Hi all!

I try to configure remote powershell session to Exchange server through hardware load balancer. For create session i use command like this:

$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://<load balancer virtual ip>/PowerShell/ -Authentication Kerberos

And i receive error, because not exist SPN record for load balancer virtual ip.
That username and service i should use for create SPN-record?

And also i try connect via

$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri http://<load balancer virtual ip>/PowerShell/ -Authentication Negotiate

and i receive HTTP 400 Bad request. I ask google about it, but not found something usefull. Have someone any ideas?

did you configure it at Layer 4 or Layer 7?. I think it has be on Later 7 to make it work

We have L4 balancer.

Load balancer are not a problem point now. Session init request succeeds exchange servers.  While i have troubles with authentications, not with HLB.

i sucessfully configure Kerberos authentication, using this tutorial:

https://technet.microsoft.com/en-us/library/ff808312(v=exchg.150).aspx

• Marked as answer by 22 hours 51 minutes ago

Hi Cemeh,

Thank you for your question.

We could make sure the SPN has been registered by run ADsiedit.msc in the RUN, then we could connect to Default naming context, then we could check load balandce name properties if it has SPN. We could refer to the following link:

https://msdn.microsoft.com/en-us/library/ms676922(v=vs.85).aspx

Then if the issue persist, we could run the following command:

$Session = New-PSSession -ConfigurationName Microsoft.PowerShell -ConnectionUri http://<load balancer virtual ip>/PowerShell -Authentication Kerberos

There are some links we could refer to by the following link:

Service Principal Names

http://msdn.microsoft.com/en-us/library/ms677949(VS.85).aspx

Kerberos authentication and troubleshooting delegation issues

http://support.microsoft.com/kb/907272

If there are any questions regarding this issue, please be free to let me know. 

Best Regard,

Jim