{"id":6206,"date":"2022-09-29T05:28:55","date_gmt":"2022-09-29T05:28:55","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=6206"},"modified":"2026-05-12T06:19:58","modified_gmt":"2026-05-12T06:19:58","slug":"using-powershell-to-send-emails-via-365","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/using-powershell-to-send-emails-via-365","title":{"rendered":"Using Powershell to Send Emails via 365"},"content":{"rendered":"\n

Finally can do this via OAuth ( No Username and password Azure APP ) AND Non-Interactive<\/p>\n\n\n\n

https:\/\/github.com\/richfaj\/SmtpClientDiag\/blob\/master\/SmtpClientDiag.psm1<\/a><\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n
$clientID = \"XXXXXXXXXXX\"\n$Clientsecret = \"XXXXXXXXXXX\"\n$tenantID = \"XXXXXXXXXXX\"\n\n$MailSender = \"test@test.com\"\n\n#Connect to GRAPH API\n$tokenBody = @{\n    Grant_Type    = \"client_credentials\"\n    Scope         = \"https:\/\/graph.microsoft.com\/.default\"\n    Client_Id     = $clientId\n    Client_Secret = $clientSecret\n}\n$tokenResponse = Invoke-RestMethod -Uri \"https:\/\/login.microsoftonline.com\/$tenantID\/oauth2\/v2.0\/token\" -Method POST -Body $tokenBody\n$headers = @{\n    \"Authorization\" = \"Bearer $($tokenResponse.access_token)\"\n    \"Content-type\"  = \"application\/json\"\n}\n\n#Send Mail    \n$URLsend = \"https:\/\/graph.microsoft.com\/v1.0\/users\/$MailSender\/sendMail\"\n$BodyJsonsend = @\"\n                    {\n                        \"message\": {\n                          \"subject\": \"Hello World from Microsoft Graph API\",\n                          \"body\": {\n                            \"contentType\": \"HTML\",\n                            \"content\": \"This Mail is sent via Microsoft <br>\n                            GRAPH <br>\n                            API<br>\n                            \n                            \"\n                          },\n                          \"toRecipients\": [\n                            {\n                              \"emailAddress\": {\n                                \"address\": \"test@test.com\"\n                              }\n                            }\n                          ]\n                        },\n                        \"saveToSentItems\": \"false\"\n                      }\n\"@\n\nInvoke-RestMethod -Method POST -Uri $URLsend -Headers $headers -Body $BodyJsonsend<\/code><\/pre>\n\n\n\n
SMTP Will be Decommed Soon ( Below ) <\/strong><\/p>\n\n\n\n
    \n
  1. Make sure the account has an Exchange License<\/li>\n\n\n\n
  2. Turn Security Default Off 
    \"\"<\/li>\n\n\n\n
  3. Create an App Password for the account. MFA and Modern auth will Obviously be enabled for the account so you won\u2019t be able to use thatIn Azure AD \"\"Get App Password for account
    \"\"
    \"\"
    \"\"<\/li>\n<\/ol>\n\n\n\n
      \n
    1. Log into your Office 365 Admin account<\/li>\n\n\n\n
    2. Click the Green HELP & SUPPORT button in the bottom left corner<\/li>\n\n\n\n
    3. In the search bar, type:  Diag: Enable Basic Auth in EXO<\/li>\n\n\n\n
    4. Click the Blue arrow to search<\/li>\n\n\n\n
    5. Click the RUN TESTS button<\/li>\n\n\n\n
    6. Once the tests are done, select SMTP in the Protocol to Opt Out dropdown.<\/li>\n\n\n\n
    7. Click the check box below it.<\/li>\n\n\n\n
    8. Click the UPDATE SETTINGS button<\/li>\n<\/ol>\n\n\n\n
      #New Security Policy\n\nNew-AuthenticationPolicy -Name \"Allow Basic Auth for SMTP\"\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthWebServices:$false\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthOutlookService:$false\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthReportingWebServices:$false\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthActiveSync:$false\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthRest:$false\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthPowershell:$false\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthMapi:$false\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthOfflineAddressBook:$false\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthAutodiscover:$false\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthRpc:$false\nSet-AuthenticationPolicy -Identity \"Allow Basic Auth for SMTP\" -AllowBasicAuthSmtp:$true\n\n\n#Apply Security Policy \n\nSet-User -Identity smtp@domain.com -AuthenticationPolicy \"Allow Basic Auth for SMTP\"\n\n#Turn on SMTP AUTH\n\nSet-CASMailbox -Identity smtp@domain.com -SmtpClientAuthenticationDisabled $false<\/code><\/pre>\n\n\n\n
      # Enable TLS 1.2 as Security Protocol\n[Net.ServicePointManager]::SecurityProtocol = `\n    [Net.SecurityProtocolType]::Tls12 ;\n\n#Username is UPN \\ Email\n#APP Password for password\n\n$creds = Get-Credential\n\nSend-MailMessage -From smtp@domain.com -To test@test.com -Subject \"Test Email\" -Body \"Test SMTP Service from Powershell on Port 587\" -SmtpServer smtp.office365.com -Credential $creds -Usessl -Port 587<\/code><\/pre>\n\n\n\n
      # Parameters\n$fromEmail = \"XXXXXXXXX\"  # Your Office 365 email\n$toEmail = \"XXXXXXXXX\"     # Recipient's email\n$subject = \"Test Email via SMTP\"\n$body = \"This is a test email sent from PowerShell using an HVE account.\"\n$smtpServer = \"smtp.hve.mx.microsoft\"\n$smtpPort = 587\n$username = \"XXXXXXXXX\"   # Your Office 365 email\n\n$password = \"XXXXXXXXX\"  # Use app password if MFA is enabled, or regular password if basic auth is allowed\n\n\n\n# Create credentials\n$securePassword = ConvertTo-SecureString $password -AsPlainText -Force\n$credentials = New-Object System.Management.Automation.PSCredential ($username, $securePassword)\n\n\n\n\ntry {\n    # Send email using Send-MailMessage\n    Send-MailMessage `\n        -From $fromEmail `\n        -To $toEmail `\n        -Subject $subject `\n        -Body $body `\n        -SmtpServer $smtpServer `\n        -Port $smtpPort `\n        -UseSsl `\n        -Credential $credentials `\n        -ErrorAction Stop\n\n    Write-Host \"Email sent successfully!\" -ForegroundColor Green\n}\ncatch {\n    Write-Host \"Error sending email: $_\" -ForegroundColor Red\n}<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
      Finally can do this via OAuth ( No Username and password Azure APP ) AND Non-Interactive https:\/\/github.com\/richfaj\/SmtpClientDiag\/blob\/master\/SmtpClientDiag.psm1 SMTP Will be Decommed Soon ( Below )<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1206,2780,4007,4006,576,1176],"class_list":["post-6206","post","type-post","status-publish","format-standard","hentry","category-research","tag-1206","tag-auth","tag-mfp","tag-office365","tag-powershell","tag-smtp"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t