Commands › Exchange Online

Enable-OutlookAnywhere

Exchange Online ExchangeOnlineManagement Enable-*

Enable Outlook Anywhere on a computer running Microsoft Exchange Server 2010 that has the Client Access server role installed. Running the Enable-OutlookAnywhere cmdlet enables the server to accept requests from Microsoft Office Outlook 2007 and Outlook 2003 client computers from the Internet by using Outlook Anywhere, also known as RPC over HTTP.

Quick start script

# Enable-OutlookAnywhere — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-OutlookAnywhere
$before | Format-List

# 3. Make the change (dry run first)
Enable-OutlookAnywhere -ClientAuthenticationMethod <AuthenticationMethod> -DefaultAuthenticationMethod <AuthenticationMethod> -ExternalHostname <Hostname> -WhatIf
Enable-OutlookAnywhere -ClientAuthenticationMethod <AuthenticationMethod> -DefaultAuthenticationMethod <AuthenticationMethod> -ExternalHostname <Hostname>

# 4. Verify and diff
$after = Get-OutlookAnywhere
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax — 2 parameter sets

CustomIdentity

Enable-OutlookAnywhere -ClientAuthenticationMethod <AuthenticationMethod> -ExternalHostname <Hostname> -SSLOffloading <Boolean>
 [-IISAuthenticationMethods <MultiValuedProperty>]
 [-Confirm]
 [-DomainController <Fqdn>]
 [-ExtendedProtectionFlags <MultiValuedProperty>]
 [-ExtendedProtectionSPNList <MultiValuedProperty>]
 [-ExtendedProtectionTokenChecking <ExtendedProtectionTokenCheckingMode>]
 [-Server <ServerIdParameter>]
 [-WhatIf]
 [<CommonParameters>]

DefaultIdentity

Enable-OutlookAnywhere -DefaultAuthenticationMethod <AuthenticationMethod> -ExternalHostname <Hostname> -SSLOffloading <Boolean>
 [-Confirm]
 [-DomainController <Fqdn>]
 [-ExtendedProtectionFlags <MultiValuedProperty>]
 [-ExtendedProtectionSPNList <MultiValuedProperty>]
 [-ExtendedProtectionTokenChecking <ExtendedProtectionTokenCheckingMode>]
 [-Server <ServerIdParameter>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (12)

Parameter	Type	Required	What it controls
-ClientAuthenticationMethod	AuthenticationMethod	yes	The ClientAuthenticationMethod parameter specifies the authentication method that the Autodiscover service provides to the Outlook Anywhere clients to authenticate to the Client Access server. Valid values are:
-DefaultAuthenticationMethod	AuthenticationMethod	yes	The DefaultAuthenticationMethod parameter specifies whether to set both the ClientAuthenticationMethod and IISAuthenticationMethods parameters to the same authentication value.
-ExternalHostname	Hostname	yes	The ExternalHostname parameter specifies the external host name to use in the Outlook profiles for users enabled for Outlook Anywhere.
-SSLOffloading	Boolean	yes	The SSLOffloading parameter specifies whether a network device accepts Transport Layer Security (TLS) connections and decrypts them before proxying the connections to the Outlook Anywhere virtual directory on the...
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-DomainController	Fqdn		The DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory. You identify the domain controller by its fully qualified domain name...
-ExtendedProtectionFlags	MultiValuedProperty		The ExtendedProtectionFlags parameter is used to customize the options you use if you're using Extended Protection for Authentication. The possible values are:
-ExtendedProtectionSPNList	MultiValuedProperty		The ExtendedProtectionSPNList parameter specifies a list of valid Service Principal Names (SPNs) if you're using Extended Protection for Authentication on the specified virtual directory.
-ExtendedProtectionTokenChecking	ExtendedProtectionTokenCheckingMode		The ExtendedProtectionTokenChecking parameter specifies whether Extended Protection for Authentication is used for client connections to the virtual directory. Valid values are:
-IISAuthenticationMethods	MultiValuedProperty		The IISAuthenticationMethods parameter specifies the authentication method that's enabled on the /rpc virtual directory in IIS. You can set the virtual directory to allow Basic authentication or NTLM authentication....
-Server	ServerIdParameter		The Server parameter specifies the Client Access server where you want to run this command. You can use any value that uniquely identifies the server. For example:
-WhatIf	SwitchParameter		The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.