Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ description: "Learn how to use the Exchange Online PowerShell V3 module to conne
This article contains instructions for how to connect to Exchange Online PowerShell using the Exchange Online PowerShell module with or without multifactor authentication (MFA).

> [!TIP]
> The connection instructions in this article also apply to Exchange Online Protection PowerShell for cloud protection of on-premises email environments without cloud mailboxes.
> The connection instructions in this article also apply to [the Built-in security add-on for on-premises mailboxes](/exchange/standalone-eop/standalone-eop).

The Exchange Online PowerShell module uses modern authentication for connecting to Exchange Online PowerShell and Security & Compliance PowerShell. For more information about the Exchange Online PowerShell module, see [About the Exchange Online PowerShell module](exchange-online-powershell-v2.md).

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ description: "Admins can learn how to disable or enable access to Exchange Onlin

# Enable or disable access to Exchange Online PowerShell

Exchange Online PowerShell is the administrative interface that enables you to manage the Exchange Online part of your Microsoft 365 organization from the command line (including many default email protections for all cloud mailboxes and protections in Microsoft Defender for Office 365).
Exchange Online PowerShell is the administrative interface that enables you to manage the Exchange Online part of your Microsoft 365 organization from the command line (including many built-in security features for all cloud mailboxes and protections in Microsoft Defender for Office 365).

By default, all accounts in Microsoft 365 are allowed to use Exchange Online PowerShell. This access doesn't give users administrative capabilities. They're still limited by [role based access control (RBAC)](/exchange/permissions-exo/permissions-exo). For example, they can configure some settings on their own mailbox and manage distribution groups that they own, but not much else.

Expand Down
2 changes: 1 addition & 1 deletion exchange/docs-conceptual/exchange-cmdlet-syntax.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ ms.topic: article
ms.service: exchange-online
ms.localizationpriority: medium
ms.assetid: 85ffe9c8-7f03-4877-8e55-3cbd40228d84
description: "Learn about the structure and syntax of cmdlets in Exchange PowerShell, Exchange Online PowerShell, Security & Compliance PowerShell, and Exchange Online Protection PowerShell for cloud protection of on-premises email environments."
description: "Learn about the structure and syntax of cmdlets in Exchange PowerShell, Exchange Online PowerShell, and Security & Compliance PowerShell, and PowerShell for the Built-in security add-on for on-premises mailboxes."
---

# Exchange cmdlet syntax
Expand Down
4 changes: 2 additions & 2 deletions exchange/docs-conceptual/exchange-online-powershell-v2.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,14 +20,14 @@ description: "Admins can learn about the installation, maintenance, and design o

# About the Exchange Online PowerShell module

The Exchange Online PowerShell module (also known as the Exchange Online PowerShell V3 module or EXO V3 module since 2022) uses modern authentication and works with or without multifactor authentication (MFA) for connecting to all Exchange cloud-related PowerShell environments: Exchange Online PowerShell, Security & Compliance PowerShell, and Exchange Online Protection PowerShell for cloud protection of on-premises email environments.
The Exchange Online PowerShell module (also known as the Exchange Online PowerShell V3 module or EXO V3 module since 2022) uses modern authentication and works with or without multifactor authentication (MFA) for connecting to all Exchange cloud-related PowerShell environments: Exchange Online PowerShell, Security & Compliance PowerShell, and PowerShell for [the Built-in security add-on for on-premises mailboxes](/exchange/standalone-eop/standalone-eop).

For connection instructions using the module, see the following articles:

- [Connect to Exchange Online PowerShell](connect-to-exchange-online-powershell.md)

> [!TIP]
> Exchange Online Protection PowerShell for cloud protection of on-premises email environments uses the same connection instructions as Exchange Online PowerShell.
> Connection instructions for PowerShell in [the Built-in security add-on for on-premises mailboxes](/exchange/standalone-eop/standalone-eop) are the same as connection instructions for Exchange Online PowerShell.

- [Connect to Security & Compliance PowerShell](connect-to-scc-powershell.md)
- [App-only authentication for unattended scripts in Exchange Online PowerShell and Security & Compliance PowerShell](app-only-auth-powershell-v2.md)
Expand Down
2 changes: 1 addition & 1 deletion exchange/docs-conceptual/exchange-online-powershell.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ description: "Learn about articles that are available for using PowerShell in Ex

# Exchange Online PowerShell

Exchange Online PowerShell is the administrative interface that enables you to manage the Exchange Online part of your Microsoft 365 organization from the command line (including many default email protections for all cloud mailboxes and protections in Microsoft Defender for Office 365). For example, you can use Exchange Online PowerShell to configure mail flow rules (also known as transport rules) and connectors. The following articles provide information about using Exchange Online PowerShell:
Exchange Online PowerShell is the administrative interface that enables you to manage the Exchange Online part of your Microsoft 365 organization from the command line (including many built-in security features for all cloud mailboxes and protections in Microsoft Defender for Office 365). For example, you can use Exchange Online PowerShell to configure mail flow rules (also known as transport rules) and connectors. The following articles provide information about using Exchange Online PowerShell:

- To learn about the ExchangeOnlineManagement module that's required to connect to Exchange Online PowerShell, see [About the Exchange Online PowerShell module](exchange-online-powershell-v2.md).

Expand Down
24 changes: 12 additions & 12 deletions exchange/docs-conceptual/exchange-online-protection-powershell.md
Original file line number Diff line number Diff line change
@@ -1,36 +1,36 @@
---
title: "Exchange Online Protection PowerShell for cloud protection of on-premises email environments"
title: "PowerShell for the Built-in security add-on for on-premises mailboxes"
ms.author: chrisda
author: chrisda
manager: orspodek
ms.date: 07/11/2025
ms.date: 12/16/2025
ms.audience: Admin
audience: Admin
ms.topic: article
ms.service: exchange-powershell
ms.localizationpriority: medium
ms.assetid: f7918a88-774a-405e-945b-bc2f5ee9f748
description: "Learn about the articles available for using Exchange Online Protection PowerShell to manage cloud protection features for on-premises email environments."
description: "Learn about the articles available for using PowerShell for the Built-in security add-on for on-premises mailboxes."
---

# Exchange Online Protection PowerShell for cloud protection of on-premises email environments
# PowerShell for the Built-in security add-on for on-premises mailboxes

Exchange Online Protection PowerShell is the administrative interface that enables you to manage cloud protection features for on-premises email environments from the command line. For example, you can use Exchange Online Protection PowerShell to configure anti-spam policies, mail flow rules (also known as transport rules) and connectors to support on-premises email protection.
PowerShell is the administrative interface that enables you to manage features in [the Built-in security add-on for on-premises mailboxes](/exchange/standalone-eop/standalone-eop) from the command line. For example, you can use PowerShell to configure anti-spam policies, mail flow rules (also known as transport rules) and connectors to support on-premises email protection.

> [!TIP]
> All organizations with cloud mailboxes (Microsoft 365 A3/E3/G3, A5/E5/G5, Microsoft 365 Business Premium, etc.) use [Exchange Online PowerShell](exchange-online-powershell.md) to manage these same features for cloud email protection.
> All organizations with cloud mailboxes (Microsoft 365 A3/E3/G3, Microsoft 365 Business Standard, Microsoft 365 Business Premium, etc.) use [Exchange Online PowerShell](exchange-online-powershell.md) to manage these same features for cloud email protection.

Exchange Online Protection PowerShell for cloud protection of on-premises email environments is available in the following scenarios:
PowerShell in the Built-in security add-on for on-premises mailboxes is available in the following scenarios:

- **On-premises email environments (not just Microsoft Exchange)**: Mail from the internet passes through cloud protection and filtering before delivery to on-premises recipients. The cloud environment contains no mailboxes.
- **Exchange Enterprise CAL with Services**: The licenses for your on-premises Exchange organization include Exchange Enterprise CAL with Services (cloud protection of on-premises mailboxes is one of the services).
- **On-premises email environments (not just Microsoft Exchange)**: Mail from the internet passes through the Microsoft cloud organization for protection and filtering before delivery to on-premises recipients. The Microsoft cloud organization contains no cloud mailboxes.
- **Exchange Enterprise CAL with Services**: The licenses for your on-premises Exchange organization include Exchange Enterprise CAL with Services (the Built-in security add-on for on-premises mailboxes is one of the services).

The following articles provide information about using Exchange Online Protection PowerShell for cloud protection of on-premises email environments:
The following articles provide information about using PowerShell in the Built-in security add-on for on-premises mailboxes:

- To learn about the ExchangeOnlineManagement module that's required to connect to Exchange Online Protection PowerShell, see [About the Exchange Online PowerShell module](exchange-online-powershell-v2.md).
- To learn about the ExchangeOnlineManagement module that's required to connect to PowerShell, see [About the Exchange Online PowerShell module](exchange-online-powershell-v2.md).

To learn about what's new in the Exchange Online PowerShell module, see [What's new in the Exchange Online PowerShell module](whats-new-in-the-exo-module.md).

- The connection instructions for Exchange Online Protection PowerShell and Exchange Online PowerShell are the same. For instructions, see [Connect to Exchange Online PowerShell](connect-to-exchange-online-powershell.md).
- The connection instructions for PowerShell in the Built-in security add-on for on-premises mailboxes and in Exchange Online PowerShell are the same. For instructions, see [Connect to Exchange Online PowerShell](connect-to-exchange-online-powershell.md).

- To learn about the structure and layout of the cmdlet reference articles, see [Exchange cmdlet syntax](exchange-cmdlet-syntax.md).
2 changes: 1 addition & 1 deletion exchange/docs-conceptual/index.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ landingContent:
url: /powershell/exchange/exchange-online-powershell
- text: Security & Compliance PowerShell
url: /powershell/exchange/scc-powershell
- text: Exchange Online Protection PowerShell for cloud protection of on-premises email environments
- text: PowerShell for the Built-in security add-on for on-premises mailboxes
url: /powershell/exchange/exchange-online-protection-powershell
- title: Connect
linkLists:
Expand Down
2 changes: 1 addition & 1 deletion exchange/docs-conceptual/scc-powershell.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,6 +37,6 @@ Security & Compliance PowerShell contains the following types of cmdlets:
- Basic cmdlets that are also available in Exchange Online PowerShell (for example, [Get-User](/powershell/module/exchangepowershell/get-user), and [Get-RoleGroup](/powershell/module/exchangepowershell/get-rolegroup)).
- A few cmdlets that correspond to default protections for cloud mailboxes and protections in Microsoft Defender for Office 365 in the Microsoft Defender portal (for example, [Set-SecOpsOverridePolicy](/powershell/module/exchangepowershell/set-secopsoverridepolicy)).

Cmdlets for most EOP and Defender for Office 365 security features (for example, [anti-spam policies](/defender-office-365/anti-spam-protection-about)) are available only in [Exchange Online PowerShell](exchange-online-powershell.md).
Cmdlets for most built-in security features for all cloud mailboxes and Defender for Office 365 security features (for example, [anti-spam policies](/defender-office-365/anti-spam-protection-about)) are available only in [Exchange Online PowerShell](exchange-online-powershell.md).

Check the **Applies to** value in the cmdlet references article to verify the PowerShell environment where the cmdlet actually resides.
4 changes: 2 additions & 2 deletions exchange/docs-conceptual/toc.yml
Original file line number Diff line number Diff line change
Expand Up @@ -72,12 +72,12 @@
href: client-advanced-settings.md
- name: What's new in the Exchange Online PowerShell module
href: whats-new-in-the-exo-module.md
- name: Exchange Online Protection PowerShell for cloud protection of on-premises email environments
- name: PowerShell for the Built-in security add-on for on-premises mailboxes
href: exchange-online-protection-powershell.md
items:
- name: About the Exchange Online PowerShell module
href: exchange-online-powershell-v2.md
- name: Connect to Exchange Online Protection PowerShell
- name: Connect to PowerShell for the Built-in security add-on for on-premises mailboxes
href: connect-to-exchange-online-powershell.md
- name: Exchange cmdlet syntax
href: exchange-cmdlet-syntax.md
Expand Down
8 changes: 4 additions & 4 deletions exchange/docs-conceptual/whats-new-in-the-exo-module.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ description: "Learn about the new features and functionality available in the la

# What's new in the Exchange Online PowerShell module

This article lists new features in the Exchange Online PowerShell module used for connecting to Exchange Online PowerShell, Security & Compliance PowerShell, and Exchange Online Protection PowerShell for cloud protection of on-premises email environments. Features that are currently in preview are denoted with **(preview)**.
This article lists new features in the Exchange Online PowerShell module used for connecting to Exchange Online PowerShell, Security & Compliance PowerShell, and PowerShell for [the Built-in security add-on for on-premises mailboxes](/exchange/standalone-eop/standalone-eop). Features that are currently in preview are denoted with **(preview)**.

## August 2025

Expand Down Expand Up @@ -88,7 +88,7 @@ This article lists new features in the Exchange Online PowerShell module used fo

- [Version 3.2.0](https://www.powershellgallery.com/packages/ExchangeOnlineManagement/3.2.0) has been released.

- [Virtually all](https://techcommunity.microsoft.com/t5/exchange-team-blog/deprecation-of-remote-powershell-rps-protocol-in-security-and/ba-p/3815432) Security & Compliance PowerShell cmdlets are now backed by the REST API, and REST API is used by default. To connect using remote PowerShell mode (which requires [Basic authentication in WinRM](exchange-online-powershell-v2.md#turn-on-basic-authentication-in-winrm)), use the _UseRPSSession_ switch in the **Connect-IPPSSession** command.
- [Virtually all](https://techcommunity.microsoft.com/t5/exchange-team-blog/deprecation-of-remote-powershell-rps-protocol-in-security-and/ba-p/3815432) Security & Compliance PowerShell cmdlets are now backed by the REST API, and REST API is used by default. To connect using remote PowerShell mode (which requires Basic authentication in WinRM), use the _UseRPSSession_ switch in the **Connect-IPPSSession** command.

For information about what's in this release, see [Version 3.2.0](exchange-online-powershell-v2.md#version-320).

Expand All @@ -101,7 +101,7 @@ This article lists new features in the Exchange Online PowerShell module used fo
This version supports the Preview of Security & Compliance cmdlets backed by the REST API. Some, but not all cmdlets are supported. Basic authentication in WinRM is not required in Security & Compliance PowerShell for REST API cmdlets.

> [!NOTE]
> The default value of the _UseRPSSession_ switch in **Connect-IPSSession** is now the same as **Connect-ExchangeOnline**. To connect in REST API mode, don't use the _UseRPSSession_ switch in the **Connect-IPPSSession** command. To connect using remote PowerShell mode (which requires [Basic authentication in WinRM](exchange-online-powershell-v2.md#turn-on-basic-authentication-in-winrm)), use the _UseRPSSession_ switch in the **Connect-IPPSSession** command.
> The default value of the _UseRPSSession_ switch in **Connect-IPSSession** is now the same as **Connect-ExchangeOnline**. To connect in REST API mode, don't use the _UseRPSSession_ switch in the **Connect-IPPSSession** command. To connect using remote PowerShell mode (which requires Basic authentication in WinRM), use the _UseRPSSession_ switch in the **Connect-IPPSSession** command.
>
> REST API connections in the EXO V3 module require the PowerShellGet and PackageManagement modules. For more information, see [PowerShellGet for REST-based connections in Windows](exchange-online-powershell-v2.md#powershellget-for-rest-api-connections-in-windows).

Expand All @@ -112,7 +112,7 @@ This article lists new features in the Exchange Online PowerShell module used fo
This version supports the Preview of Security & Compliance cmdlets backed by the REST API. Some, but not all cmdlets are supported. Basic authentication in WinRM is not required in Security & Compliance PowerShell for REST API cmdlets.

> [!NOTE]
> The default value of the _UseRPSSession_ switch in **Connect-IPSSession** is opposite of **Connect-ExchangeOnline**. To connect in REST API mode, use `-UseRPSSession:$false` in the **Connect-IPPSSession** command. To connect using remote PowerShell mode (which requires [Basic authentication in WinRM](exchange-online-powershell-v2.md#turn-on-basic-authentication-in-winrm)), don't use the _UseRPSSession_ switch in the **Connect-IPPSSession** command. The default behavior will change in a later version of the module as more Security & Compliance cmdlets are available in REST API mode.
> The default value of the _UseRPSSession_ switch in **Connect-IPSSession** is opposite of **Connect-ExchangeOnline**. To connect in REST API mode, use `-UseRPSSession:$false` in the **Connect-IPPSSession** command. To connect using remote PowerShell mode (which requires Basic authentication in WinRM), don't use the _UseRPSSession_ switch in the **Connect-IPPSSession** command. The default behavior will change in a later version of the module as more Security & Compliance cmdlets are available in REST API mode.

## January 2023

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ title: Connect-ExchangeOnline
## SYNOPSIS
This cmdlet is available only in the Exchange Online PowerShell module. For more information, see [About the Exchange Online PowerShell module](https://aka.ms/exov3-module).

Use the Connect-ExchangeOnline cmdlet in the Exchange Online PowerShell module to use modern authentication to connect to Exchange Online PowerShell or Exchange Online Protection PowerShell for cloud protection of on-premises email environments. This cmdlet works for accounts with or without multi-factor authentication (MFA).
Use the Connect-ExchangeOnline cmdlet in the Exchange Online PowerShell module to use modern authentication to connect to Exchange Online PowerShell or PowerShell for the Built-in security add-on for on-premises mailboxes. This cmdlet works for accounts with or without multi-factor authentication (MFA).

To connect to Security & Compliance PowerShell, use the [Connect-IPPSSession](https://learn.microsoft.com/powershell/module/exchangepowershell/connect-ippssession) cmdlet.

Expand Down
Loading