Exchange

Quarantine Administrator Role is coming to Exchange Online

Andres Bohren
Hi All, A few days ago, Microsoft has anounced the "Quarantine Admin" Role. In the Future you need to be Member of the "Quarantine Admin" Rolegroup to manage the Quarantine. Manage quarantined messages and files as an admin in EOP https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/manage-quarantined-messages-and-files?view=o365-worldwide The "Quarantine Administrator" Role is not yet visible in my Tenant. If you don't want to wait, you can already create a Custom Role like i did here with the "

Message Recall Improvement in Exchange Online

Andres Bohren
Hi All, The Message Recall Feature is based on Outlook Client. Now with millions of Mailboxes in Exchange Online some parts of the Feature can now deployed directly on the Mailbox in Exchange Online. Message Recall in Exchange Online https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=Message%2CRecall Check what's currently set Get-OrganizationConfig | fl RecallReadMessagesEnabled Enable Recall Message on the Server side Set-OrganizationConfig -RecallReadMessagesEnabled $true Get-OrganizationConfig | fl RecallReadMessagesEnabled EAC > Settings > Mail Flow > Message Recall > Allow users to recall messages read by the recipient

Exchange Server October 2022 Security Updates released

Andres Bohren
Hi All, A few hours ago the Exchange Team released Security Updates for Exchange 2016 and 2019. NOTE: The October 2022 SUs do not contain fixes for the zero-day vulnerabilities reported publicly on September 29, 2022 (CVE-2022-41040 and CVE-2022-41082). Released: October 2022 Exchange Server Security Updates https://techcommunity.microsoft.com/t5/exchange-team-blog/released-october-2022-exchange-server-security-updates/ba-p/3646263 Description of the security update for Microsoft Exchange Server 2019 and 2016: October 11, 2022 (KB5019077) https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-microsoft-exchange-server-2019-and-2016-october-11-2022-kb5019077-b5ae8793-5e5c-4faa-972d-9228945973e5 Security Update For Exchange Server 2016 CU23 (KB5019077)

Get-Mailprotection published to PowerShell Gallery

Andres Bohren
Hi All, My work as a Cloud Engineer is around M365 and Azure. As a Messaging Expert, i often use DNS to Query for diffrent Records like MX, SPF, DKIM, DMARC etc. A while ago, i startet to create a Script that checks all these Settings for a specific Domain. The Script has been published to my GitHub Repo. The Script checks diffrent DNS Records about a Domain - mostly about Mailsecurity Settings.

Outlook Rules Quota

Andres Bohren
Hi All, Recently i had the following Error Message in Outlook: DE Mindestens eine Regel kann nicht in Microsoft Exchange hochgeladen werden und wurde deaktiviert. Die Ursache sind möglicherweise nicht unterstützte Parameter oder mangelnder Speicherplatz. EN One or more rules couldn't be uploaded to Exchange server and have been deactivated. This could be because some of the parameters aren't supported or there's insufficient space to store all your rules. Let's have a look at the Mailbox and the Rules Quota - it's already set to the Maximum of 256 KB.

Outlook for Windows - External Mails are marked better

Andres Bohren
Hi All, It's been a while since i activated External Mails in Exchange Online Set-ExternalInOutlook -Enabled $true I have not updated my Office Version since last week. But when i restarted Outlook today a saw a new "External" Tag in the Message Overview. Seems to be there was a Change on 10. September 2022 On the Message itself - it's still the same Tip In OWA nothing changed and it looks still the same

Outlook for Windows Signature cloud settings

Andres Bohren
Hi All, Now it's finally have come true: Signatures from Outlook for Windows and OWA are shared. M365 Roadmap Signature cloud settings https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=signature%20cloud%20settings Let's check the Signatures on my Outlook for Windows Client You can have multiple Signatures in Outlook And they are now available in Exchange Online OWA Sadly Outlook Mobile does not support it. Or not yet - don't know. But that would be much appreciated if signatures would be consistent across Clients.

Exchange Server Zero-Day - Emergency Mitigation Service applied URL Rewrite

Andres Bohren
Hi All, On 29. September Microsoft reported Zero-Day Vulnerabilities in Exchange Server and published the Advisory below. Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server https://techcommunity.microsoft.com/t5/exchange-team-blog/customer-guidance-for-reported-zero-day-vulnerabilities-in/ba-p/3641494 Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/ I was wondering if the Exchange Server Emergency Mitigation Service kicked in. But until FR Evening 30 September there was just the default Rule https://blog.icewolf.ch/archive/2021/09/29/exchange-server-emergency-mitigation.aspx ."C:\Program Files\Microsoft\Exchange Server\V15\scripts\Get-Mitigations.ps1" When i checked today, a new Rule has been deployed .

ExchangeOnlineManagement 3.0.0 PowerShell Module is GA

Andres Bohren
Hi All, Finally the ExchangeOnlineManagement PowerShell Module V3 has been released. You can find the newest Module in the PowerShell Gallery ExchangeOnlineManagement 3.0.0 https://www.powershellgallery.com/packages/ExchangeOnlineManagement/3.0.0 It is REST Based and does not require WinRM Basic Authentication on the Client anymore Get Installed Module and what is available in the PowerShell Gallery Get-InstalledModule ExchangeOnlineManagement Find-Module ExchangeOnlineManagement Uninstall the old Module and install the new Module Uninstall-Module ExchangeOnlineManagement -Force Install-Module ExchangeOnlineManagement Get-InstalledModule ExchangeOnlineManagement

How to set the DMARC Record for <tenant>.onmicrosoft.com Address

Andres Bohren
Hi All, Did you know, that you can set DMARC Records for your onmicrosoft.com Address in M365? How to enable DMARC Reporting for Microsoft Online Email Routing Address (MOERA) and parked Domains https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/step-by-step-guides/how-to-enable-dmarc-reporting-for-microsoft-online-email-routing-address-moera-and-parked-domains?view=o365-worldwide In the M365 Admin Center go to Domains https://admin.microsoft.com/Adminportal/Home#/Domains Select the onmicrosoft.com Domain Select "DNS Records" and "Add record" Now you can add your DMARC Configuration Now you can Check with nslookup nslookup -type=txt _dmarc.<m365tenant>.onmicrosoft.com Regards Andres Bohren