Exchange 2016 - Virtual directory power shell?

C Y
C Y used Ask the Experts™
on
Hi expert,

can anyone explain to me what is the virtual directory "POWERSHELL" for?

We use powershell only when we remote into exchange server. is it possible to disable this?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Gaurav SinghSolutions Architect - DWP

Commented:
Powershell Virtual Directory is being used by Exchange Internal Cmdlets and Exchange also uses its. You cant disable it. If you disable or change anything on it, your EMS will Stop working and will create lot of issues in accessing mailboxes, running Exchange commands etc.

By the way why do you want to disable it?
NoahHardware Tester and Debugger

Commented:
Hi there! :)

In summary, these virtual directories are essentially what forms the base in Microsoft Exchange so that you are able to use applications and other installations that use web based services. This will include essential services such as Outlook.

I think what you meant was you want to disable Powershell on Windows Server 2016 for clients. You may refer to the following video as a guide.

Reference: https://www.youtube.com/watch?v=hIUYdbUpe5A
C Y

Author

Commented:
Hi all,

Our security department has concern over this powershell virtual directory, and since we only access EMS via remote access to exchange server.

This can be disabled? i'm abit confuse as to what feature the powershell has to do with virtual directory.
OWASP: Forgery and Phishing

Learn the techniques to avoid forgery and phishing attacks and the types of attacks an application or network may face.

Solutions Architect - DWP
Commented:
well as best recommended advise, dont play with Any Virtaul Directory, it will break your Exchange functionality. even connecting to remote you will need this virtual directory.
AlexA lack of information provides a lack of a decent solution.

Commented:
As above, your security team have no idea what it is they are talking about when it comes to exchange. If you mess around with these virtual directories you will cause yourself a massive issue. Leave it alone and if you really want to secure things then ring fence your resources and only open ports that are required for them to work.

Regards
Alex
NoahHardware Tester and Debugger

Commented:
I agree with everyone else. You should never mess with the virtual directories. That's why I suggested, if need be, simply have some group policies to restrict users from doing anything you would be concerned about.
AmitIT Architect
Distinguished Expert 2017

Commented:
Restrict the rights at user level. Until permission are restricted, there is no security issue. As other said, don't mess with VD.
Jeff GloverSr. Systems Administrator

Commented:
Every person here is saying the same thing. You need this Virtual Directory. Do not mess with it. If you remove it, ALL admin tasks (and some you never see) will Fail. The EAC is just a User friendly web interface to select tasks that perform Powershell commands behind the scene whenever you make a selection.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial