Link to home
Start Free TrialLog in
Avatar of sara2000
sara2000

asked on

Exchange management shell in PS.

I want to give a permission to user to execute Exchange Management Shell from his PC. without installing Exchange managemnet tools.
I think he has to import Exchange management  modules to his PS session.
What king of permission that users has to have on Exchange to execute the permission ?
Avatar of Jeremy Weisinger
Jeremy Weisinger

As long as the user is in a Management Group for Exchange, he or she should be able to connect. Otherwise, you can enable the user by running the powershell command  Set-User "<name>" -RemotePowerShellEnabled $true.   I connect remotely 90% of  the time. I have a script I run to connect. I just saved it as a .ps1 file

$s = New-PSSession –ConfigurationName Microsoft.Exchange –ConnectionUri http://<fqdn of exchange server>/powershell -Authentication Kerberos
Import-PSSession $s
Avatar of sara2000

ASKER

Where do we issue the below command at Exchange server?
Set-User "<name>" -RemotePowerShellEnabled $true
In the Exchange management shell. But if the user is not part of any management group, why give them access? By default, all user accounts have access to remote PowerShell. However, to actually use remote PowerShell to connect to an Exchange server, the user needs to be a member of a management role group, or be directly assigned a management role that enables the user to run Exchange cmdlets.
Jeff Thank you for the info. I just want that user to run all Ge- permission just to monitor.
Which role group to be that user?
ASKER CERTIFIED SOLUTION
Avatar of Jeff Glover
Jeff Glover
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Add the user to the "View-Only Organization Management" group, and this will allow accomplish what you are after. They will only be able to run "get" cmdlets for viewing info and not setting and making changes.