Exchange

Exchange Online new Message Recall

Exchange Online new Message Recall

Andres Bohren
Hi All, In the last few Weeks the new funcionality of the Message Recall in Exchange Online have been arrived at my Tenant. Already in February 2023 the Exchange Team Blog has announced the Cloud-based Message Recall in Exchange Online. To Enable that you need to configure it in the Exchange Online Organization Config or by now it should alredy be deployed Set-OrganizationConfig -MessageRecallEnabled $true Set-OrganizationConfig -RecallReadMessagesEnabled $true Get-OrganizationConfig | fl *recall* You can see part’s of it also in Exchange Admin Center Settings

ExchangeOnlineManagement 3.2.0-Preview3 released

Andres Bohren
Hi All, Yesterday Microsoft has released the ExchangeOnlineManagement 3.2.0-Preview3 to PowerShell Gallery. ExchangeOnlineManagement 3.2.0-Preview3 https://www.powershellgallery.com/packages/ExchangeOnlineManagement/3.2.0-Preview3 Release Notes: v3.2.0-Preview3 : 1. Bug fixes in Disconnect-ExchangeOnline. 2. Bug fixes in Set-DefaultTenantMyAnalyticsFeatureConfig. 3. Preview of REST based cmdlets for SCC powershell: Added UseRPSSession parameter to Connect-IPPSSession Let's check what Module is installed and whats available from the PowerShell Gallery Get-InstalledModule ExchangeOnlineManagement -AllVersions Find-Module ExchangeOnlineManagement -AllowPrerelease Now let's uninistall the old Preview2 Module and install Preview3 Uninstall-Module ExchangeOnlineManagement -AllowPrerelease -Force Install-Module ExchangeOnlineManagement -AllowPrerelease -Force Get-InstalledModule ExchangeOnlineManagement -AllVersions Now you can use finally use REST Based Connection for Security and Compliance.

New Exchange Online Quarantine Notification frequency

Andres Bohren
Hi All, Almost a Year ago, Microsoft has anounced faster Quarantine Options. They anouced 1 Hour and changed it later to 4 Hours. This change has now arrived in my Tenant. Simplifying the Quarantine Experience - Part Two https://techcommunity.microsoft.com/t5/microsoft-defender-for-office/simplifying-the-quarantine-experience-part-two/bc-p/3806804/ Microsoft 365 Defender > Threat Policies > Quarantine Policy Or go direct to the Quarantine policy and select "Global settings" https://security.microsoft.com/quarantinePolicies Now you can change the Quaranine Notification frequency between 4 Hours / Daily / Weekly

Exchange Online sends now DMARC Aggregate Reports

Andres Bohren
Hi All, As a Messaging Engineer / Architect i am well familiar with all the Messaging Standards that help to improve the Security of your Domain. Check out my Get-Mailprotection.ps1 Script SPF / DKIM / DMARC https://blog.icewolf.ch/archive/2015/02/28/spf-dkim-dmarc.aspx DMARC Advisor - so far the best DMARC Reporting Tool https://blog.icewolf.ch/archive/2021/11/29/dmarc-advisor.aspx Lately there has been an Anoucement that Exchange Online will also send DMARC Aggregate Reports (RUA) if the MX Points directly to Exchange Online.

HonorDmarcPolicy in ExchangeOnline vanished from GUI

Andres Bohren
Hi all, Did you notice the "Honor DMARC Policy" in the Microsoft 365 Defender AntiPhishing Policy? A few weeks ago there was a Setting in the GUI but that has been vanisched there. The Setting is still available with PowerShell. As you can imagine, i was very surprised that this Setting is no longer in the GUI A few Weeks ago, there was this Setting in the Policy Now it's only available in PowerShell Get-AntiPhishPolicy | ft name Get-AntiPhishPolicy -Identity "

Add OneNote Fileextensions to the Exchange Online Malware Filter

Andres Bohren
Hi All, I've heard from OneNote Phishing in the last few Months. That seems to be a new way of Attack. Sadly i don't know the exact details of that Attack. What came to my mind was to block OneNote Attachments in the Malware Filter. Microsoft: Besserer Schutz vor riskantem OneNote-Phishing geplant https://www.heise.de/news/Microsoft-Besserer-Schutz-vor-riskantem-OneNote-Phishing-geplant-7543318.html Also Microsoft want's to improve here according to the M 365 Roadmap https://www.microsoft.com/de-ch/microsoft-365/roadmap?filters=&searchterms=122277 I've checked the OneNote file Extensions on my Computer

ExchangeOnlineManagement 3.2.0-Preview2 released

Andres Bohren
Hi All, Yesterday a new Preview Version of the ExchangeOnlineManagement PowerShell Module has been released to the PowerShell Gallery. ExchangeOnlineManagement 3.2.0-Preview2 https://www.powershellgallery.com/packages/ExchangeOnlineManagement/3.2.0-Preview2 Check what Module is installed and what's available from the PowerShell Gallery. Get-InstalledModule ExchangeOnlineManagement Find-Module ExchangeOnlineManagement -AllowPrerelease To install the Module Side by Side you have to use the -Force Parameter Install-Module ExchangeOnlineManagement -AllowPrerelease -Force Get-InstalledModule ExchangeOnlineManagement -AllVersions Make sure the new Module is loaded Import-Module ExchangeOnlineManagement Get-Module

Microsoft Outlook Elevation of Privilege Vulnerability (CVE-2023-23397)

Andres Bohren
Hi All, There is a Outlook Escalation of Privilege Vulnerability in Outlook. Tony Redmond has explained that very well Outlook Elevation of Privilege Vulnerability Leaks Credentials via NTLM https://practical365.com/cve-2023-23397-ntlm-vulnerability/ Microsoft Outlook Elevation of Privilege Vulnerability https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397 Exchange CSS has released a Script to test and mitigate CVE-2023-23397 script https://microsoft.github.io/CSS-Exchange/Security/CVE-2023-23397/ Exchange On Prem You need to have an RBAC Admin Role that allows Application Impersonation and assign an Account. If you don't have that Role you can create it New-RoleGroup -Name "

March 2023 Exchange Server Security Updates

Andres Bohren
Hi All, Today the March 2023 Exchange Server Security Updates have been released. Released: March 2023 Exchange Server Security Updates https://techcommunity.microsoft.com/t5/exchange-team-blog/released-march-2023-exchange-server-security-updates/ba-p/3764224 Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: March 14, 2023 (KB5024296) https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-microsoft-exchange-server-2019-2016-and-2013-march-14-2023-kb5024296-e13b0369-2102-4c95-bee2-456514630727 Security Update For Exchange Server 2016 CU23 SU7 (KB5024296) https://www.microsoft.com/en-us/download/details.aspx?id=105091 The downloaded exe File extracts then starts the Installation in a elevated Promt After the Security Update is installed, it is a good idea to restart the Server.

M365 Groups dumped in Outlook for Windows?

Andres Bohren
Hi All, Yesterday i stumbled across something odd. Did not see the M365 Groups in Outlook for Windows anymore. They seem to be gone in the newest Version. Let's start at the beginning. Office in the Current Channel Outlook Profile is set up with Cached Mode (without Chached Mode you don't see the M365 Groups either). As you can see the Groups are listed here The cached Files are stored in C:\Users\<Username>\AppData\Local\Microsoft\Outlook