In the PowerShell model of deployment, Workspace ONE UEM adopts a PowerShell administrator role. Workspace ONE UEM issues commands to the Exchange ActiveSync (EAS) infrastructure to permit or deny email access based on the settings defined in the UEM console.
PowerShell deployments do not require a separate email proxy server, and the installation process is simple. Once installed, Workspace ONE UEM sends commands to PowerShell in accordance with the established email policies, and PowerShell runs the actions. The PowerShell model is for organizations using Microsoft Exchange 2010,2013, 2016, or Office 365 environments.
The diagram highlights the communications flow for an implementation with Office 365. For Office 365 implementation, Workspace ONE UEM does not recommend routing the PowerShell traffic through the VMware Enterprise Systems Connector.
Exchange 2010/2013/2016 for Workspace ONE UEM Cloud-Based Deployments
The following diagram highlights the communications flow for a cloud-based implementation with hosted Exchange 2010/2013/2016 deployments. Workspace ONE UEM recommends installation of one VMware Enterprise Systems Connector per MEG Q server to avoid processing delays.
Exchange 2010/2013/2016 for Workspace ONE UEM On-Premises Deployments
The following diagram highlights the communications flow for an on-premises implementation with hosted Exchange 2010/2013/2016 deployments.
If you want to enable PowerShell with an outbound proxy, then you must configure WinHTTP on the Workspace ONE UEM server to use the proxy. Workspace ONE UEM automatically uses WinHTTP proxy configuration to establish a PowerShell session.