Commands › Exchange Online

New-SendConnector

Exchange Online ExchangeOnlineManagement New-*

Create a new Send connector.

Quick start script

# New-SendConnector — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-SendConnector
$before | Format-List

# 3. Make the change (dry run first)
New-SendConnector -Name <String> -AddressSpaces <MultiValuedProperty> -WhatIf
New-SendConnector -Name <String> -AddressSpaces <MultiValuedProperty>

# 4. Verify and diff
$after = Get-SendConnector
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax — 2 parameter sets

AddressSpaces

New-SendConnector -Name <String> -AddressSpaces <MultiValuedProperty>
 [-AuthenticationCredential <PSCredential>]
 [-CloudServicesMailEnabled <Boolean>]
 [-Comment <String>]
 [-Confirm]
 [-ConnectionInactivityTimeOut <EnhancedTimeSpan>]
 [-ConnectorType <TenantConnectorType>]
 [-Custom]
 [-DNSRoutingEnabled <Boolean>]
 [-DomainController <Fqdn>]
 [-DomainSecureEnabled <Boolean>]
 [-Enabled <Boolean>]
 [-ErrorPolicies <ErrorPolicies>]
 [-Force]
 [-ForceHELO <Boolean>]
 [-Fqdn <Fqdn>]
 [-FrontendProxyEnabled <Boolean>]
 [-IgnoreSTARTTLS <Boolean>]
 [-Internal]
 [-Internet]
 [-IsCoexistenceConnector <Boolean>]
 [-IsScopedConnector <Boolean>]
 [-MaxMessageSize <Unlimited>]
 [-Partner]
 [-Port <Int32>]
 [-ProtocolLoggingLevel <ProtocolLoggingLevel>]
 [-RequireOorg <Boolean>]
 [-RequireTLS <Boolean>]
 [-SmartHostAuthMechanism <AuthMechanisms>]
 [-SmartHosts <MultiValuedProperty>]
 [-SmtpMaxMessagesPerConnection <Int32>]
 [-SourceIPAddress <IPAddress>]
 [-SourceTransportServers <MultiValuedProperty>]
 [-TlsAuthLevel <TlsAuthLevel>]
 [-TlsCertificateName <SmtpX509Identifier>]
 [-TlsDomain <SmtpDomainWithSubdomains>]
 [-Usage <UsageType>]
 [-UseExternalDNSServersEnabled <Boolean>]
 [-WhatIf]
 [<CommonParameters>]

LinkedReceiveConnector

New-SendConnector [-Name] <String>
 [-LinkedReceiveConnector <ReceiveConnectorIdParameter>]
 [-AuthenticationCredential <PSCredential>]
 [-Comment <String>]
 [-Confirm]
 [-ConnectionInactivityTimeOut <EnhancedTimeSpan>]
 [-Custom]
 [-DNSRoutingEnabled <Boolean>]
 [-DomainController <Fqdn>]
 [-DomainSecureEnabled <Boolean>]
 [-Enabled <Boolean>]
 [-ErrorPolicies <ErrorPolicies>]
 [-Force]
 [-ForceHELO <Boolean>]
 [-Fqdn <Fqdn>]
 [-IgnoreSTARTTLS <Boolean>]
 [-Internal]
 [-Internet]
 [-IsCoexistenceConnector <Boolean>]
 [-MaxMessageSize <Unlimited>]
 [-Partner]
 [-Port <Int32>]
 [-ProtocolLoggingLevel <ProtocolLoggingLevel>]
 [-RequireOorg <Boolean>]
 [-RequireTLS <Boolean>]
 [-SmartHostAuthMechanism <AuthMechanisms>]
 [-SmartHosts <MultiValuedProperty>]
 [-SmtpMaxMessagesPerConnection <Int32>]
 [-SourceIPAddress <IPAddress>]
 [-SourceTransportServers <MultiValuedProperty>]
 [-TlsAuthLevel <TlsAuthLevel>]
 [-TlsDomain <SmtpDomainWithSubdomains>]
 [-Usage <UsageType>]
 [-UseExternalDNSServersEnabled <Boolean>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (41)

ParameterTypeRequiredWhat it controls
-Name String yes The Name parameter specifies a descriptive name for the connector.
-AddressSpaces MultiValuedProperty yes The AddressSpaces parameter specifies the domain names to which the Send connector routes mail. The complete syntax for entering each address space is: `AddressSpaceType:AddressSpace;AddressSpaceCost`.
-AuthenticationCredential PSCredential The AuthenticationCredential parameter specifies the username and password that's required to use the connector.
-CloudServicesMailEnabled Boolean **Note**: We recommend that you don't use this parameter unless you are directed to do so by Microsoft Customer Service and Support, or by specific product documentation. Instead, use the Hybrid Configuration wizard...
-Comment String The Comment parameter specifies an optional comment. If you specify a value that contains spaces, enclose the value in quotation marks ("), for example: "This is an admin note".
-Confirm SwitchParameter The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-ConnectionInactivityTimeOut EnhancedTimeSpan The ConnectionInactivityTimeOut parameter specifies the maximum time an idle connection can remain open. The default value is ten minutes.
-ConnectorType TenantConnectorType The ConnectorType parameter specifies whether the connector is used in hybrid deployments to send messages to Microsoft 365. Valid values are:
-Custom SwitchParameter The Custom switch specifies the Custom usage type. You don't need to specify a value with this switch.
-DNSRoutingEnabled Boolean The DNSRoutingEnabled parameter specifies whether the Send connector uses Domain Name System (DNS) to route mail. Valid values for this parameter are $true or $false. The default value is $true. If you specify a...
-DomainController Fqdn The DomainController parameter specifies the domain controller that's used by this cmdlet to read data from or write data to Active Directory. You identify the domain controller by its fully qualified domain name...
-DomainSecureEnabled Boolean The DomainSecureEnabled parameter enables mutual Transport Layer Security (TLS) authentication for the domains serviced by the Send connector when set to $true. Mutual TLS authentication functions correctly only if...
-Enabled Boolean The Enabled parameter specifies whether to enable the Send connector to process email messages. Valid values are $true or $false. The default value is $true.
-ErrorPolicies ErrorPolicies The ErrorPolicies parameter specifies how communication errors are treated. Possible values are the following:
-Force SwitchParameter The Force switch hides warning or confirmation messages. You don't need to specify a value with this switch.
-ForceHELO Boolean The ForceHELO parameter specifies whether HELO is sent instead of the default EHLO. Valid values are $true or $false. The default value is $false.
-Fqdn Fqdn The Fqdn parameter specifies the FQDN used as the source server for connected messaging servers that use the Send connector to receive outgoing messages. The value of this parameter is displayed to connected...
-FrontendProxyEnabled Boolean The FrontendProxyEnabled parameter routes outbound messages through the CAS server, where destination specific routing, such as DNS or IP address, is set, when the parameter is set to $true.
-IgnoreSTARTTLS Boolean The IgnoreSTARTTLS parameter specifies whether to ignore the StartTLS option offered by a remote sending server. This parameter is used with remote domains. This parameter must be set to $false if the RequireTLS...
-Internal SwitchParameter The Internal switch specifies the Internal usage type. You don't need to specify a value with this switch.
-Internet SwitchParameter The Internet switch specifies the Internet usage type. You don't need to specify a value with this switch.
-IsCoexistenceConnector Boolean The IsCoexistenceConnector parameter specifies whether this Send connector is used for secure mail flow between your on-premises deployment and your Microsoft 365 organization. The default value is $false.
-IsScopedConnector Boolean The IsScopedConnector parameter specifies the availability of the connector to other Mailbox servers with the Transport service. When the value of this parameter is $false, the connector can be used by all Mailbox...
-LinkedReceiveConnector ReceiveConnectorIdParameter The LinkedReceiveConnector parameter specifies whether to force all messages received by the specified Receive connector out through this Send connector. The value of LinkedReceivedConnector can use any of the...
-MaxMessageSize Unlimited The MaxMessageSize parameter specifies the maximum size of a message that can pass through a connector. The default value is 25 MB.
-Partner SwitchParameter The Partner switch specifies the Partner usage type. You don't need to specify a value with this switch.
-Port Int32 The Port parameter specifies the port number for smart host forwarding, if you specify a value in the SmartHosts parameter. The valid input range is an integer from 0 through 65535. The default value is 25. In most...
-ProtocolLoggingLevel ProtocolLoggingLevel The ProtocolLoggingLevel parameter specifies whether to enable protocol logging. Verbose enables protocol logging. None disables protocol logging. The location of the Send connector protocol logs for all Send...
-RequireOorg Boolean This parameter is reserved for internal Microsoft use.
-RequireTLS Boolean The RequireTLS parameter specifies whether all messages sent through this connector must be transmitted using TLS. The default value is $false.
-SmartHostAuthMechanism AuthMechanisms The SmartHostAuthMechanism parameter specifies the smart host authentication mechanism to use for authentication with a remote server. Use this parameter only when a smart host is configured and the DNSRoutingEnabled...
-SmartHosts MultiValuedProperty The SmartHosts parameter specifies the smart hosts the Send connector uses to route mail. This parameter is required if you set the DNSRoutingEnabled parameter to $false and it must be specified on the same command...
-SmtpMaxMessagesPerConnection Int32 The SmtpMaxMessagesPerConnection parameter specifies the maximum number of messages the server can send per connection.
-SourceIPAddress IPAddress The SourceIPAddress parameter specifies the local IP address to use as the endpoint for an SMTP connection to a remote messaging server. The default IP address is 0.0.0.0. This value means that the server can use any...
-SourceTransportServers MultiValuedProperty The SourceTransportServers parameter specifies the names of the Mailbox servers that can use this Send connector. This parameter isn't valid for Send connectors configured on an Edge server.
-TlsAuthLevel TlsAuthLevel The TlsAuthLevel parameter specifies the TLS authentication level that is used for outbound TLS connections established by this Send connector. Valid values are:
-TlsCertificateName SmtpX509Identifier The TlsCertificateName parameter specifies the X.509 certificate to use for TLS encryption. A valid value for this parameter is `"<I>X.500Issuer<S>X.500Subject"`. The X.500Issuer value is found in the certificate's...
-TlsDomain SmtpDomainWithSubdomains The TlsDomain parameter specifies the domain name that the Send connector uses to verify the FQDN of the target certificate when establishing a TLS secured connection.
-Usage UsageType The Usage parameter specifies the default permissions and authentication methods assigned to the Send connector. The valid values are as follows: Custom, Internal, Internet, or Partner. The default is Custom.
-UseExternalDNSServersEnabled Boolean The UseExternalDNSServersEnabled parameter specifies whether this Send connector uses the external DNS list specified by the ExternalDNSServers parameter of the Set-TransportService cmdlet. The default value is $false.
-WhatIf SwitchParameter The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.