Exchange Server PowerShell (Exchange Management Shell)
The Exchange Management Shell is built on Windows PowerShell technology and provides a powerful command-line interface that enables the automation of Exchange administration tasks. You can use the Exchange Management Shell to manage every aspect of Exchange. For example, you can create email accounts, create Send connectors and Receive connectors, configure mailbox database properties, and manage distribution groups.
You can use the Exchange Management Shell to perform every task that's available in the Exchange graphical management tools, plus things that you can't do there (for example, bulk operations). In fact, when you do something in the Exchange admin center (EAC), the Exchange Control Panel (ECP), or the Exchange Management Console (EMC), it's the Exchange Management Shell that does the work behind the scenes.
The Exchange Management Shell also provides a robust and flexible scripting platform. You can often replace long, complex Visual Basic scripts with Exchange Management Shell commands that use as little as one line of code. The Exchange Management Shell offers this flexibility because it uses an object model that's based on the Microsoft .NET Framework. This object model enables Exchange cmdlets to apply the output from one command to subsequent commands.
To start using the Exchange Management Shell immediately, see the Exchange Management Shell documentation section later in this article.
There is no Microsoft-provided module in the PowerShell Gallery for Exchange Server PowerShell. Instead, to use PowerShell in Exchange Server, you have the following options:
- Open the Exchange Management Shell on an Exchange server or that you've installed locally on your own computer using a Management tools only installation of Exchange server. For more information, see Install the Exchange Server Management Tools and Open the Exchange Management Shell.
- Open a remote PowerShell session from Windows PowerShell on your local computer. For more information, see Connect to Exchange servers using remote PowerShell.
How the Exchange Management Shell works on all Exchange server roles except Edge Transport
Whether you use the Exchange Management Shell on a local Exchange server or on an Exchange server that's located across the country, remote PowerShell does the work.
When you select the Exchange Management Shell shortcut on an Exchange server, the local instance of Windows PowerShell takes the following steps:
- Connects to the closest Exchange server (typically, the local Exchange server) using a required Windows PowerShell component called Windows Remote Management (WinRM).
- Performs authentication checks.
- Creates a remote PowerShell session for you to use.
You only get access to the Exchange cmdlets and parameters that are associated with the Exchange management role groups and management roles you're assigned. For more information about how Exchange uses role groups and roles to manage who can do what tasks, see Exchange Server permissions.
A benefit of remote PowerShell is that you can use Windows PowerShell on a local computer to connect to an Exchange server remotely by importing the Exchange cmdlets into the PowerShell session. The only requirements for the computer are:
- A supported operating system for Exchange Server.
- A supported version of the .NET Framework.
- A supported version of the Windows Management Framework (WMF), which includes WinRM and Windows PowerShell.
For details, see the following articles:
- Exchange 2019 system requirements
- Exchange 2016 system requirements
- Exchange 2013 system requirements
- Exchange 2010 system requirements
However, we recommend that you install the Exchange management tools (which includes the Exchange Management Shell) on any computer that you use to frequently manage Exchange Server. Without the Exchange management tools installed, you need to manually connect to the remote Exchange server, and you don't have access to the additional capabilities that the Exchange management tools provide.
For more information about connecting to Exchange servers without the Exchange management tools installed, see Connect to Exchange servers using remote PowerShell.
How the Exchange Management Shell works on Edge Transport servers
On Edge Transport servers, the Exchange Management Shell works differently. You typically deploy Edge Transport servers in your perimeter network, either as stand-alone servers or as members of a perimeter Active Directory domain.
When you select the Exchange Management Shell shortcut on an Exchange Edge Transport server, the local instance of Windows PowerShell creates a local PowerShell session for you to use.
Edge Transport servers don't use management roles or management role groups to control permissions. The local Administrators group controls who can configure the Exchange features on the local server.
For more information about Edge Transport servers, see Edge Transport Servers.
Exchange Management Shell documentation
The following table provides links to articles that can help you learn about and use the Exchange Management Shell.
|Open the Exchange Management Shell||Find and open the Exchange Management Shell on an Exchange server or a computer that has the Exchange management tools installed.|
|Connect to Exchange servers using remote PowerShell||Use Windows PowerShell on a local computer to connect to an Exchange server.|
|Control remote PowerShell access to Exchange servers||Learn how to block or allow users' remote PowerShell access to Exchange servers.|
|Find the permissions required to run any Exchange cmdlet||Find the permissions you need to run a specific cmdlet, or one or more parameters on the cmdlet.|
|Exchange cmdlet syntax||Learn about the structure and syntax of cmdlets in Exchange PowerShell.|
|Recipient filters in Exchange Management Shell commands||Learn about recipient filters in the Exchange Management Shell.|