Enfore Basic or NTLM authentication

Question

Hi

We have Exchange 2016 and ADFS and the clients is outlook 2016

We enabled hybrid moderen authentication and it is enabled for all users now.

I need to enforce all internal users to use basic or Ntlm authentication when the connected to exchange 2016 and the modern authentication will be applied on External user.

Please send me your suggestions

Answer 1

Hi @yasser Mohamed AbdelMoneim ,
Based on my knowledge, in Exchange 2016 or later, MAPI over HTTP is enabled by default at the organization level, and we cannot configure separately internal and external authentication for MAPI virtual directory. We only could enable Basic or other authentication by Set-MAPIVirtualDirectory with IISAuthenticationMethods parameter. But this will change both internal and external authentication methods.
In addition, according to the Microsoft official article, Microsoft recommend that you always have the virtual directory configured for OAuth.
There is a similar cased you could refer to: How to set MAPI/HTTP internal and external authentication differently

----------

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.