Hello,

I would like to know if there is a way, without changing Exchange default security configuration, to open a remote powershell from a computer not joined in the Exchange domain but in the local network. By default, Exchange seems to only allow Kerberos as the authentication mechanism.

I'm really not a specialist in Kerberos, I've looked ont other forums, but it seems it is possible to authenticate with Kerberos if some config is done on the DC like a setspn and a keytab file.

Does anyone has already been confronted to the same issue ?

Thanks

• Moved by Jason Johnston [MSFT]Microsoft employee Friday, May 01, 2015 1:00 PM Not a development question.

Hi Ed,

Thanks for your reply.

In my previous tests, opening a remote powershell with Kerberos from a desktop not joined to a domain was throwing an exception. I'll make some new tests.

I use cmdlets in scripts like the following.  The computers the scripts run on are domain-joined, but not to the domain to which they are connecting.

$sourceCred =  Get-Credential
$SourceSession = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "http://server1.clownpenis.fart/powershell" -Credential $SourceCred -Authentication Kerberos
Import-PSSession -Session $SourceSession