Disabling Exchange Admin Center (EAC)

Share this:

Hi Friday Lovers!!! It’s finally here, eh?

In Today’s post we are going to disable EAC and that can be done easily through Exchange Management Shell and the Set-ECPVirtualDirectory cmdlet.

Why you should do that? Well, depends of your security requirements. You may have a policy that does not allow any management outside of your network or something like that.

Anyways, here is the two cmdlets, in the first one I find the current value and afterwards I change it. Also a IISReset is a good thing to force the refresh.

image

How about the results? If any admin that used to have the full admin console tries to log on using ECP he will have the same logon page, no surprises here.

image

However after logging then he will have a surprise where he will be able to manage just his personal mailbox settings not the organization.

image

Written by Anderson Patricio

Anderson Patricio

Anderson Patricio is a Canadian MVP in Cloud and Datacenter Management, and Office Server and Services, besides the Microsoft Award he also holds a Solutions Master (MCSM) in Exchange and several other certifications. Anderson has been contributing to the Microsoft Community with articles, tutorials, blog posts, twitter, forums and book reviews. He is a regular contributor here at ITPROCentral.com, MSExchange.org, Techgenix.com and Anderson Patricio.org (Portuguese).