect to your Exchange Online organization.
38
38
@@ -67,17 +67,11 @@ You can download the EXO V2 module from the PowerShell gallery [here](https://ww
67
67
- You can use the following versions of Windows:
68
68
69
69
- Windows 10
70
-
71
70
- Windows 8.1
72
-
73
71
- Windows Server 2019
74
-
75
72
- Windows Server 2016
76
-
77
73
- Windows Server 2012 or Windows Server 2012 R2
78
-
79
74
- Windows 7 Service Pack 1 (SP1)<sup>*</sup>
80
-
81
75
- Windows Server 2008 R2 SP1<sup>*</sup>
82
76
83
77
<sup>\*</sup> This version of windows has reached end of support, and is now only supported when running in Azure virtual machines. To use this version of Windows, you need to install the Microsoft .NET Framework 4.5 or later and then the Windows Management Framework 5.1. For more information, see [Windows Management Framework 5.1](https://aka.ms/wmf5download).
@@ -87,7 +81,7 @@ You can download the EXO V2 module from the PowerShell gallery [here](https://ww
87
81
To verify that Basic authentication is enabled for WinRM, run this command **in a Command Prompt**:
88
82
89
83
> [!NOTE]
90
-
> You must temporarily enable WinRM to run the following commands. You can enable it by running "winrm quickconfig".
84
+
> You must temporarily enable WinRM to run the following commands. You can enable it by running the command: `winrm quickconfig`.
We've also included a Minimum property set (or *minset*) in the available property sets that includes a bare minimum set of properties for the cmdlet output.
243
237
244
-
- If you don't use the *PropertySets* or *Properties* parameters, you automatically get the properties that are included in the Minimum property set.
238
+
- If you don't use the *PropertySets* or *Properties* parameters, you automatically get the properties in the Minimum property set.
245
239
246
-
- If you use the *PropertySets* or *Properties* parameters, you you only get the specified properties.
240
+
- If you use the *PropertySets* or *Properties* parameters, you get the specified properties**and** the properties in the Minimum property set.
247
241
248
242
Either way, the cmdlet output will contain far fewer properties, and the time it takes to return those results will be much faster.
249
243
@@ -257,16 +251,8 @@ In contrast, the same **Get-Mailbox** cmdlet would return at least 230 propertie
257
251
258
252
For details about the property sets that are available in EXO V2 module cmdlets, see [Property sets in Exchange Online PowerShell V2 cmdlets](cmdlet-property-sets.md) or the individual EXO V2 module cmdlet reference topics.
259
253
260
-
EXO cmdlets also provide a way to retrieve all properties for an object by using the _ProperySets_ parameter with the value `All`.
261
-
262
-
The following example returns all properties for the 10 mailboxes:
263
-
264
-
```PowerShell
265
-
Get-EXOMailbox -ResultSize 10 -PropertySets All
266
-
```
267
-
268
254
> [!NOTE]
269
-
> We highly discourage using the _PropertySets_ parameter with the value `All`because it slows down the cmdlet and reduces reliability. Always use the _PropertySets_ and _Properties_ parameters to retrieve only the required properties.
255
+
> Although you can retrieve all properties for an object by using the _PropertySets_ parameter with the value All, we highly discourage this because it slows down the cmdlet and reduces reliability. Always use the _PropertySets_ and _Properties_ parameters to retrieve the minimum number of properties.
270
256
271
257
For more information about filtering in the EXO V2 module, see [Filters in the Exchange Online V2 module](filters-v2.md).
272
258
@@ -325,7 +311,7 @@ For more information about filtering in the EXO V2 module, see [Filters in the E
325
311
326
312
- Use EXO V2 cmdlets even if WinRM Basic Auth is disabled on client machine. Note that remote PowerShell cmdlets require WinRM Basic Auth, and they won't be available if it's disabled.
327
313
328
-
-Identity parameter for V2 cmdlets now supports Name and Alias as well. Note that using Alias or Name slows down the performance of V2 cmdlets, so we don't recommend using them.
314
+
- Identity parameter for V2 cmdlets now supports Name and Alias as well. Note that using Alias or Name slows down the performance of V2 cmdlets, so we don't recommend using them.
329
315
330
316
- Fixed issue where the data type of attributes returned by V2 cmdlet was different from remote PowerShell cmdlets. We still have few attributes which have differing data types, and we plan to handle them in coming months.
Copy file name to clipboardExpand all lines: exchange/docs-conceptual/filters-v2.md
+2Lines changed: 2 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -51,6 +51,8 @@ The following operators are fully supported for all string formats in the EXO V2
51
51
- -not
52
52
- -lt
53
53
- -gt
54
+
- -like
55
+
- -notlike
54
56
55
57
The -like and -notlike operators are limited in using wildcards (*). Specifically, you can only use wildcards at the beginning of a string value, at the end of a string value, or both.
0 commit comments