
UPD 02
The solution to the problem turned out to be implicit. Office Online does not work with Windows authorization, only with Claims.
STEP 01
Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction SilentlyContinue
$WebAppURL = "http://sharepoint2019.crescent.com/"
$accountid = "crescent\SPAdmin"
Get the web application
$WebApp = Get-SPWebApplication $WebAppURL
convert classic mode authentication to claims based authentication sharepoint 2010
$WebApp.UseClaimsAuthentication = $true
$WebApp.Update()
$account = (New-SPClaimsPrincipal -identity $accountid -identitytype 1).ToEncodedString()
Crate FULL Access Web Application User Policy
$ZonePolicies = $WebApp.ZonePolicies("Default")
$Policy = $ZonePolicies.Add($account,"PSPolicy")
$FullControl=$WebApp.PolicyRoles.GetSpecialRole("FullControl")
$Policy.PolicyRoleBindings.Add($FullControl)
$WebApp.Update()
Migrate users from Classic to Claims
$WebApp.MigrateUsers($true)
$WebApp.ProvisionGlobally()
STEP 02
Convert-SPWebApplication -Identity "http://sharepoint2019.crescent.com/" -From Legacy -To Claims -RetainPermissions