Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Template to deactivate OWA

Hello,

i want to deactivate OWA for a user with a template and a powershell script:

The creation of the openorder template and the powershell script was no problem, but the script does not run.

Here the script i use:

param(
[parameter(Mandatory=$true)]
# Übergebene Benutzer ID
$Benutzer
)

$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://our Exchange server/PowerShell/ -Authentication Kerberos
Import-PSSession $Session
Sleep 5

Set-CASMailbox -identity $Benutzer -owaenabled $false

Remove-PSSession $Session

The script runs in the context of a user who has exchange admin rights
In the attached log i replaced the original name through OurDomain\OurUser

As you can see in the log, the script does not run

If I run the script in a powershell, it works

ARM.log

Find more posts tagged with

Accepted answers

All comments

bjoern-cusatum

Did you check C:\ProgramData\protected-networks.com\8MAN\log\script\Disable-OWA_20200528055754095.4739.log for the script logs?

ARM logs every script execution seperately.

armexpert

Hello GregorPiron,

unfortunately there is no way to run an exchange script via ARM Scripting with Authentication Kerberos.
Reason seams to be that the PowerShell is running in service context.
I tried all forms and like you said they are working in user mode but never in that special mode.

We are helping out our customer with crypt the password in file and take it from there and to use the credential method.
There are several ideas on the web for example her "https://www.altaro.com/msp-dojo/encrypt-password-powershell/".

But soon as you find a solution other than to use credential then I would appreciate if you would share it.

best regards

Mike

8paul

Have you configured an account for the script execution? If not it will be executed in the system context which obviously does not work for authentication.

To set an account for the script go the ARM Config -> Scripting. In the entry that you have previously configured for your script scroll to the right hand side and click on <optional> to enter your credentials:

once that is done the script should run in the user context